
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BB25F03886EF11F19E006003A7EE528E.roa
File: BB25F03886EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier: x5eR6QJJd73YD7r25sERB392+s0FmtDf4S5HjM8+TqI=
Subject key identifier: 38:9C:52:C8:92:01:59:4E:28:BA:A8:6A:7B:11:63:EC:D8:2C:CE:2C
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1F1D
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BB25F03886EF11F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:39:22 +0000
ROA not before: Thu 23 Jul 2026 23:39:22 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 58668
IP address blocks: 103.12.236.0/22 maxlen: 22
103.12.236.0/23 maxlen: 24
103.12.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7965 (0x1f1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Validity
Not Before: Jul 23 23:39:22 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a62a62a-81b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:63:20:13:1f:93:31:a2:b6:82:92:b0:37:
27:a2:03:36:22:51:8b:8d:77:bf:9f:3f:95:d6:73:
0b:97:02:c0:6a:0d:40:f2:b9:f1:7b:89:5f:ab:ce:
33:d3:f1:cb:0f:4f:19:0b:52:20:4f:7b:ae:14:7d:
98:db:a7:42:61:bd:76:a9:4c:f7:7b:af:32:67:3f:
d1:7e:d3:c6:43:40:83:e3:81:70:91:11:98:85:ae:
a7:f1:5d:e7:c5:43:a0:5b:1d:5f:52:bd:f0:0a:60:
2e:de:05:b3:ab:72:5c:9e:f2:c7:13:91:6c:f1:35:
4a:09:14:a4:5f:0a:93:f3:68:eb:7b:46:fb:4c:c8:
7c:30:3f:26:2e:f9:de:dc:1c:51:f3:f8:66:3f:45:
86:4c:99:8f:fa:57:ab:3c:57:09:af:58:e6:0e:4d:
ba:b5:d8:b0:fe:70:13:1a:6a:9f:5d:dc:7a:1a:10:
31:c5:86:c4:9e:3e:95:12:0d:71:19:f1:a3:df:54:
c0:35:66:d5:78:f0:68:7a:46:fd:7f:68:9b:d8:44:
99:bd:f6:25:60:5e:e1:e8:e1:5f:70:ea:f4:bb:a4:
70:53:ef:42:97:4c:70:86:4d:8a:84:ff:bd:d8:22:
d8:9d:76:b9:c4:9a:45:30:ef:31:19:d3:ba:25:06:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9C:52:C8:92:01:59:4E:28:BA:A8:6A:7B:11:63:EC:D8:2C:CE:2C
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BB25F03886EF11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.236.0/22
Signature Algorithm: sha256WithRSAEncryption
48:02:7b:5c:f4:75:86:ec:1f:07:c5:66:e3:0d:ea:2c:57:64:
1d:ea:74:15:57:e4:ce:5a:24:ee:04:1a:fe:2b:32:ef:83:26:
b1:5b:65:f3:bb:aa:ad:6a:4a:47:96:a6:b7:85:22:70:b1:b6:
cc:85:14:a6:83:7f:55:94:10:d9:41:2f:f9:48:79:8c:71:a4:
2a:43:16:94:af:fe:9c:71:e3:8b:ba:78:58:e7:15:00:46:f6:
aa:c2:02:58:18:fb:c8:73:09:d1:a9:13:00:dd:59:ad:a7:1d:
58:63:15:4b:90:6b:90:f6:09:d6:8c:07:1d:26:01:d2:44:a4:
53:53:6a:e9:90:8f:03:63:9a:df:40:05:1c:d4:23:61:99:f5:
b5:43:50:b6:da:7f:02:6d:03:64:76:f1:3e:aa:45:16:e1:eb:
a7:b5:17:1a:0b:36:34:a3:4d:95:2e:ad:a6:93:3c:81:a0:6d:
62:1d:be:91:5d:9f:3b:b6:0e:11:bb:62:be:29:63:e6:61:8e:
12:6a:72:77:fd:0b:c6:b3:4d:d5:5b:14:ce:2b:35:76:28:57:
01:fc:75:17:98:40:3c:30:6f:e2:b6:56:d8:07:76:1d:ec:24:
b6:1a:82:21:40:78:9c:8d:db:2c:05:b4:af:67:c9:04:d3:9d:
49:37:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:22 2026 by rpki-client