
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/03AD58B881BA11F1AFA7F5BA63A30FBC.roa
File: 03AD58B881BA11F1AFA7F5BA63A30FBC.roa (raw, json)
Hash identifier: LQgZVNJXiwnEUGUm2X1GTQRbnRviK3JSG+cSffSy6Fs=
Subject key identifier: AF:09:1D:80:C3:5D:55:58:02:7C:71:A6:71:B5:62:30:AA:D8:54:FD
Certificate issuer: /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Certificate serial: 04
Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/03AD58B881BA11F1AFA7F5BA63A30FBC.roa
Signing time: Fri 17 Jul 2026 08:32:15 +0000
ROA not before: Fri 17 Jul 2026 08:32:15 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 16509
IP address blocks: 203.78.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Validity
Not Before: Jul 17 08:32:15 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a59e88f-4315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:c1:bf:01:77:2d:b5:4e:3b:22:c0:03:17:
39:e1:8f:02:99:97:c1:3e:2a:75:28:af:fd:06:c4:
a4:a0:61:78:36:f4:3f:ab:db:da:fc:85:cf:95:45:
08:87:cf:2c:e2:d0:92:75:01:7c:4f:e0:63:f9:6d:
d2:26:44:56:32:c1:4e:4c:c3:68:e7:91:eb:98:23:
98:71:cd:37:b6:c8:93:cc:b8:ba:c6:de:26:ef:ca:
5d:83:3c:7b:ed:9c:f8:af:44:7a:b3:13:a0:8c:1b:
0c:49:aa:fd:5b:21:e3:80:18:d1:ab:e2:b4:a3:23:
e9:b6:96:63:7b:b0:42:eb:1f:b6:ba:2c:d2:ff:67:
4a:6b:f6:51:0c:b3:f5:83:44:f3:17:93:00:af:85:
e6:1f:ab:4f:c3:98:75:45:f6:b6:26:7e:5a:b0:52:
c4:5c:69:9c:8b:7c:6a:64:d4:3e:d7:05:40:de:bf:
76:9b:41:59:c7:7c:1b:38:03:7a:9f:21:a1:1e:b2:
c5:d7:87:7e:57:2b:37:a3:31:e1:87:ff:a2:a2:36:
db:30:d3:96:06:a5:3d:bb:f2:38:9f:2b:09:55:b2:
33:41:3f:25:66:4a:31:a9:d3:19:76:7b:87:9a:dc:
a4:01:41:aa:7d:da:f7:8b:69:7b:e5:6a:6e:a6:55:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:1D:80:C3:5D:55:58:02:7C:71:A6:71:B5:62:30:AA:D8:54:FD
X509v3 Authority Key Identifier:
keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/03AD58B881BA11F1AFA7F5BA63A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.78.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bd:c1:26:8c:b5:de:1e:76:53:e2:75:90:6d:e5:7c:f1:1e:
4c:f4:1b:48:cd:cc:e2:dd:32:af:16:52:4c:56:2f:fb:64:a6:
f4:72:26:fa:ff:5f:32:7d:9f:a6:6a:c3:26:72:7f:55:b8:0f:
2d:6d:fc:50:f8:b6:ae:e4:45:17:a9:8d:5c:4a:69:46:e2:c0:
a0:07:43:34:69:21:09:b7:78:70:c2:8c:de:40:f8:81:00:d1:
e1:0a:d8:d4:89:29:ae:b7:79:d1:ea:17:fa:8f:dc:b2:3d:7c:
b2:7a:e6:29:87:70:e9:64:5c:fb:9b:d4:47:16:08:e0:a3:43:
b2:af:7e:7a:2b:4b:69:f7:e3:ae:5a:c0:a3:b7:df:15:0c:71:
cd:84:25:37:01:18:f5:ff:9c:5c:f5:d9:1e:3f:ed:23:dd:0b:
20:6f:9b:58:4d:6f:c4:bd:b8:50:13:64:9f:2e:6c:23:8b:c3:
58:ed:9a:10:6c:50:93:97:d0:8c:9c:6c:3f:43:fb:71:91:9a:
c6:0d:07:fe:88:a2:09:5b:59:4a:67:24:86:97:a5:a7:00:25:
6a:15:15:3f:fd:fb:b3:be:79:72:be:93:fa:e0:87:94:e3:46:
b6:da:13:0d:62:5e:db:11:d7:fb:a1:87:1e:83:48:b0:c8:18:
92:92:a8:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:32 2026 by rpki-client