
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa
File: DA6883FC0F8611F0955A002EC4F9AE02.roa (raw, json)
Hash identifier: ujD9rjcrRHYOqCEjUIoZvFUUB/o5LyWXBu1ngVXvlf4=
Subject key identifier: 6E:78:3C:38:CD:C5:0A:8A:D3:3E:8C:14:26:F8:52:7F:15:03:09:B4
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02F9
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa
Signing time: Thu 05 Nov 2026 03:49:18 +0000
ROA not before: Thu 05 Nov 2026 03:49:18 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 139648
IP address blocks: 103.218.172.0/24 maxlen: 24
103.218.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 02:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Nov 5 03:49:18 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aebfcbe-922d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:08:4f:12:ca:c1:59:e6:5e:15:8d:f8:e9:f7:
02:cd:2d:9a:85:8f:9d:fe:43:1f:1f:7c:1f:e6:dc:
c8:a9:06:82:2e:7e:48:eb:be:a5:63:a3:f7:cf:bf:
78:d9:d9:42:a9:15:16:9d:c9:c1:60:8a:07:b0:67:
34:52:93:26:d3:e5:8c:e4:fd:72:00:f8:87:11:8d:
81:7d:0c:e2:c7:cc:a0:81:d4:9d:fb:0f:12:29:ba:
f1:9f:f6:8a:ab:d8:5f:db:7c:6a:98:9f:06:73:d3:
9f:1e:c4:75:a2:9d:c2:6f:70:f3:80:41:f9:24:71:
c8:3c:11:c8:5e:f7:32:a0:78:22:b7:69:3a:b8:2b:
45:c2:72:64:bb:0b:ed:3c:a8:59:81:e6:ea:60:4f:
8b:bf:da:65:25:a5:c7:d7:65:dd:bb:de:8b:87:c5:
f4:6e:17:9e:76:8b:8e:6b:28:25:60:2a:5b:ef:e0:
4b:4a:07:84:13:fa:71:a8:80:51:b5:4f:d6:74:3b:
f9:41:e4:01:f4:f9:da:bf:36:aa:b2:29:b1:8e:55:
59:e3:71:4a:d3:43:8f:2c:37:da:70:7d:f6:79:82:
4f:e7:b2:b5:f7:65:5d:db:7b:68:78:32:51:d9:62:
e6:00:ae:78:8d:8b:a2:f9:ec:22:a3:f6:9d:4d:7a:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:3C:38:CD:C5:0A:8A:D3:3E:8C:14:26:F8:52:7F:15:03:09:B4
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.218.172.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:a9:8e:1a:4e:81:75:e8:0f:80:49:03:85:ba:5f:f9:c6:a7:
5e:08:f1:42:cc:25:96:7b:cb:12:0d:3a:6f:3d:09:24:39:81:
84:4d:5c:c5:a3:74:c3:1a:eb:54:f2:91:43:61:08:3a:97:7c:
ff:4c:ee:f8:b8:47:91:05:85:db:19:9e:6d:ae:ce:1b:9e:01:
44:57:aa:a7:f4:5f:3f:bc:e1:2c:2a:fe:c1:dd:31:28:89:66:
06:0e:39:9d:f6:1e:d9:43:96:56:ca:75:53:aa:af:80:bc:3d:
ee:fe:a5:ea:51:eb:1f:be:36:d6:fc:e9:1d:b3:51:dc:86:5b:
df:8c:27:60:a0:89:9f:f0:03:21:23:eb:ca:25:5f:47:80:aa:
2a:47:f5:93:78:c9:12:1c:7b:3d:b3:8b:54:20:c2:77:c4:b0:
2f:6a:13:cf:03:fb:36:dc:c4:e1:0a:55:95:58:80:4c:06:c6:
6f:07:f2:da:96:e0:48:a5:02:7a:ba:8e:8d:ea:30:b6:59:23:
b8:dd:9c:76:7c:5d:6e:da:a9:5d:5c:44:ec:3e:bd:9b:98:cf:
16:fb:43:e6:47:3e:25:d6:06:95:7a:51:26:fb:4b:73:fd:da:
b7:3c:a7:67:8c:58:e5:d5:e5:b7:68:cb:ee:e7:ba:a4:38:e9:
8e:f8:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:16:06 2026 by rpki-client