
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/E1F27B12B4A611F0927EAF76C4F9AE02.roa
File: E1F27B12B4A611F0927EAF76C4F9AE02.roa (raw, json)
Hash identifier: S6Dj1CJ0PdIoTWrAQrWQN2poER+GUj8Z5xwHyngXzgo=
Subject key identifier: 6E:6B:9D:1D:D9:8D:81:F9:12:F1:FA:29:92:97:0E:A2:10:D4:43:69
Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Certificate serial: B6
Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/E1F27B12B4A611F0927EAF76C4F9AE02.roa
Signing time: Fri 09 Oct 2026 07:55:53 +0000
ROA not before: Fri 09 Oct 2026 07:55:53 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 136921
IP address blocks: 103.99.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Validity
Not Before: Oct 9 07:55:53 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac89e09-4d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:e7:7c:fd:54:b2:7b:a3:75:7e:5f:62:9c:
e1:af:a7:e3:35:98:c1:4a:6c:f4:6b:0b:f5:5f:05:
da:b0:e7:81:9c:dc:ab:8a:03:fb:53:ef:cf:bf:8b:
56:df:d8:83:3b:e3:d9:10:19:7d:23:61:64:9a:3f:
73:f4:03:a4:41:8c:7c:fa:31:9e:59:74:9a:12:9d:
ed:97:71:2e:40:b7:bc:46:ec:dc:b1:71:d4:48:fe:
53:0e:97:34:86:69:03:a7:63:76:80:d5:9a:9e:a9:
ef:7f:11:4c:1c:46:56:94:36:1b:83:8f:81:4f:92:
8a:e3:90:91:f8:3d:b3:02:9d:cd:ce:7f:78:2f:f2:
eb:c1:55:7b:90:a2:a1:84:49:ef:61:3f:fa:8d:5a:
2b:45:e0:63:a3:b1:d8:56:59:1c:62:99:85:4e:c4:
ad:8b:8e:1e:c3:54:79:b7:ae:3d:90:6f:84:bd:30:
04:f8:1e:56:10:3c:dc:53:ae:1f:ac:79:f1:80:9e:
fc:ff:5f:28:eb:5c:ce:81:22:5b:56:ac:5b:20:c0:
50:77:97:20:d3:b0:40:86:2e:46:b5:e0:b8:82:8b:
25:c3:1c:67:ca:c0:96:04:07:d8:0d:42:ed:e5:e9:
a7:2a:b3:2e:7a:77:64:2d:bd:df:19:90:50:70:f3:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6B:9D:1D:D9:8D:81:F9:12:F1:FA:29:92:97:0E:A2:10:D4:43:69
X509v3 Authority Key Identifier:
keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/E1F27B12B4A611F0927EAF76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.43.0/24
Signature Algorithm: sha256WithRSAEncryption
af:bc:1f:92:41:27:e1:10:33:a7:d3:ea:cc:e7:68:21:00:7c:
b6:80:b8:1d:14:d8:51:a4:f6:4c:19:3a:54:0c:a6:e2:17:dd:
07:89:9f:1b:84:20:4c:47:a3:9e:11:f7:23:4d:51:6a:ef:df:
e8:55:7c:ee:03:6d:77:47:a5:34:21:a8:b3:fa:61:9d:df:f9:
40:65:14:33:7b:99:b6:f1:90:e6:ae:18:88:90:7b:e4:a4:d0:
6a:de:bd:ab:42:2f:ed:22:a3:38:d8:cd:26:da:ee:31:9c:fd:
45:b5:af:4c:72:9e:4f:c6:ab:1a:c8:96:5c:41:8e:b1:dc:cc:
d5:12:1c:f5:14:bb:48:9f:4f:d4:97:44:63:e8:47:04:5d:74:
36:fb:c2:88:ee:c0:65:98:1e:ca:90:c1:42:c8:47:f2:93:e7:
a4:76:3a:8e:f2:66:ce:f9:66:a6:81:84:fd:03:41:1c:e3:a2:
57:6e:19:47:f1:93:3e:31:dc:91:20:9b:e7:1c:94:55:01:9d:
69:e6:b9:13:cc:8e:0b:e9:e0:95:95:4a:c4:92:0a:c1:2d:71:
4c:b1:18:21:6f:5d:60:f6:29:4f:49:54:d2:77:c3:2c:1f:44:
7a:b7:fb:8c:3b:92:04:98:0f:00:94:85:57:7c:f6:14:95:34:
7a:4c:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:56:02 2026 by rpki-client