
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/B3F0AAB8587211EAA4D4870FC4F9AE02.roa
File: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (raw, json)
Hash identifier: NtO4r+X19/DAKwEOAHNZvlYruTEZr7lKjCzOUmOCnlk=
Subject key identifier: 7F:92:18:E0:86:4C:D3:55:A2:62:FF:D5:9E:96:49:FA:49:6A:56:CF
Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial: 0B5E
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/B3F0AAB8587211EAA4D4870FC4F9AE02.roa
Signing time: Tue 26 May 2026 19:27:39 +0000
ROA not before: Tue 26 May 2026 19:27:38 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 136515
IP address blocks: 103.91.140.0/22 maxlen: 22
103.91.140.0/24 maxlen: 24
103.91.141.0/24 maxlen: 24
103.91.142.0/24 maxlen: 24
103.91.143.0/24 maxlen: 24
123.253.48.0/22 maxlen: 22
123.253.48.0/24 maxlen: 24
123.253.49.0/24 maxlen: 24
123.253.50.0/24 maxlen: 24
123.253.51.0/24 maxlen: 24
2401:740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2910 (0xb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Validity
Not Before: May 26 19:27:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a15f42a-f1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:03:0c:d6:14:8c:6c:5c:65:4e:5e:97:4d:
27:75:a6:ed:c3:d6:e4:b9:00:bf:85:04:38:6d:15:
ee:b7:09:ad:3f:c6:b1:42:0f:25:11:a7:12:55:cb:
c4:45:b6:04:5d:6f:26:43:33:7d:74:d3:2e:c5:47:
ef:c4:d5:fe:4d:75:a2:87:8b:94:2b:7c:f5:8f:23:
8f:4e:83:82:ab:31:bf:fc:e1:b2:5e:01:4e:e0:b7:
f7:55:c4:15:87:70:18:0e:41:9d:f9:21:b1:40:59:
9c:a4:0e:ed:24:7c:7f:35:ac:30:82:29:77:b7:cf:
58:fa:2a:0a:56:8c:6f:54:2f:ae:71:c4:fc:d8:b9:
f1:c2:49:83:62:8d:0c:18:f3:6f:80:00:ac:f2:31:
12:59:f9:aa:a5:3e:e8:33:65:f3:74:24:99:b3:1f:
10:fb:c7:f8:8e:8c:f6:e6:28:ae:6a:ba:42:ce:31:
d0:43:ed:9d:25:cd:b9:51:b0:dd:e5:f0:2a:b6:c7:
5c:a9:fb:c4:ab:53:70:a0:79:e0:0e:bb:37:3b:b2:
d9:d5:79:db:3d:3c:3a:55:ec:d4:53:d8:41:ab:e1:
02:6a:a5:db:e9:d1:63:f3:d0:f4:37:b5:e3:2f:7b:
85:a0:74:e0:1d:ba:20:bc:d5:51:a9:f5:f3:4e:06:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:18:E0:86:4C:D3:55:A2:62:FF:D5:9E:96:49:FA:49:6A:56:CF
X509v3 Authority Key Identifier:
keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/B3F0AAB8587211EAA4D4870FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.140.0/22
123.253.48.0/22
IPv6:
2401:740::/32
Signature Algorithm: sha256WithRSAEncryption
6c:ef:88:24:8f:46:cb:e0:84:03:a3:ac:28:95:9a:85:ce:0f:
52:0c:72:e0:c9:9b:bb:4e:5d:15:b2:4f:7c:f4:4e:c5:cd:8a:
7c:39:63:44:27:53:00:61:1b:06:53:ce:60:65:1c:a6:01:32:
8d:1b:25:3e:51:c6:53:9c:9a:f1:fb:c5:1b:d2:01:1f:62:fc:
47:78:83:6b:8f:f5:95:06:6e:09:3d:af:c1:3c:2a:c1:03:2f:
b8:57:ac:39:05:5b:43:77:17:a7:39:71:ad:6e:84:60:13:ba:
20:62:bf:05:5f:72:7b:1f:30:f9:f0:78:3b:28:63:20:c6:f4:
b8:60:a9:9c:13:b6:48:dd:58:d3:22:25:51:2f:78:bc:33:2b:
b7:82:42:2e:aa:be:90:b0:82:30:86:32:b6:51:4f:3a:6e:ba:
92:31:7a:ce:b4:59:62:ef:57:73:02:4e:f9:3c:e3:7b:d6:55:
f4:35:53:57:01:05:53:82:85:b4:aa:fa:c7:90:62:4e:c5:48:
cc:4c:8e:d6:68:4d:50:63:e6:16:e5:b5:7f:8e:80:28:d7:3f:
99:e4:cc:e2:ba:a0:98:d9:c8:91:af:02:51:af:51:ba:7a:bd:
69:fb:71:82:5b:4c:00:81:1e:bd:0c:e9:37:29:8e:db:7e:b3:
52:0b:ad:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:08 2026 by rpki-client