
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD90ED68057211F0B6E2301BC4F9AE02.roa
File: CD90ED68057211F0B6E2301BC4F9AE02.roa (raw, json)
Hash identifier: eKDAjFI7uLbjlMqzaXqO/giEMIaCgnJ47zdh3OypaOI=
Subject key identifier: 8A:59:1D:7D:8E:93:BA:53:FB:AA:C9:F1:8C:1F:E1:E9:23:BA:07:C6
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 043C
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD90ED68057211F0B6E2301BC4F9AE02.roa
Signing time: Sat 27 Jun 2026 01:32:29 +0000
ROA not before: Sat 27 Jun 2026 01:32:29 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 142565
IP address blocks: 103.243.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jun 27 01:32:29 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3f282d-30b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:74:2a:e7:9a:c0:ea:07:b3:99:c0:ee:89:
a7:0b:0f:5f:e8:b1:a7:72:6c:87:7f:20:c1:6d:1a:
0a:98:f1:3e:2e:69:e4:19:f9:53:60:25:89:4e:f3:
df:c0:40:f0:8f:d4:5c:f5:35:fb:99:35:38:fe:79:
4e:54:ae:b0:fa:47:05:b4:c9:7a:53:72:77:2d:7e:
3a:e8:fb:3e:47:92:45:37:28:ac:2a:8b:86:3d:46:
57:23:51:47:31:e5:10:d0:ec:10:d6:10:b9:e9:d1:
f4:05:5f:1e:b1:2b:ce:2c:14:04:a2:31:b7:15:15:
ed:a9:4c:f2:33:3e:c3:51:cb:70:d3:a4:8b:bd:c0:
d3:fa:cd:73:24:33:6f:1e:dd:89:7b:2c:fe:f8:b2:
b4:70:e4:42:c9:8b:db:10:cb:b8:fb:0d:ac:53:7f:
2b:47:c3:5e:23:34:32:0c:d7:29:fe:47:51:d2:32:
9c:f7:82:f8:2c:a9:bc:32:f0:ef:91:30:bd:1e:c0:
73:a4:4a:29:0a:49:29:35:0c:ac:a7:cd:a3:01:18:
6f:e9:9a:b9:d2:cd:f8:03:97:dc:4d:47:1c:33:9b:
2f:48:75:b1:e5:1c:a1:7d:a6:96:d2:9f:33:9b:5b:
a4:e2:ef:b0:ad:75:55:b4:b6:d6:62:14:12:1d:48:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:59:1D:7D:8E:93:BA:53:FB:AA:C9:F1:8C:1F:E1:E9:23:BA:07:C6
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD90ED68057211F0B6E2301BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ac:c2:69:cf:11:98:dc:f0:e0:20:b0:47:7e:d4:4f:f2:9f:
fb:5e:7c:53:ae:8d:66:61:7e:2f:93:79:d3:51:c4:f7:2c:e2:
69:03:5c:0a:b7:09:8f:c2:61:ea:f6:f6:ae:a3:46:41:34:09:
9b:81:c0:0c:34:11:cd:ec:3a:d3:02:ac:d0:f2:cb:76:40:49:
7c:fb:51:fe:00:3b:12:62:78:6c:72:e8:4e:bf:3e:c3:1d:42:
ce:4d:13:28:32:4b:ed:f9:b1:b7:43:35:d4:0f:1d:42:71:7a:
07:4b:a9:a0:fd:e8:12:92:69:a3:2e:74:76:3b:5a:cd:0a:34:
02:48:8e:6d:9a:19:77:35:22:82:91:bf:84:30:af:ae:a7:61:
76:0b:3e:d8:b5:55:8a:68:b2:7a:c5:6b:33:29:66:c8:ce:91:
cf:69:97:89:59:64:7f:af:a7:72:52:50:e7:a6:d0:df:dc:86:
23:25:ba:61:8d:7b:37:cf:e3:16:c1:5f:29:f2:47:99:0f:ba:
21:c8:f6:70:98:fb:52:7d:ea:8a:22:6d:b3:d4:97:29:ab:a6:
7a:a5:49:7d:e1:55:50:03:a9:cf:e8:3f:c1:f5:fb:7f:f6:72:
49:36:f3:b0:4d:33:de:b8:93:7b:35:63:3d:7c:3b:4b:53:e6:
25:61:96:fd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE
QUVGNDEzOTYwHhcNMjYwNjI3MDEzMjI5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNmMjgyZC0zMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1It0KueawOoHs5nA7omnCw9f6LGncmyHfyDBbRoKmPE+LmnkGflTYCWJTvPf
wEDwj9Rc9TX7mTU4/nlOVK6w+kcFtMl6U3J3LX466Ps+R5JFNyisKouGPUZXI1FH
MeUQ0OwQ1hC56dH0BV8esSvOLBQEojG3FRXtqUzyMz7DUctw06SLvcDT+s1zJDNv
Ht2Jeyz++LK0cORCyYvbEMu4+w2sU38rR8NeIzQyDNcp/kdR0jKc94L4LKm8MvDv
kTC9HsBzpEopCkkpNQysp82jARhv6Zq50s34A5fcTUccM5svSHWx5RyhfaaW0p8z
m1uk4u+wrXVVtLbWYhQSHUhu+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIpZHX2O
k7pT+6rJ8Ywf4ekjugfGMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx
QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvQ0Q5MEVENjgw
NTcyMTFGMEI2RTIzMDFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ/N0MA0GCSqGSIb3DQEBCwUAA4IBAQBrrMJpzxGY3PDgILBHftRP
8p/7XnxTro1mYX4vk3nTUcT3LOJpA1wKtwmPwmHq9vauo0ZBNAmbgcAMNBHN7DrT
AqzQ8st2QEl8+1H+ADsSYnhscuhOvz7DHULOTRMoMkvt+bG3QzXUDx1CcXoHS6mg
/egSkmmjLnR2O1rNCjQCSI5tmhl3NSKCkb+EMK+up2F2Cz7YtVWKaLJ6xWszKWbI
zpHPaZeJWWR/r6dyUlDnptDf3IYjJbphjXs3z+MWwV8p8keZD7ohyPZwmPtSfeqK
Im2z1Jcpq6Z6pUl94VVQA6nP6D/B9ft/9nJJNvOwTTPeuJN7NWM9fDtLU+YlYZb9
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:26 2026 by rpki-client