
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa
File: BD84664CB0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier: BMqNg3S+vVRbcjj4gtej8V0T5DqfpOPrq+PFV3hoy/s=
Subject key identifier: 55:CE:6A:64:E4:3B:B6:5F:D8:A3:52:22:29:FE:66:F9:3B:26:15:28
Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial: 2877
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa
Signing time: Mon 20 Jul 2026 16:15:30 +0000
ROA not before: Mon 20 Jul 2026 16:15:30 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 58430
IP address blocks: 103.11.12.0/24 maxlen: 24
2405:6d00:c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10359 (0x2877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Validity
Not Before: Jul 20 16:15:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5e49a2-0aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:c1:ea:4a:be:6c:ff:65:6a:6e:84:62:f0:
2e:52:de:28:c8:c0:e1:db:8e:8e:c3:c6:61:f4:a2:
34:c3:03:47:b6:75:6a:97:b4:d6:33:14:50:fc:90:
ca:92:f2:46:35:fd:07:17:ef:f9:a3:46:9b:c1:14:
4b:4a:5b:01:db:8e:a5:f0:d0:88:de:30:a1:16:04:
78:79:62:85:72:0e:7f:09:62:00:44:97:1f:04:02:
c2:73:3e:fc:4a:04:6a:4e:32:85:9c:b8:96:50:7f:
36:3b:80:62:1c:ba:90:fc:37:5d:eb:ad:6b:73:e0:
5b:57:ae:f2:d9:87:50:92:c8:37:ee:3a:b5:44:4d:
4c:ef:81:d0:33:85:8d:eb:6e:61:33:bf:b8:14:e3:
d7:61:80:61:43:4a:27:c6:89:6b:70:92:f3:76:63:
b3:1a:ca:ca:11:2a:2b:60:e2:09:33:b3:17:f5:69:
bc:8c:29:f1:af:ab:d5:a2:06:51:83:40:25:2c:0d:
33:df:b0:a7:09:73:46:82:9b:fe:32:b5:8b:bc:87:
40:9b:08:02:45:0d:8e:56:56:6e:43:80:81:c5:f4:
f0:c4:5e:11:7d:5d:c0:2d:99:b5:2a:1c:2a:dd:09:
ad:78:2d:1d:7e:68:16:e1:b7:54:a3:e7:d6:b3:58:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:6A:64:E4:3B:B6:5F:D8:A3:52:22:29:FE:66:F9:3B:26:15:28
X509v3 Authority Key Identifier:
keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.11.12.0/24
IPv6:
2405:6d00:c00::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c8:1d:08:99:fe:f6:af:af:80:4b:65:46:5e:63:ea:a6:d3:
a3:28:52:1f:bc:f8:0c:7a:21:36:08:e9:dc:b3:f8:d1:78:79:
5b:b9:d6:02:a2:61:0f:2e:33:35:87:d5:2e:58:6a:af:63:b9:
74:a4:34:37:ab:a8:a6:d6:dd:65:24:5d:5a:a2:f8:23:c9:e0:
b7:fb:e2:49:22:98:c2:c3:43:2a:ac:f5:bc:c4:ce:63:5e:bc:
75:c3:c4:b0:d0:77:40:b0:ec:ee:71:6c:dc:81:5a:9e:74:5a:
14:75:97:da:ae:38:a9:73:ab:08:ca:58:55:a0:c3:84:ea:12:
84:97:5a:a3:0b:d2:00:38:60:78:0a:51:8f:58:0f:0a:01:4e:
54:ab:d9:8e:a7:94:23:c2:b5:ff:dd:c1:9e:9f:ec:cc:d9:eb:
8d:5d:c0:41:61:16:37:7f:56:2c:2a:79:62:02:c4:ab:c3:a0:
e5:96:61:b6:cc:c0:87:e1:8f:81:16:3a:c4:fb:10:7e:e8:31:
34:73:03:d9:ad:fb:a5:c8:70:47:de:ab:f5:d0:84:97:a9:9b:
ce:f0:80:78:4b:e1:81:37:c7:1e:79:8a:5c:3d:4d:4a:13:a6:
cb:60:8b:47:2f:e1:c7:60:d2:35:96:59:9c:9e:58:80:f8:d0:
e7:4b:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:50 2026 by rpki-client