
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/E43DC97CB46F11EA889ACA09C4F9AE02.roa
File: E43DC97CB46F11EA889ACA09C4F9AE02.roa (raw, json)
Hash identifier: 4CJejTHtynL+BrSqDFZ0izetNY3w+q46K5KLuu2Bpf8=
Subject key identifier: FD:1F:FF:0A:21:FD:8B:FB:C5:F2:DD:22:F8:04:A1:17:91:1E:48:41
Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial: 09A3
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/E43DC97CB46F11EA889ACA09C4F9AE02.roa
Signing time: Wed 22 Jul 2026 21:20:52 +0000
ROA not before: Wed 22 Jul 2026 21:20:51 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 136749
IP address blocks: 103.95.32.0/22 maxlen: 24
2401:5640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2467 (0x9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Validity
Not Before: Jul 22 21:20:51 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a613433-4ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:fa:74:41:7e:60:18:9b:b2:97:72:55:e7:
b2:3e:66:3f:e6:65:fe:81:06:b6:80:f9:e2:a3:e5:
f7:88:ca:12:f9:4b:32:6e:51:f9:db:b8:32:e7:cc:
7c:aa:a0:72:fe:12:ed:ac:67:fc:d8:7d:d4:8e:ea:
c5:6b:cc:e2:8a:39:69:cf:34:c8:3d:2d:8a:6b:36:
50:ee:49:62:a9:39:ef:cc:d4:b5:c8:f5:8a:04:fd:
d2:d5:88:2c:50:e3:2c:89:e8:2d:4a:ad:b9:11:d9:
95:c7:b3:01:6c:07:75:23:b7:45:89:ed:c8:c5:84:
4c:48:b3:a2:e3:fd:f8:40:41:72:b2:fa:b0:5d:3a:
9e:b7:19:a8:8b:0e:17:f1:45:00:a2:9c:ef:bd:d4:
54:62:50:83:5e:8c:ae:1e:8c:ad:1c:ca:87:dc:59:
94:6a:98:84:84:fd:84:07:59:8f:e4:2c:52:b1:0f:
86:7d:df:3b:55:f8:9f:7f:53:22:6e:5e:1d:70:13:
9f:51:2d:11:17:07:be:63:de:86:40:2e:a7:a0:55:
e3:63:6d:88:17:ac:d7:57:db:46:39:2c:5f:97:7a:
80:23:cb:8b:d0:65:5b:9d:3f:c8:d0:8d:85:82:00:
3a:5e:1a:b6:8d:4c:5a:15:d5:9e:4b:29:ef:06:bd:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:FF:0A:21:FD:8B:FB:C5:F2:DD:22:F8:04:A1:17:91:1E:48:41
X509v3 Authority Key Identifier:
keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/E43DC97CB46F11EA889ACA09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.95.32.0/22
IPv6:
2401:5640::/32
Signature Algorithm: sha256WithRSAEncryption
0c:f2:06:81:3b:4b:9a:57:b4:84:3d:54:dc:03:e0:21:ae:5a:
e4:ef:dd:be:be:e4:50:5d:4b:00:f3:9a:1b:dc:8f:90:41:ad:
ee:91:88:1a:9f:6f:df:d3:3e:5b:5f:58:8f:c5:e8:2b:d9:fd:
b3:1c:fc:f5:75:d7:81:53:47:c0:26:4f:f3:e9:ac:1c:8d:ca:
7a:e3:30:a9:46:b4:2e:68:4b:8b:93:ae:35:1f:39:1d:b0:87:
d4:fe:13:86:25:b8:49:aa:80:34:8b:03:95:67:bc:e0:1b:4a:
1d:7d:eb:c4:cd:a4:9f:db:4d:4e:ac:df:e4:66:4a:d7:cb:52:
10:f0:41:d2:7d:13:f3:e3:86:c6:8b:6d:0b:01:a8:22:3d:6f:
53:d6:50:6b:aa:82:ef:5a:c9:d0:3e:64:4f:7b:f5:b7:57:a3:
ee:09:b8:ae:c0:7b:f5:30:87:e1:5e:8d:d3:17:68:53:36:f1:
c1:fe:df:4e:5d:5d:6e:9a:35:cd:23:3c:99:59:3d:a6:19:e7:
99:13:ff:b2:d0:54:64:8e:c2:69:bf:cd:f8:22:30:30:a4:d7:
2c:bf:0b:d1:96:ab:b3:a4:41:3b:e0:56:af:7a:ff:cb:48:97:
6d:98:b1:7a:be:fa:b0:7f:e9:f2:df:f9:bc:5a:a4:24:c7:04:
34:55:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:30:59 2026 by rpki-client