
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/6B8789A63FA011F1B60E4CC5BB833773.roa
File: 6B8789A63FA011F1B60E4CC5BB833773.roa (raw, json)
Hash identifier: eUeT9MfyQplwOYsEvB1DK9Ul4fMRh4BuNuH+20Gy/0Q=
Subject key identifier: 4E:3A:06:74:FA:32:E6:90:A1:EE:3B:6F:2E:70:E9:8B:57:B3:6C:16
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 0953
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/6B8789A63FA011F1B60E4CC5BB833773.roa
Signing time: Fri 24 Apr 2026 05:42:46 +0000
ROA not before: Fri 24 Apr 2026 05:42:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 2914
IP address blocks: 103.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2387 (0x953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Apr 24 05:42:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69eb02d6-82c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:0b:32:a4:b6:3e:3a:86:d7:9f:d5:5e:e0:
b0:29:fb:ed:52:0d:49:de:94:e2:2a:88:22:ec:c4:
01:cb:a9:15:c2:91:e9:3a:d3:bd:64:28:9f:7a:85:
ca:98:41:c2:69:e6:2d:a5:9e:82:d5:8a:2b:ab:19:
01:ef:cd:2c:e6:db:50:27:90:67:3c:96:68:14:c6:
b2:51:0f:eb:03:0c:ad:51:45:a7:a5:cc:b1:65:10:
ef:e5:04:b5:e5:22:33:cd:a1:e8:78:88:98:fe:ea:
5f:7f:08:34:d4:9e:c2:cd:41:3f:e9:fe:68:d6:88:
3d:e2:49:b4:5d:4a:ca:dd:fb:f5:1a:47:da:e7:73:
6a:f6:c0:50:43:93:55:c1:78:4b:1d:da:70:2a:56:
60:1f:10:e3:4e:02:ce:0e:ff:28:00:fd:70:e9:43:
9f:72:50:35:bf:2b:dd:2b:0c:ce:f0:d9:a0:f7:0b:
21:1d:f4:7b:f6:13:32:84:a5:f8:36:09:86:d8:80:
41:cf:ff:24:02:5a:9c:89:11:b3:17:f8:2f:ec:34:
6d:88:34:6d:07:31:45:e1:8b:5f:cb:66:d5:5d:84:
9d:8b:f9:0a:a6:7e:5d:d2:d9:d0:15:a6:17:44:6c:
3a:58:a7:77:08:b6:05:53:e5:f4:d2:00:0b:d8:aa:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3A:06:74:FA:32:E6:90:A1:EE:3B:6F:2E:70:E9:8B:57:B3:6C:16
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/6B8789A63FA011F1B60E4CC5BB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f5:2c:8e:5a:9a:3e:c1:09:73:57:42:84:2b:b5:d5:7f:0c:
50:bf:4f:3c:69:2d:20:01:5f:58:aa:c1:c2:e6:78:51:ce:40:
77:9a:4b:fc:f0:f6:b6:eb:c8:86:de:8b:9e:8e:59:4a:a5:b0:
01:2a:43:a2:53:16:20:6a:72:b9:be:97:6c:cc:48:95:c0:56:
7c:72:0f:90:b5:10:de:02:81:95:e8:42:03:15:36:ac:08:9f:
fc:55:6f:41:4a:24:84:0b:06:b8:ae:8b:b3:2e:41:13:e6:a6:
c4:b3:c5:e4:d8:65:f4:fe:09:48:41:42:c6:78:b3:ff:60:e3:
98:06:53:8f:44:5c:b6:0e:25:0c:b4:69:97:15:08:ca:f6:fd:
aa:70:6d:03:91:4e:52:a6:54:88:6a:3d:17:fc:7d:40:e8:32:
d2:84:98:98:34:0c:d6:03:6a:e1:10:24:de:78:21:4a:dc:c2:
4e:53:5c:8e:71:0c:6d:59:c7:97:e2:f9:53:18:60:86:11:19:
cb:bc:9d:8c:a7:a7:fb:55:57:f7:93:81:77:ed:cf:cf:29:0f:
e4:1a:9c:03:ca:49:be:78:b1:9a:4e:70:fb:c4:21:c7:39:bb:
ca:f6:f7:b6:05:bb:10:0d:c8:08:71:47:56:d9:04:da:63:70:
58:1e:34:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVBNTYxMTAvBgNVBAUTKEJCRTQ5RkNCNDFGNTAyNkEzNUJGNkM5M0I5MUZERkYz
Qzg4QzczNkUwHhcNMjYwNDI0MDU0MjQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWViMDJkNi04MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jYLMqS2PjqG15/VXuCwKfvtUg1J3pTiKogi7MQBy6kVwpHpOtO9ZCifeoXK
mEHCaeYtpZ6C1YorqxkB780s5ttQJ5BnPJZoFMayUQ/rAwytUUWnpcyxZRDv5QS1
5SIzzaHoeIiY/upffwg01J7CzUE/6f5o1og94km0XUrK3fv1Gkfa53Nq9sBQQ5NV
wXhLHdpwKlZgHxDjTgLODv8oAP1w6UOfclA1vyvdKwzO8Nmg9wshHfR79hMyhKX4
NgmG2IBBz/8kAlqciRGzF/gv7DRtiDRtBzFF4Ytfy2bVXYSdi/kKpn5d0tnQFaYX
RGw6WKd3CLYFU+X00gAL2Kr+7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE46BnT6
MuaQoe47by5w6YtXs2wWMB8GA1UdIwQYMBaAFLvkn8tB9QJqNb9sk7kf3/PIjHNu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUE1Ni82ODQ2NjdGNEJG
M0ExMUVBOTRBRTRFN0NDNEY5QUUwMi91LVNmeTBIMUFtbzF2MnlUdVJfZjg4aU1j
MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UtU2Z5MEgxQW1vMXYyeVR1Ul9mODhpTWMyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVBNTYvNjg0NjY3RjRCRjNBMTFFQTk0QUU0RTdDQzRGOUFFMDIvNkI4Nzg5QTYz
RkEwMTFGMUI2MEU0Q0M1QkI4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZxfdMA0GCSqGSIb3DQEBCwUAA4IBAQBp9SyOWpo+wQlzV0KEK7XV
fwxQv088aS0gAV9YqsHC5nhRzkB3mkv88Pa268iG3ouejllKpbABKkOiUxYganK5
vpdszEiVwFZ8cg+QtRDeAoGV6EIDFTasCJ/8VW9BSiSECwa4rouzLkET5qbEs8Xk
2GX0/glIQULGeLP/YOOYBlOPRFy2DiUMtGmXFQjK9v2qcG0DkU5SplSIaj0X/H1A
6DLShJiYNAzWA2rhECTeeCFK3MJOU1yOcQxtWceX4vlTGGCGERnLvJ2Mp6f7VVf3
k4F37c/PKQ/kGpwDykm+eLGaTnD7xCHHObvK9ve2BbsQDcgIcUdW2QTaY3BYHjSZ
-----END CERTIFICATE-----
Generated at Wed May 13 15:59:15 2026 by rpki-client