
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
File: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (raw, json)
Hash identifier: L0XlyD9IQ5UK2oTPJFeGWgq2LdSfkLF1YmwJHO8pA/s=
Subject key identifier: 7D:80:75:89:C5:B7:6D:5C:13:A5:31:E1:68:89:D2:E7:E9:62:EF:7E
Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial: 09BB
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
Signing time: Thu 20 Aug 2026 20:40:32 +0000
ROA not before: Thu 20 Aug 2026 20:40:32 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131582
IP address blocks: 103.69.130.0/24 maxlen: 24
103.69.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 20:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2491 (0x9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Validity
Not Before: Aug 20 20:40:32 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a876640-5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:b2:7a:3e:24:07:97:0e:a4:d1:de:0c:7b:
71:f5:54:5b:56:8d:23:2f:46:68:ec:3a:c4:2e:c6:
5e:dd:12:60:03:6c:b0:77:38:83:31:32:80:bf:e8:
43:a7:d6:ca:20:53:66:dd:4a:92:07:72:71:09:0b:
81:8e:71:6e:30:e8:6a:fa:d2:cd:16:14:1c:40:26:
9d:ce:ef:8f:e8:13:6d:f4:13:7d:4b:85:da:c3:4c:
34:ec:df:a3:b7:26:8f:c7:9a:2a:60:a7:ec:b1:16:
2d:35:bb:62:b5:81:5c:76:6d:4e:35:5a:b5:3e:5b:
f5:da:66:b3:c1:0c:58:dd:d5:54:d7:62:57:67:90:
c4:04:69:a9:69:e6:f5:1e:ee:9c:06:52:d5:f3:45:
b5:fb:78:34:b8:30:a8:b4:6e:d3:d5:03:aa:3a:20:
00:20:e1:54:f8:19:00:b2:37:88:31:10:e1:5e:a4:
ac:75:f6:32:75:94:16:14:49:2b:84:e3:c2:89:87:
d1:18:5e:f3:19:09:c1:e5:54:5c:73:4c:b1:d8:28:
35:2b:19:dc:38:f0:39:0d:ce:e9:73:6e:d2:98:24:
b5:27:50:a8:8a:30:59:b1:b6:bd:a4:dc:7b:68:05:
f7:9b:09:61:eb:66:57:86:48:ef:36:dd:98:11:5f:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:80:75:89:C5:B7:6D:5C:13:A5:31:E1:68:89:D2:E7:E9:62:EF:7E
X509v3 Authority Key Identifier:
keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.130.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:a9:e0:b6:4f:d8:bb:c3:98:86:4c:21:d3:0e:62:72:f2:ed:
22:23:87:77:f1:1f:4b:1e:f5:80:00:6c:c6:c1:3b:69:cd:46:
e2:20:b9:11:36:9c:3a:5f:99:d8:ec:04:91:b6:af:95:3c:b6:
ad:8a:1c:78:8e:07:4e:a1:a9:49:69:d7:ed:bf:b4:6e:34:88:
68:c8:04:17:b6:f9:03:d5:13:65:c5:cb:67:9e:59:2f:d3:1e:
5a:b3:62:97:b9:7e:d2:a9:02:58:c0:1a:1c:2b:3c:48:83:df:
96:41:bf:12:93:f0:be:60:11:66:a1:b9:63:c5:64:80:34:6a:
c5:10:69:fc:92:72:2b:cc:75:1a:b6:dc:68:ef:68:0b:97:7f:
05:73:3c:3b:e1:26:e9:8c:e5:37:d3:14:b8:19:a4:fb:90:a5:
a0:5b:0f:62:1f:71:ba:2d:80:95:b5:ec:2b:cc:7b:46:c6:03:
dc:99:0d:f1:f5:3d:d0:f6:79:e5:76:af:5a:45:c7:6a:c6:47:
da:3f:eb:05:7a:52:c9:4c:1b:7f:29:c8:b0:a2:dd:f6:5a:8f:
6a:83:9f:a9:f7:12:f6:df:da:36:d6:e2:42:af:5d:13:83:14:
99:fa:7e:b1:e6:19:56:a4:14:35:19:65:a4:79:e7:a4:1a:e6:
d5:ff:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:20:50 2026 by rpki-client