
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/9659D3F6D81111EB8C3ACC5DC4F9AE02.roa
File: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (raw, json)
Hash identifier: /lzYlyTLMVfaGt+Jef9OOqRfUsRdfvmKL6qV7+rtCAM=
Subject key identifier: 5D:1B:36:E6:BD:93:B7:AA:5F:89:FA:A5:C7:60:DA:4B:33:45:E1:2D
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 0684
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/9659D3F6D81111EB8C3ACC5DC4F9AE02.roa
Signing time: Tue 14 Jul 2026 23:24:30 +0000
ROA not before: Tue 14 Jul 2026 23:24:30 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 133905
IP address blocks: 103.230.13.0/24 maxlen: 24
103.230.14.0/24 maxlen: 24
103.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1668 (0x684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Jul 14 23:24:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a56c52e-24da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:3d:db:22:a8:c2:4a:85:f1:b4:3e:ea:5e:
1c:3e:7b:42:90:a8:8e:e0:72:96:2a:53:09:ad:c4:
3e:7f:61:ab:c6:84:10:b6:64:06:d1:e0:1f:81:fd:
02:60:09:cf:15:95:23:62:a9:02:c0:07:8f:82:b5:
3e:1a:b5:78:33:d7:ff:9b:79:b1:ae:33:ef:3a:8f:
b9:45:a4:d5:73:d9:61:56:72:08:70:a4:c6:ee:9d:
ca:72:ff:de:75:2f:8b:4a:12:b5:90:30:52:47:5f:
39:fa:7d:59:5a:0c:ba:8f:e8:a8:f5:20:a8:2c:db:
47:b7:62:01:83:60:90:74:27:eb:92:6c:56:ec:96:
53:61:66:7b:ab:c2:9c:d6:b9:7b:b2:b6:fc:24:eb:
73:99:0e:6d:cd:7c:68:a3:f6:41:6a:3e:13:33:8a:
d3:07:25:5e:8b:72:42:6d:a6:25:85:60:ca:0f:14:
c7:f2:f4:b7:3c:8c:6c:28:4b:25:3b:56:b8:6e:16:
b4:e0:d0:e5:b8:6e:e4:9f:82:9a:ff:a8:f3:ee:b3:
ff:fa:30:1a:7a:a7:3b:63:3d:54:a1:ec:fc:e8:d0:
17:ec:bf:bf:c9:84:28:36:da:5f:aa:f2:fd:d5:e7:
ac:ae:f6:10:52:b5:a8:b3:dd:38:b9:4a:73:22:17:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1B:36:E6:BD:93:B7:AA:5F:89:FA:A5:C7:60:DA:4B:33:45:E1:2D
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/9659D3F6D81111EB8C3ACC5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.230.13.0-103.230.15.255
Signature Algorithm: sha256WithRSAEncryption
01:84:8e:eb:f7:f9:14:ef:f2:81:b3:43:90:ea:ea:75:10:fb:
0f:b4:c6:b4:9f:4f:b9:c3:74:53:b0:4a:01:55:7b:21:52:eb:
02:9b:b1:44:75:01:e8:d0:54:ed:b5:32:25:e7:85:1a:2a:17:
90:0b:ff:7f:c1:5b:9b:22:37:f3:ca:3d:17:84:83:c5:78:d5:
85:36:1a:d4:a2:61:09:80:11:75:42:ca:0e:78:eb:8d:3e:17:
52:1b:b6:62:22:69:c8:eb:b6:6e:07:ad:a2:f8:b5:bb:30:02:
c0:e8:66:a7:19:a8:18:c9:dd:5b:bb:92:b2:fe:1d:85:ad:c3:
bb:1c:8d:72:0f:30:99:2a:d4:6e:32:ba:7a:14:7b:9c:3c:5a:
a7:be:54:f3:db:9c:54:0d:81:17:7f:88:ba:e1:8c:11:42:f5:
84:ff:48:7d:c7:ad:f4:a9:ad:f9:74:05:2e:a8:03:01:d9:aa:
c0:3e:0e:00:68:e7:c1:b2:e2:34:b8:86:aa:81:45:1c:4a:28:
b4:11:7e:7f:01:de:23:e8:7e:db:54:e2:88:c5:18:49:07:00:
71:05:5f:ad:69:49:37:cc:00:fb:de:e7:f1:f1:a4:37:e4:b0:
1e:f7:b1:4f:b7:7b:e3:47:f2:76:dd:80:5b:31:c2:26:8e:cc:
23:dd:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:16:13 2026 by rpki-client