
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa
File: 0716B2646C7111EC8C5E6967C4F9AE02.roa (raw, json)
Hash identifier: n0l/G3zz8221DJQZK1QZg+2i3DJbPsMPV1JZDdgqiFo=
Subject key identifier: D1:2C:6A:B1:AD:46:B7:6B:C1:F0:32:BD:FC:23:82:49:F6:30:2C:D2
Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Certificate serial: 04CA
Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa
Signing time: Sat 25 Apr 2026 00:32:53 +0000
ROA not before: Sat 25 Apr 2026 00:32:53 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58617
IP address blocks: 103.9.23.0/24 maxlen: 24
163.61.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Validity
Not Before: Apr 25 00:32:53 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69ec0bb5-137e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:77:d3:83:32:c5:97:78:27:b8:ee:22:41:
5d:c3:0e:a7:58:6c:d0:c9:f6:1a:68:94:e1:1d:cb:
03:b9:83:1f:1f:c7:09:ff:a8:f5:a3:bf:d3:e2:29:
91:f7:36:99:fc:23:33:96:22:fd:fc:81:28:8e:54:
16:e1:d7:62:c3:a3:cc:02:e6:e5:12:bc:c3:69:a4:
73:2e:a9:8c:27:e8:27:e3:71:eb:42:b2:0f:35:07:
1a:d3:6d:31:ae:7f:32:28:a9:2a:eb:12:3a:03:2e:
e4:0f:7d:9f:af:8e:ba:d2:2e:64:e2:87:91:04:35:
fa:9e:c3:6b:b2:1b:22:23:f9:d4:b2:e1:45:d0:91:
c8:9c:a9:f4:f1:4d:40:67:c0:17:ae:06:bc:1f:2b:
26:0a:1e:4d:62:b5:b9:5b:88:5d:c5:bd:f6:38:9f:
8e:89:02:78:53:af:26:2a:4e:4b:b3:44:cc:00:0d:
98:50:b4:77:22:67:33:7f:d5:82:18:e5:dc:55:5e:
64:eb:e0:70:82:7a:69:e2:ec:75:40:ea:1e:10:e7:
2c:f6:a3:4d:b7:5f:96:9d:88:7b:e3:85:86:b0:23:
46:8c:3b:b9:fb:b0:5e:40:e8:ba:1c:15:ac:3f:de:
f4:0b:c6:67:fb:3e:88:cc:ed:8a:ed:1a:c4:13:4c:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:6A:B1:AD:46:B7:6B:C1:F0:32:BD:FC:23:82:49:F6:30:2C:D2
X509v3 Authority Key Identifier:
keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.23.0/24
163.61.154.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e5:98:60:64:0c:a1:73:41:8e:0e:84:5b:c4:08:55:66:a6:
98:07:49:7d:73:c2:38:6c:19:1f:a4:18:73:63:b0:35:02:53:
f8:2e:46:ae:90:cb:32:56:17:05:00:bd:bb:27:14:77:39:84:
1c:8f:b6:3e:4f:6b:a2:78:fb:f9:03:ea:2e:97:c0:78:3a:8a:
8f:8a:24:2e:66:53:4c:2f:89:d5:ae:14:2a:cc:77:62:53:b9:
09:5b:9a:78:a0:e4:e6:9b:40:88:a5:52:ba:bf:8f:61:73:4b:
e0:35:a9:42:f1:9d:3e:e2:84:bf:dd:5e:9a:e0:28:1c:d4:bc:
3c:73:7c:3a:fe:e6:c1:3b:45:3c:7e:06:b2:76:f8:8b:c1:85:
e5:5d:5e:77:6f:5c:01:54:f3:dc:2b:37:80:04:9b:d5:00:20:
1e:56:4a:84:6e:95:8f:71:1e:89:01:d0:d5:97:d5:f9:be:f3:
81:6b:a1:9e:ba:ed:8b:8e:92:c5:cf:8f:ea:e7:18:75:0f:e6:
55:aa:55:55:7f:5d:26:84:23:7a:51:36:1f:e4:c9:24:17:cd:
9e:6e:23:26:bc:7e:88:69:73:b5:8b:33:e1:25:88:69:cd:0d:
88:82:f6:0b:d6:c6:85:31:c0:ed:b6:a7:f1:d6:e5:8f:d9:0f:
8d:d2:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:58 2026 by rpki-client