
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/6E8D6EEA85AA11F1873A8CE75BA30FBC.roa
File: 6E8D6EEA85AA11F1873A8CE75BA30FBC.roa (raw, json)
Hash identifier: iVDmlKturjsdPeMQ1ZgDutRftzZi0zhbWX3+CGjmM4A=
Subject key identifier: 2A:9C:70:AA:30:C3:1E:53:36:DF:56:A9:F1:59:E8:51:4C:5C:93:68
Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
Certificate serial: 0233
Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/6E8D6EEA85AA11F1873A8CE75BA30FBC.roa
Signing time: Wed 22 Jul 2026 08:50:47 +0000
ROA not before: Wed 22 Jul 2026 08:50:47 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139041
IP address blocks: 103.239.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl
rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
Validity
Not Before: Jul 22 08:50:47 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a608467-af23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:56:dd:61:f8:6b:f1:7a:97:36:a0:b3:28:
57:3a:49:0e:15:8c:37:95:34:13:fb:9a:a8:43:e2:
bd:ea:0e:5d:da:70:a1:9a:4b:8a:00:fa:aa:b7:01:
38:5e:b2:13:8b:e9:a4:20:c0:ea:d3:7c:1e:9a:aa:
39:a8:b9:e0:78:76:69:de:d7:aa:d3:44:06:11:4e:
88:82:af:54:3a:52:9f:bf:9e:ec:8d:cf:77:52:c7:
55:95:e7:b6:53:2a:3b:8b:74:ef:e5:4b:5b:dc:d7:
5f:cc:d8:77:a6:12:2c:f7:8f:02:29:89:4d:47:18:
21:18:c3:61:df:4e:87:a8:41:0a:c8:7c:0c:c8:c3:
31:6c:6e:07:63:19:05:52:f5:33:a0:f7:85:4a:91:
12:30:1a:37:a4:34:bb:d2:40:90:0e:1c:f4:01:df:
1b:97:16:8f:cc:a2:8c:35:7e:af:57:53:4c:da:ec:
c8:35:d1:d5:bf:c7:c5:aa:b1:7e:c9:33:a6:8b:c5:
d2:2d:01:c4:6e:e1:a3:cf:9d:e8:7d:83:02:77:cf:
82:bd:85:ae:d2:fd:81:9e:81:b1:a5:73:3a:52:4d:
de:da:db:ea:54:8f:19:d2:50:7b:c0:bc:9a:9d:cf:
e1:88:60:1f:96:8a:f5:e2:95:b2:03:ec:e9:b4:bd:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:70:AA:30:C3:1E:53:36:DF:56:A9:F1:59:E8:51:4C:5C:93:68
X509v3 Authority Key Identifier:
keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/6E8D6EEA85AA11F1873A8CE75BA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.14.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1f:bf:64:1a:92:a6:ad:2d:6f:09:c4:9b:55:d9:c0:aa:2b:
19:b6:d7:df:b1:14:df:53:f0:a7:00:f9:b4:88:ba:59:38:69:
24:f4:e4:be:81:83:f7:4e:73:cb:73:64:d5:ba:64:77:34:5d:
88:b9:af:8f:94:73:ca:7a:33:53:f4:45:b6:31:e5:59:01:b2:
ad:aa:ef:13:0d:70:59:19:c4:a0:2a:7a:45:c8:7c:04:cf:6e:
3c:05:71:2b:24:5c:0a:89:49:41:6d:52:25:8e:96:22:7d:1a:
c2:7b:d0:41:25:40:4b:51:3e:15:29:21:9e:69:da:43:87:8e:
c4:b3:b2:49:87:32:fb:10:a2:19:a7:d3:94:86:ef:9d:43:34:
39:d6:06:da:cf:0e:ef:1e:7b:35:8d:0e:af:9f:c9:6c:27:10:
10:3d:20:8d:c5:6f:92:f3:54:80:95:40:17:34:0b:da:2b:d7:
5d:31:d9:3d:05:af:80:30:21:07:0b:09:e8:12:26:ff:fa:72:
46:76:77:c8:44:ce:a4:e5:f6:a2:61:2d:34:f1:fa:b7:39:1a:
9a:57:a3:e7:40:59:97:91:e8:d0:30:2f:7d:dc:9b:ae:17:9e:
62:c9:6b:0c:b9:fa:0e:d3:4a:c3:ca:1e:0e:87:d1:fc:3b:03:
cb:4c:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:05 2026 by rpki-client