
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa
File: B62A6E82D7F511EB82D62F73C4F9AE02.roa (raw, json)
Hash identifier: MOXNPP0Z5FDw+7dHenMPVPHPJqhtHn3B3TzOutXmyJQ=
Subject key identifier: C6:BB:82:A9:52:3F:A2:1C:C8:98:9B:BB:DD:2E:F2:2F:38:59:7B:30
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 0685
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa
Signing time: Tue 14 Jul 2026 23:24:32 +0000
ROA not before: Tue 14 Jul 2026 23:24:32 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55953
IP address blocks: 103.230.13.0/24 maxlen: 24
103.230.14.0/24 maxlen: 24
103.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Jul 14 23:24:32 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a56c530-4636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:de:d4:aa:48:e4:f9:9e:3d:69:4c:9b:f0:
9b:4d:bf:d3:fa:40:50:e6:35:32:6f:94:68:c3:6e:
84:0b:08:0e:c5:a6:08:25:9d:18:f4:9f:8c:a5:9d:
25:01:a0:98:fb:c2:57:6c:4f:ba:36:75:14:d1:4a:
38:87:20:ed:3b:7b:1d:42:5d:9d:78:fa:9d:e5:38:
29:68:2a:77:7b:c9:a7:3b:e2:5d:7e:eb:9f:9f:93:
ed:8a:92:25:56:24:7c:20:25:f8:56:61:f7:83:c4:
0c:ca:e1:b9:13:61:f1:9a:ef:ff:c6:ba:8f:43:d5:
e6:8b:cb:45:89:55:73:52:87:9e:f5:45:a9:b7:fb:
44:d9:26:1a:05:37:7a:4a:e2:59:8b:1d:0d:1a:3f:
d0:f7:a6:bc:e1:5e:f3:d4:77:ae:dc:2a:81:c3:95:
b2:ff:14:ac:be:c5:5d:2c:06:2c:bf:2b:1d:43:64:
3e:6f:f5:c1:34:b6:d7:c4:3a:e4:f3:93:a1:18:2c:
77:4b:91:97:02:52:6b:37:25:6f:ac:c2:da:e7:c7:
bb:ed:d7:ec:55:5e:6a:dc:f8:41:c2:04:13:26:a9:
34:cc:81:50:a5:54:57:d2:7c:7e:9a:0e:f8:7c:4a:
f2:57:86:2d:d4:4b:96:73:94:96:8a:b5:7c:3c:44:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BB:82:A9:52:3F:A2:1C:C8:98:9B:BB:DD:2E:F2:2F:38:59:7B:30
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.230.13.0-103.230.15.255
Signature Algorithm: sha256WithRSAEncryption
29:f3:5c:21:53:ff:2f:73:a2:f2:94:48:d0:e0:25:6f:30:e1:
8f:f8:52:31:02:77:35:d3:9e:bc:23:68:c1:77:93:08:33:22:
31:05:60:1e:77:7d:40:ef:ed:ef:c1:fd:df:78:77:91:9f:fa:
86:0a:5b:58:ed:b9:a5:9f:b0:d4:1f:83:f9:fe:d0:fd:4c:7c:
93:be:03:2b:b6:ed:69:c4:78:85:8e:d7:65:c9:b5:b7:93:76:
e2:ae:aa:ee:8b:de:dd:18:29:e4:52:3e:9f:db:84:63:0e:ab:
6b:28:9a:90:9b:43:67:2c:2e:9b:12:37:27:7a:9f:ac:d6:16:
73:b1:66:64:47:0a:93:13:51:fa:26:27:16:48:8b:18:1c:d2:
2c:24:72:ae:6c:a2:d9:48:d0:40:0a:fd:af:1b:c7:bb:cc:2f:
7a:70:cc:cf:dd:2e:1b:9d:2a:c9:0b:d1:9c:d8:25:05:e9:b5:
77:7d:57:fa:c2:4c:1d:57:9a:8e:43:d6:bf:c3:58:de:ba:e5:
de:cc:97:a1:dc:7b:b2:7d:f9:7d:ba:5b:66:de:37:f0:fa:a0:
00:4e:1a:61:31:de:03:7d:6b:16:cf:18:26:4c:34:1e:c6:80:
9a:36:88:e6:fd:60:3f:c2:0e:83:4b:42:87:52:0d:e0:96:2a:
cd:32:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:23:46 2026 by rpki-client