
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/977C1752565C11F1BEA0792596833773.roa
File: 977C1752565C11F1BEA0792596833773.roa (raw, json)
Hash identifier: EfmhcEjq/wxAjnDl+I2bJhZZwo3BKc7Ehe1P+YMe9fo=
Subject key identifier: C1:21:0B:87:F0:87:53:D5:6C:66:E9:1B:58:A0:8F:21:41:57:8D:E6
Certificate issuer: /CN=A91CFB8E/serialNumber=52128B046E39DD6E8543588E5143B5AD25F4ED33
Certificate serial: 2C
Authority key identifier: 52:12:8B:04:6E:39:DD:6E:85:43:58:8E:51:43:B5:AD:25:F4:ED:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/977C1752565C11F1BEA0792596833773.roa
Signing time: Fri 07 Aug 2026 08:58:33 +0000
ROA not before: Fri 07 Aug 2026 08:58:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 134608
IP address blocks: 103.193.68.0/22 maxlen: 22
103.193.68.0/24 maxlen: 24
103.193.69.0/24 maxlen: 24
103.193.70.0/24 maxlen: 24
103.193.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.crl
rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFB8E, serialNumber=52128B046E39DD6E8543588E5143B5AD25F4ED33
Validity
Not Before: Aug 7 08:58:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a759e39-a8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:85:8c:bd:a4:1b:0a:6c:7b:38:25:8b:d9:
d1:cc:89:6f:9b:96:b6:0f:18:3a:ab:70:cd:51:2d:
47:ab:31:74:e1:98:df:bf:3d:22:a9:88:b3:49:ba:
4a:d1:07:0b:36:a5:8f:1a:80:7a:73:28:f8:a4:70:
5b:bf:7c:e0:fa:2a:e0:08:df:9d:38:43:be:94:77:
e5:1f:5e:45:0c:b6:da:d6:97:a6:48:7b:74:b0:eb:
80:18:9a:77:e8:96:81:cb:b9:ef:7e:aa:0b:6b:c3:
c8:f3:51:05:e7:c2:bc:02:9d:d4:3e:e8:3c:a3:1f:
7f:68:31:3f:9e:67:3b:5b:4a:ce:54:94:5a:5f:45:
81:66:83:6b:65:8c:76:5b:26:03:70:39:ba:9b:72:
ff:70:59:ea:8c:c2:fb:36:64:b7:1b:04:28:0f:e9:
b5:e4:fc:bb:c4:b6:64:b3:2a:30:73:13:b8:1e:c3:
07:71:6d:67:df:64:c1:03:dd:c2:7d:8e:84:b7:1a:
c7:c5:b5:8b:58:f4:72:f6:20:2a:d8:10:61:2c:ad:
4a:96:4e:a3:51:32:3c:ac:c4:d7:62:7c:f2:1b:f6:
d2:ae:2d:65:ac:f0:bb:b4:3b:aa:02:f0:23:b9:24:
f5:6b:69:af:62:14:f9:0a:54:16:30:2b:ee:64:ac:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:0B:87:F0:87:53:D5:6C:66:E9:1B:58:A0:8F:21:41:57:8D:E6
X509v3 Authority Key Identifier:
keyid:52:12:8B:04:6E:39:DD:6E:85:43:58:8E:51:43:B5:AD:25:F4:ED:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/977C1752565C11F1BEA0792596833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.193.68.0/22
Signature Algorithm: sha256WithRSAEncryption
58:92:4b:35:d5:1b:78:eb:c4:28:54:e4:e8:20:b2:4b:5f:06:
fa:cd:31:1e:bc:73:b6:9c:14:9e:42:c6:e8:93:dc:42:28:17:
48:07:83:f5:5e:cf:7a:68:e9:9a:9f:bf:d3:22:59:e7:49:bb:
e7:ab:49:b5:9e:a8:f2:a1:4f:02:94:b5:a6:80:5c:df:a5:8d:
e0:de:f3:bd:5d:70:cb:90:79:39:8d:44:2a:1e:8d:e7:c7:a1:
ba:71:70:8b:24:4d:ad:f3:a7:31:9c:36:f5:e9:46:d9:e6:21:
04:51:97:5e:f2:ba:a0:34:7d:d0:63:a9:b2:85:41:b1:e2:57:
65:9c:49:2a:89:a2:99:82:00:c8:fd:d5:fe:39:9b:0c:93:19:
e2:2b:ae:dd:0a:5b:9b:15:95:a6:b1:f7:27:1f:13:cc:19:19:
51:4b:e9:72:ea:97:93:fd:3e:68:44:78:71:7d:51:3b:49:c9:
f7:72:28:d7:6f:94:3d:a1:7a:65:a8:81:70:d9:71:b2:de:65:
37:27:14:6c:55:84:5b:f6:ba:f3:76:ab:7c:cc:10:87:a1:96:
bf:a2:6b:65:67:4f:c3:42:c6:6a:80:2e:20:ce:b8:6e:fa:80:
34:90:82:cc:e0:eb:c4:fe:dc:7d:6c:e0:a3:e5:0a:b6:e9:d0:
f9:06:64:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:52:47 2026 by rpki-client