
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa
File: B3394AE0D7F511EB82D62F73C4F9AE02.roa (raw, json)
Hash identifier: +b28DC3M8noSBj1HATRUiJdTviNU2GCdVTBihwET6Yg=
Subject key identifier: D3:7D:04:25:8F:3E:BF:A7:02:2E:BD:5F:8E:92:A5:4D:07:71:C6:18
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 0682
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa
Signing time: Tue 14 Jul 2026 23:24:27 +0000
ROA not before: Tue 14 Jul 2026 23:24:27 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 132374
IP address blocks: 103.230.13.0/24 maxlen: 24
103.230.14.0/24 maxlen: 24
103.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Jul 14 23:24:27 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a56c52b-ff7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:e5:81:e8:35:85:15:60:89:05:c1:a2:b9:
1b:3a:ae:ca:39:79:15:2a:b6:89:05:40:d3:8c:e3:
42:f3:fd:e8:f3:8d:a3:fd:ca:41:9f:0d:46:64:cf:
18:05:ab:60:96:c5:7e:56:49:d6:ef:d5:67:36:cb:
a0:55:90:96:ee:60:f2:e0:3e:73:3b:4b:99:7f:ec:
4a:47:4e:cd:66:f7:7b:73:2c:b0:19:9c:fa:c6:65:
55:76:1a:ea:df:1f:fb:ec:a5:ff:2b:81:66:5e:67:
93:e8:27:1d:ab:d7:e6:b1:63:3c:7f:04:a1:76:70:
dd:a1:06:17:ba:05:cc:15:55:66:da:17:c6:a3:c3:
52:df:21:12:8c:3a:68:48:69:16:16:01:ea:c8:1a:
bb:e8:b2:28:f7:37:a1:17:e5:fd:2b:5f:4b:97:61:
75:1f:9d:8d:df:2b:87:3c:fa:65:8f:86:90:c1:c4:
39:b3:67:94:85:07:ee:84:55:4a:6c:4b:88:eb:8f:
2d:33:ae:ee:de:52:3f:fb:b3:c6:62:a1:e4:25:c2:
fd:4c:03:71:3f:71:28:5b:d7:23:64:55:9c:e6:87:
cc:87:56:3f:82:d4:52:8f:10:7a:89:10:3d:0a:42:
38:de:12:70:f8:03:08:34:47:97:54:c1:ba:a4:49:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:04:25:8F:3E:BF:A7:02:2E:BD:5F:8E:92:A5:4D:07:71:C6:18
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.230.13.0-103.230.15.255
Signature Algorithm: sha256WithRSAEncryption
64:3e:67:91:3a:0f:78:b6:75:b4:92:7f:b0:7c:28:67:d6:49:
4f:82:07:14:14:ae:b1:7d:ad:18:4c:97:12:fe:f8:5a:c9:28:
c6:70:93:2a:05:70:70:18:da:9c:c7:8f:ff:29:9d:5f:75:55:
cc:d8:c3:7f:78:53:38:ac:45:e7:9f:00:10:7f:82:fc:fb:82:
58:e2:53:9e:87:96:b7:bf:96:1e:0b:40:c0:f5:e0:7c:63:63:
c5:5b:fc:8b:87:c7:24:cb:f9:bf:4e:1e:78:f5:ed:5f:e8:46:
7c:ac:44:5b:cb:86:96:6c:c7:ba:6d:6b:51:0c:80:fb:65:48:
8c:62:23:13:e7:9e:56:74:77:83:2d:7a:52:1c:a1:c1:be:02:
19:b4:9f:26:45:57:44:61:c5:f8:1f:ca:02:f6:10:d9:72:2d:
d5:a2:5d:9e:dd:5e:4a:a2:ad:b2:25:32:11:7d:7e:1d:19:77:
38:ab:82:f8:3e:42:e9:06:2b:25:be:ab:8e:b8:1e:72:1b:36:
eb:0c:b0:12:c0:2f:a6:7f:15:79:ee:64:8f:bf:64:d3:8d:0e:
fe:1c:37:01:17:f0:99:5f:18:64:12:01:c2:a7:57:82:32:bd:
7a:c0:82:3c:4e:6e:76:7d:da:bd:dd:75:61:76:00:e6:a0:0d:
97:9b:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:22:20 2026 by rpki-client