
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa
File: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (raw, json)
Hash identifier: HaxUN7r4AyaePSzuDt2/4Dt2IifBKM121wU+Ww/9xJU=
Subject key identifier: B0:4E:3F:DB:52:54:BB:60:74:25:9E:AD:3D:4C:23:73:B5:C4:FF:19
Certificate issuer: /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Certificate serial: B8
Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa
Signing time: Fri 25 Sep 2026 07:56:45 +0000
ROA not before: Fri 25 Sep 2026 07:56:45 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 136976
IP address blocks: 103.122.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl
rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Validity
Not Before: Sep 25 07:56:45 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ab6293d-1d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:a0:98:f1:52:49:76:11:a8:39:e8:1e:da:
89:4b:8d:f8:31:4d:d8:07:f8:46:34:de:61:5d:b8:
c1:c2:4a:ba:4d:72:00:77:8e:ad:f4:b6:03:5a:09:
37:c2:03:c5:db:54:4e:b3:80:d3:34:7e:d0:00:d2:
ae:d5:ee:68:ad:77:88:94:08:56:7b:b8:2f:2d:75:
32:4d:fa:ac:73:b1:9b:82:77:7a:8a:57:b6:62:25:
68:41:b9:cb:a9:5c:30:5c:6e:d2:23:e9:1f:91:65:
cf:74:1a:1b:7f:00:a7:1b:fe:ef:2e:ab:34:12:0f:
16:43:d2:5b:01:b6:a8:a4:67:d8:c3:8d:64:ed:28:
63:1f:24:c2:f3:5f:c9:30:7a:57:cd:fc:d9:0d:a9:
ea:7f:a1:00:e0:76:cc:4a:15:06:d7:05:16:35:81:
c9:de:1a:ee:68:67:f5:b7:40:20:32:60:d6:b4:b5:
a5:bb:50:e5:10:96:23:8a:4c:6f:91:6b:4d:03:6e:
10:3f:c4:a0:16:c8:3e:9d:73:73:bb:b7:16:07:d8:
9a:d8:e7:45:5a:0f:da:b5:bd:66:6e:b9:4d:29:1c:
f3:b5:46:e1:ef:46:d6:b3:58:bc:b8:a2:d5:10:2f:
0e:0c:e8:cd:85:34:8c:23:75:0d:d3:e1:d8:7a:0b:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:3F:DB:52:54:BB:60:74:25:9E:AD:3D:4C:23:73:B5:C4:FF:19
X509v3 Authority Key Identifier:
keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.122.103.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e7:af:ce:28:08:98:7b:eb:e1:fc:45:df:32:a9:26:b7:34:
02:6a:28:a6:2e:0c:58:70:d2:8b:96:8f:7c:55:89:9c:17:10:
b1:74:56:eb:00:69:64:e7:3e:75:63:86:28:4c:97:ed:71:fd:
f5:8a:8a:76:e4:a1:2a:fc:1a:97:f6:fe:35:3c:49:d9:87:1f:
b0:ca:35:6d:9e:7a:5e:a2:dd:87:a1:3d:32:68:90:1b:82:40:
db:07:d4:49:ab:ad:66:e5:4a:0e:00:f6:9c:90:6b:e7:44:dd:
ea:47:db:27:16:06:8c:75:9b:0a:16:01:6e:d6:c6:78:c5:53:
91:d1:a4:ab:38:8c:e9:fb:8a:89:e7:15:13:49:d9:6a:a1:36:
36:a0:34:cd:d4:9a:f3:c4:2d:2c:5e:c7:39:61:bd:84:38:fe:
70:94:40:c3:8c:09:79:68:e7:cb:7d:7d:0d:fb:7d:af:4f:3d:
8a:37:74:81:7f:79:ab:14:f7:7c:9e:4e:0f:80:b8:cf:59:aa:
bb:ea:82:8c:2c:87:8f:68:e4:2a:33:c1:6e:eb:83:6f:ca:3f:
f5:e5:5d:b6:06:2d:f4:c4:5e:28:57:c1:84:83:14:c0:de:ea:
eb:19:5d:be:dc:13:95:c1:31:b8:96:54:26:08:4b:a4:3c:8a:
20:f5:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:47:41 2026 by rpki-client