
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
File: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (raw, json)
Hash identifier: /Xmk4tz+mCwExZGnlLqC5Zkmn9dPaTMI2+1ZySEn0OI=
Subject key identifier: 47:55:AC:77:5B:8B:32:B5:23:0B:81:D1:9C:DE:ED:2C:04:0B:9D:28
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 02A0
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
Signing time: Wed 01 Jul 2026 03:28:33 +0000
ROA not before: Wed 01 Jul 2026 03:28:33 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 149870
IP address blocks: 103.189.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Jul 1 03:28:33 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a448961-315c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:45:71:8f:79:7e:4a:73:5b:b7:4f:fe:17:
f3:98:70:4a:af:30:2e:7e:be:2e:c9:a5:8f:bf:73:
df:1c:c1:ca:43:6f:0e:fb:08:cd:fe:77:5b:68:78:
9b:41:56:04:67:1e:c6:df:44:9c:9a:91:5c:51:d8:
1e:61:96:79:0a:cd:ba:1c:d6:86:c9:d3:b7:7e:50:
62:88:8d:30:ac:2a:76:de:5e:d4:f2:33:36:d1:52:
62:5b:e9:51:9b:56:e7:d2:bc:31:00:60:a4:e3:f3:
26:94:e6:77:ed:ed:91:76:c1:3a:71:a3:d1:04:55:
f9:d0:1b:98:d4:51:5b:9b:62:78:d3:d8:ae:ea:bf:
64:df:5f:84:1b:56:46:20:50:47:eb:6f:82:55:3e:
08:b2:ef:c0:e5:ea:45:cd:fd:04:45:c7:5d:71:6b:
35:97:70:4e:e5:3a:23:b0:bf:9f:44:25:58:13:fe:
87:8d:f4:cd:81:60:fe:fc:4c:7d:67:46:19:09:d4:
74:24:94:81:a0:69:be:1b:e7:c6:a5:85:d4:70:a2:
aa:bf:e1:7c:81:b5:26:2b:e4:65:7e:e1:29:59:48:
91:00:46:8a:a5:c7:9a:2e:fe:79:60:ef:4b:d1:27:
78:9d:45:e8:f3:62:42:13:83:65:c9:03:3b:8d:90:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:55:AC:77:5B:8B:32:B5:23:0B:81:D1:9C:DE:ED:2C:04:0B:9D:28
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.233.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d1:56:e9:68:16:c9:94:b4:ea:04:dd:5c:a9:8a:c1:ab:e2:
77:41:75:14:6c:8e:16:38:c6:3c:0f:6b:a4:b8:be:a0:95:1c:
c7:d1:94:14:29:c4:ae:47:3d:bc:f5:e6:ff:29:86:a5:e6:90:
58:af:09:8c:5c:3b:1d:ec:ac:4c:62:2b:dd:ac:94:ba:fd:54:
5d:6b:5b:9d:dc:88:13:5e:bc:e6:18:5d:70:72:c3:21:bf:06:
35:bc:a1:2f:3e:95:0a:f1:1c:b1:23:ce:77:59:a3:4e:06:cb:
ea:7e:82:0d:99:8f:9c:80:e5:1c:54:ae:47:0d:22:f0:25:0b:
0f:8e:94:b9:a9:9c:7e:51:58:46:9d:f9:44:90:3c:53:56:0b:
1f:ab:06:bf:6c:cb:00:fa:c4:ba:54:64:e2:72:b3:4f:ed:67:
0d:64:0e:b8:10:ab:5f:ce:0f:48:3f:d4:d2:83:93:7e:dc:ab:
d1:e6:2e:37:12:f9:fd:85:bb:76:55:42:c8:09:7d:c9:dd:41:
4b:4e:f4:f2:db:a0:1b:b6:3f:e7:82:ba:00:df:b7:da:2a:4e:
84:28:d2:d3:93:81:ae:a9:50:f8:58:59:01:61:47:0c:e3:f5:
d7:6d:b8:48:2d:44:c1:d2:4a:c7:12:b8:7c:3a:7e:3e:3f:be:
57:99:cf:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5
OThEOUExNzAwHhcNMjYwNzAxMDMyODMzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0ODk2MS0zMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0rVFcY95fkpzW7dP/hfzmHBKrzAufr4uyaWPv3PfHMHKQ28O+wjN/ndbaHib
QVYEZx7G30ScmpFcUdgeYZZ5Cs26HNaGydO3flBiiI0wrCp23l7U8jM20VJiW+lR
m1bn0rwxAGCk4/MmlOZ37e2RdsE6caPRBFX50BuY1FFbm2J409iu6r9k31+EG1ZG
IFBH62+CVT4Isu/A5epFzf0ERcddcWs1l3BO5TojsL+fRCVYE/6HjfTNgWD+/Ex9
Z0YZCdR0JJSBoGm+G+fGpYXUcKKqv+F8gbUmK+RlfuEpWUiRAEaKpceaLv55YO9L
0Sd4nUXo82JCE4NlyQM7jZAy8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEdVrHdb
izK1IwuB0Zze7SwEC50oMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND
RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0VCQUEvMkNGRDM3MTJDQ0QwMTFFRDk4MjUyRTc1QzRGOUFFMDIvRTdCQTZCNUNF
RTNDMTFGMDhCRTJFOTBFNEQ2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ73pMA0GCSqGSIb3DQEBCwUAA4IBAQCv0VbpaBbJlLTqBN1cqYrB
q+J3QXUUbI4WOMY8D2ukuL6glRzH0ZQUKcSuRz289eb/KYal5pBYrwmMXDsd7KxM
YivdrJS6/VRda1ud3IgTXrzmGF1wcsMhvwY1vKEvPpUK8RyxI853WaNOBsvqfoIN
mY+cgOUcVK5HDSLwJQsPjpS5qZx+UVhGnflEkDxTVgsfqwa/bMsA+sS6VGTicrNP
7WcNZA64EKtfzg9IP9TSg5N+3KvR5i43Evn9hbt2VULICX3J3UFLTvTy26Abtj/n
groA37faKk6EKNLTk4GuqVD4WFkBYUcM4/XXbbhILUTB0krHErh8On4+P75Xmc/4
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:01 2026 by rpki-client