
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DB6B2B08803F11F1AB5A5B056DA30FBC.roa
File: DB6B2B08803F11F1AB5A5B056DA30FBC.roa (raw, json)
Hash identifier: altDSQ0dHFIeOj29AXcdNslZcculm301Vy0nlA3TcNs=
Subject key identifier: 90:BA:9F:2E:EF:70:F7:64:5E:BE:F9:2F:E4:48:EC:4E:54:62:42:B1
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2E29
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DB6B2B08803F11F1AB5A5B056DA30FBC.roa
Signing time: Tue 22 Sep 2026 16:22:27 +0000
ROA not before: Tue 22 Sep 2026 16:22:27 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 132884
IP address blocks: 103.15.244.0/22 maxlen: 24
103.96.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11817 (0x2e29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Sep 22 16:22:27 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab2ab43-ac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:c9:d2:bf:93:ca:8a:50:a5:74:58:98:1d:
62:cd:8b:20:62:60:9f:94:a5:c4:6a:cd:bb:5a:44:
14:51:8f:6f:d5:5c:c1:7c:3a:e7:ab:27:33:3f:56:
da:8f:d3:30:d7:c5:93:e0:8a:44:59:c4:03:bf:07:
3c:b3:27:1b:78:20:cd:52:76:df:ca:62:08:00:00:
dd:b8:cb:f7:73:0b:5b:c8:df:c9:c4:a9:d5:fa:59:
42:8b:c1:c2:f2:ff:09:4a:aa:19:34:35:6f:e9:d9:
0c:e8:a7:c0:60:d2:7a:bf:aa:8b:ab:e3:fe:d9:9e:
82:62:7b:51:25:e2:4b:b0:3e:23:7b:03:e8:18:a6:
2f:e8:32:0a:df:bf:d7:6d:43:98:f7:d9:6b:3e:6b:
04:a6:4b:4d:f2:cb:b7:fa:29:af:69:28:90:01:be:
f6:61:b8:7c:35:4d:e9:34:52:34:95:39:2c:da:93:
b2:5f:3b:35:57:fd:98:31:f3:45:ed:c3:31:41:f0:
3c:f2:93:3e:96:b1:56:e2:f5:b2:af:20:8c:61:2f:
62:8e:3d:bb:45:7c:6f:ed:bc:ed:42:fa:a1:b7:12:
e7:92:d3:14:38:f6:d0:15:31:4a:a8:c7:1c:60:00:
e4:be:50:ea:48:44:74:f5:98:b7:ef:bf:68:c4:39:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BA:9F:2E:EF:70:F7:64:5E:BE:F9:2F:E4:48:EC:4E:54:62:42:B1
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DB6B2B08803F11F1AB5A5B056DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.244.0/22
103.96.68.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:4d:c9:e9:34:6b:5e:fc:e1:d8:38:dc:80:46:72:47:90:86:
cd:56:ab:9d:b7:4c:c5:87:0e:45:1f:4b:6a:ba:ce:4d:55:c4:
43:28:42:8b:3a:c4:8a:ff:c3:77:54:6c:40:f4:b9:11:e9:16:
50:a4:fa:28:d6:8f:ab:0a:91:57:b2:56:0f:c6:5d:bb:ec:cc:
f2:83:69:a6:2c:13:e3:64:0e:f2:b8:89:55:55:58:78:47:0b:
75:f5:90:27:88:c4:e7:95:95:99:51:9f:02:d6:ea:83:7a:b5:
ec:82:6b:08:a8:20:a2:de:92:36:5f:6a:0e:78:3d:52:26:00:
a1:72:2d:8c:89:f3:d4:64:1c:f1:a0:5e:37:96:de:94:50:72:
b1:ed:9e:e7:9a:b2:b7:d3:5d:61:52:bc:8d:ed:94:24:8a:59:
ac:ed:3f:bf:42:66:21:49:9d:c9:63:1b:4c:07:fb:f2:a3:9a:
f9:e9:f0:cf:66:3c:51:01:34:45:8e:4b:26:f6:e1:38:79:55:
be:fb:d3:d4:ef:64:36:1f:1d:f9:91:8d:61:ab:94:1a:f0:7b:
4e:69:4f:5e:c9:f1:a7:35:4e:23:30:87:2b:b5:02:11:ee:19:
36:1e:78:57:5e:73:7b:29:7b:28:d5:33:4d:76:fa:50:73:5d:
7a:a1:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:32:14 2026 by rpki-client