
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/64DE26F6386011EC83DC2E23C4F9AE02.roa
File: 64DE26F6386011EC83DC2E23C4F9AE02.roa (raw, json)
Hash identifier: eJS4ttlkjEiWQT1Xc7ywsSFEMqNi4YRNk/JiLSNH8tc=
Subject key identifier: F4:AA:CB:77:E0:2C:AD:3B:7E:EC:2F:A4:31:05:42:22:E7:44:2D:66
Certificate issuer: /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Certificate serial: 058F
Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/64DE26F6386011EC83DC2E23C4F9AE02.roa
Signing time: Mon 24 Aug 2026 23:44:36 +0000
ROA not before: Mon 24 Aug 2026 23:44:36 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 142581
IP address blocks: 103.170.18.0/23 maxlen: 23
103.170.18.0/24 maxlen: 24
103.170.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1423 (0x58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Validity
Not Before: Aug 24 23:44:36 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8cd764-4e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:d8:36:53:dc:18:63:12:9f:19:82:4c:37:
1a:af:7c:46:09:fa:54:09:e6:0d:12:6e:27:5d:c3:
ff:89:59:b0:c1:09:ae:3d:c7:7b:fc:fc:14:dd:8e:
19:30:7e:b7:f4:eb:d2:f8:17:ce:41:6c:3c:0f:10:
f2:06:ca:96:cc:c2:d0:58:26:1c:01:af:8c:f8:d0:
fe:6d:5f:7f:4f:c1:62:37:b7:42:45:f1:c9:06:b4:
d4:76:9a:2e:3c:1e:8c:79:c7:95:fe:4f:bd:cb:e4:
75:ab:2f:32:66:fa:73:65:75:5b:38:a0:38:c8:dc:
cc:1f:c9:5a:7f:24:73:5e:7c:3f:e5:62:4d:26:ca:
2e:24:2f:2f:03:15:a7:fc:63:07:c3:a0:74:15:55:
43:96:51:54:e7:c7:6d:e1:09:80:8e:ea:ef:c7:b4:
0b:41:23:f6:95:d4:b4:de:52:bd:07:ac:49:ef:b4:
43:73:7b:fd:dd:ff:36:e4:f0:89:e5:21:a8:56:b4:
8c:2a:c4:8d:f1:65:6b:4f:4d:76:b2:52:f1:78:2c:
5c:3b:99:08:61:14:4f:33:56:01:42:b4:68:ca:82:
d4:64:a1:25:18:c8:53:3c:36:5b:a2:09:37:57:5f:
ad:b3:e5:f1:d7:d8:de:56:83:8e:5c:b7:4a:6e:e1:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AA:CB:77:E0:2C:AD:3B:7E:EC:2F:A4:31:05:42:22:E7:44:2D:66
X509v3 Authority Key Identifier:
keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/64DE26F6386011EC83DC2E23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.18.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:0a:a7:60:0e:dc:27:64:ad:9b:3f:90:8e:7b:a0:02:36:4b:
5d:e8:28:0a:d4:57:ec:f6:6f:9f:07:66:53:5b:10:ff:6a:6a:
00:11:69:41:ea:f6:36:98:d9:50:42:74:a7:de:ce:54:a2:49:
bb:03:5b:43:fd:9c:75:9e:72:98:13:04:b8:8f:1b:e1:fc:f2:
70:ab:1e:c8:dd:62:28:4a:69:8d:a2:92:06:d8:15:e3:50:37:
74:80:f0:4e:8a:f5:61:13:71:4e:f7:5d:6e:86:98:ad:be:dd:
55:fe:e1:a5:c6:9b:20:e3:f6:f6:5d:b7:36:c5:88:70:11:71:
1e:3b:9e:b3:0c:f9:c5:75:a2:ac:2b:4a:fd:32:ca:1e:e0:ad:
2c:f4:71:a9:01:52:a1:9d:27:2b:ea:c8:3d:07:d6:34:b7:86:
23:24:2c:ec:de:f6:26:f6:3c:08:8d:37:c2:1c:9e:e3:24:43:
7f:56:c9:ed:53:84:0c:71:55:2a:a6:08:0a:8f:fe:ec:db:df:
c9:51:ee:db:a6:fe:0f:c3:fe:d3:f7:6c:68:48:ae:53:41:32:
7c:cb:4a:86:d9:a9:15:b9:59:9e:50:6c:b9:71:ea:f7:41:65:
ce:7f:1b:72:2c:9c:06:7a:f5:fb:ed:68:ba:c0:37:75:ae:e4:
70:48:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:48:45 2026 by rpki-client