
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
File: F23AE0AE632D11ED8C102087C4F9AE02.roa (raw, json)
Hash identifier: qQtQpzpKePrE0RobwOY3K8zJSsDC8DXI0exZ1Gcq51U=
Subject key identifier: 46:6C:C7:1E:E5:7D:BE:B2:3D:16:14:A6:21:B4:AA:E7:B8:C5:B1:8B
Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Certificate serial: 02DE
Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
Signing time: Wed 09 Sep 2026 01:53:26 +0000
ROA not before: Wed 09 Sep 2026 01:53:26 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 150302
IP address blocks: 103.217.98.0/24 maxlen: 24
103.217.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 01:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Validity
Not Before: Sep 9 01:53:26 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0bc16-cb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:28:c8:9d:69:06:1d:d7:c1:dc:b8:22:5d:
de:a1:93:22:9a:8e:32:e1:ec:5f:4a:1d:39:d7:d4:
6d:89:93:1d:a4:92:54:b9:b8:22:fb:41:fd:26:84:
df:2d:5a:c0:7d:23:ad:0a:4b:75:49:6a:ec:40:17:
57:e0:15:fc:33:60:f1:2b:df:30:50:bf:4d:de:78:
75:fd:40:45:9d:98:4c:7b:14:28:9e:17:a9:64:6f:
d1:b7:8d:9a:3c:f3:78:d5:9f:84:13:a2:07:09:1b:
a8:51:3a:bb:7e:69:02:ed:c8:0d:97:f7:39:98:ad:
5d:65:ea:29:5c:e5:53:96:53:62:2d:7a:4b:df:a3:
b8:cc:fb:62:59:16:8c:16:26:cb:3c:45:a7:f2:9a:
c9:f0:c1:e3:b2:e5:9e:22:ab:c8:cf:af:29:e6:5b:
5b:45:4f:c2:c2:03:12:50:02:02:89:b6:84:11:47:
07:d4:4c:55:da:e8:ca:95:0f:18:4f:90:e3:b6:2f:
cb:e5:45:eb:aa:f6:3b:a2:a1:d3:fd:d9:6b:35:16:
ca:16:11:f8:a4:1b:10:de:cc:b8:96:4b:c1:4e:37:
f1:02:b1:93:42:4f:11:66:a6:61:ce:2b:be:8a:1f:
7a:73:26:c2:3f:30:0c:82:76:12:d7:f8:a7:d1:8a:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6C:C7:1E:E5:7D:BE:B2:3D:16:14:A6:21:B4:AA:E7:B8:C5:B1:8B
X509v3 Authority Key Identifier:
keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.217.98.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:47:d0:2c:45:60:a2:ce:96:ec:3b:66:a8:0d:8e:60:69:08:
9c:82:94:0c:85:50:4c:36:53:9b:60:88:4a:22:cc:35:5b:33:
54:59:22:1e:c3:8e:37:35:41:f8:52:1f:c9:a2:a3:51:63:14:
78:67:b1:c0:d9:d5:d1:be:67:e9:9c:2b:4f:8a:8c:c8:b7:b2:
b6:9c:4c:31:ed:09:cd:ae:32:ea:77:7b:90:68:fb:1a:15:1d:
dd:95:cb:54:63:6e:6b:23:cd:34:3b:ec:7a:cd:67:a7:36:5f:
46:6f:62:a7:f4:04:ad:1f:22:4a:a1:66:43:51:1b:d9:48:5a:
d1:5c:9d:27:85:1c:5b:1e:86:94:54:54:2d:e0:aa:cf:9f:2b:
32:68:66:10:9f:d9:54:57:77:ef:38:65:b3:ea:95:d6:ad:a9:
98:bb:a9:9c:cc:f7:dc:f5:f4:f3:18:c3:75:27:11:e1:7c:0e:
69:be:fb:cc:e0:7d:39:44:fd:32:e0:d1:df:fb:21:31:77:d6:
32:d9:ef:f0:ed:1a:04:92:b7:85:56:e6:a5:37:10:56:5f:ee:
b0:44:8b:0e:ea:8a:53:a4:10:7a:83:c3:59:18:c7:6e:71:6e:
cd:35:72:44:ef:66:68:a9:d6:34:8c:6a:76:ed:2b:90:28:78:
59:83:d7:73
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0
M0MzM0MzRkIwHhcNMjYwOTA5MDE1MzI2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwYmMxNi1jYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFcoyJ1pBh3Xwdy4Il3eoZMimo4y4exfSh0519RtiZMdpJJUubgi+0H9JoTf
LVrAfSOtCkt1SWrsQBdX4BX8M2DxK98wUL9N3nh1/UBFnZhMexQonhepZG/Rt42a
PPN41Z+EE6IHCRuoUTq7fmkC7cgNl/c5mK1dZeopXOVTllNiLXpL36O4zPtiWRaM
FibLPEWn8prJ8MHjsuWeIqvIz68p5ltbRU/CwgMSUAICibaEEUcH1ExV2ujKlQ8Y
T5Djti/L5UXrqvY7oqHT/dlrNRbKFhH4pBsQ3sy4lkvBTjfxArGTQk8RZqZhziu+
ih96cybCPzAMgnYS1/in0Yp44wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEZsxx7l
fb6yPRYUpiG0que4xbGLMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw
MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTk1MDkvMjc0RUQxNUU2MDFBMTFFREI3NDE2QjZDQzRGOUFFMDIvRjIzQUUwQUU2
MzJEMTFFRDhDMTAyMDg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ9liMA0GCSqGSIb3DQEBCwUAA4IBAQCzR9AsRWCizpbsO2aoDY5g
aQicgpQMhVBMNlObYIhKIsw1WzNUWSIew443NUH4Uh/JoqNRYxR4Z7HA2dXRvmfp
nCtPiozIt7K2nEwx7QnNrjLqd3uQaPsaFR3dlctUY25rI800O+x6zWenNl9Gb2Kn
9AStHyJKoWZDURvZSFrRXJ0nhRxbHoaUVFQt4KrPnysyaGYQn9lUV3fvOGWz6pXW
ramYu6mczPfc9fTzGMN1JxHhfA5pvvvM4H05RP0y4NHf+yExd9Yy2e/w7RoEkreF
VualNxBWX+6wRIsO6opTpBB6g8NZGMducW7NNXJE72ZoqdY0jGp27SuQKHhZg9dz
-----END CERTIFICATE-----
Generated at Fri Oct 2 22:06:59 2026 by rpki-client