
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/5FEE1DD6AE1711F18841FC405011F970.roa
File: 5FEE1DD6AE1711F18841FC405011F970.roa (raw, json)
Hash identifier: V7gLVRO1LnwpLXhQNmobUsNeJge8Hi2UtYb/lFhTJJo=
Subject key identifier: 03:4A:91:88:66:AD:0C:74:27:1F:F3:7E:6F:16:7B:31:19:14:DB:6B
Certificate issuer: /CN=A91C9B7D/serialNumber=B6E6067A83C2AB959CA981BAAFCF950C5224F99C
Certificate serial: 02
Authority key identifier: B6:E6:06:7A:83:C2:AB:95:9C:A9:81:BA:AF:CF:95:0C:52:24:F9:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/5FEE1DD6AE1711F18841FC405011F970.roa
Signing time: Fri 11 Sep 2026 19:31:24 +0000
ROA not before: Fri 11 Sep 2026 19:31:24 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 11174
IP address blocks: 103.252.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.crl
rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B7D, serialNumber=B6E6067A83C2AB959CA981BAAFCF950C5224F99C
Validity
Not Before: Sep 11 19:31:24 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6aa4570c-017c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:e1:ce:39:cc:b1:dd:7f:d6:a0:45:cf:73:
63:ce:88:68:55:c8:0a:c1:fc:a7:66:e8:b9:b6:e3:
53:b6:e4:f9:3a:88:21:e6:06:83:e3:b1:a7:a7:96:
f0:a6:c1:f5:c0:64:c5:96:20:0b:16:ac:ce:8a:e9:
16:21:9a:cf:81:bc:c7:56:54:f1:8a:d0:31:e0:a8:
23:ce:3e:97:ec:3d:08:a7:ea:63:84:a2:42:9c:03:
d6:c1:f3:4a:20:70:46:cd:84:7d:88:79:8e:b9:2d:
10:69:12:50:7c:ec:78:d8:ef:0a:c6:89:2f:8e:83:
3a:0f:31:6f:cf:4c:89:b7:4a:32:01:4b:1d:be:c9:
d6:bd:ed:bb:82:01:e3:b1:0a:68:a4:17:f3:78:f4:
b2:94:bf:dc:0f:c5:87:3a:c0:b4:93:5d:af:d8:45:
b7:b3:aa:73:13:ed:d7:c6:ef:bf:ac:57:43:d5:51:
8a:13:6c:23:b1:3d:ef:bb:ad:81:31:5f:75:00:b4:
98:d8:dc:6e:27:d8:86:6f:b8:70:8f:14:e5:b6:e1:
e2:17:3f:35:7f:7d:42:96:09:05:9f:9f:79:de:b2:
b0:e3:78:9c:8e:16:0d:5f:d8:42:e1:cf:95:b5:3e:
8c:42:98:2a:a6:8e:a5:63:f7:8e:22:d9:47:24:76:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:91:88:66:AD:0C:74:27:1F:F3:7E:6F:16:7B:31:19:14:DB:6B
X509v3 Authority Key Identifier:
keyid:B6:E6:06:7A:83:C2:AB:95:9C:A9:81:BA:AF:CF:95:0C:52:24:F9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/5FEE1DD6AE1711F18841FC405011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.161.0/24
Signature Algorithm: sha256WithRSAEncryption
71:77:8f:2c:27:ae:40:21:80:01:30:2d:9b:81:60:71:bf:a9:
cd:81:4a:b6:e7:bd:6c:2a:08:91:f9:57:fe:cd:21:2c:4d:04:
22:be:71:5e:e6:dd:2d:8c:14:f7:f9:f3:ef:cb:19:69:11:a1:
53:94:bb:a0:8f:18:82:5a:65:66:6d:15:02:d6:b6:c3:85:9e:
a4:bb:3c:c5:40:ba:36:af:77:63:b7:cf:d1:c8:6f:6d:e7:a1:
64:d6:25:c5:5b:82:c9:68:ac:b5:4d:a3:6c:d5:4f:76:db:3c:
a5:4b:4b:4b:a1:e3:07:02:46:a0:c3:35:12:e9:05:b6:89:48:
df:93:80:74:61:e3:46:00:55:1b:37:63:05:f3:0a:2e:a3:77:
8c:dc:cb:1f:31:0a:15:0e:63:ca:f4:22:f9:c2:2e:42:f5:ad:
b0:ca:3b:f8:ed:38:3b:09:f6:d6:03:6c:5f:08:47:7b:ae:e0:
c0:c8:cb:0a:e0:d2:a3:d4:46:a5:79:ff:bb:a9:03:75:08:68:
79:cd:81:f5:b2:1d:9f:d5:e7:85:66:5b:4b:fc:bf:9f:9d:b5:
f6:66:75:47:fe:b0:ae:70:7c:0e:c6:a5:6c:d3:b2:a6:03:5c:
cd:b9:6f:20:00:8a:7b:f9:87:e2:8c:7c:7d:33:77:ca:fa:eb:
5e:3c:11:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:04:05 2026 by rpki-client