
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/9E1DAA4A7D6B11F1802936357FA30FBC.roa
File: 9E1DAA4A7D6B11F1802936357FA30FBC.roa (raw, json)
Hash identifier: Hsov6BU0z8az1Wr0ISWSrVfJM+rDAtlUR7qSGNNPaWs=
Subject key identifier: C7:E1:88:10:68:0C:C8:6E:68:31:B6:B6:61:56:E6:E6:22:CC:57:BD
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 02A3
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/9E1DAA4A7D6B11F1802936357FA30FBC.roa
Signing time: Sat 11 Jul 2026 22:10:02 +0000
ROA not before: Sat 11 Jul 2026 22:10:02 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141711
IP address blocks: 103.176.246.0/24 maxlen: 24
103.176.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Validity
Not Before: Jul 11 22:10:02 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a52bf39-6b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:0d:12:2d:38:da:0f:27:35:60:a3:8a:3b:
a8:14:b1:cf:1c:59:1a:19:a3:14:3e:a7:3c:0b:c0:
73:83:02:7f:c9:d9:5c:b1:92:1e:6d:9b:12:a7:9a:
79:40:a2:8f:0c:86:4a:e1:53:db:f8:47:af:78:b6:
63:4c:76:6c:41:53:eb:f5:70:94:c8:08:20:15:3e:
16:74:48:ac:e2:04:4f:73:c4:f9:0e:08:22:9b:36:
a9:bc:09:f9:b3:96:41:3d:44:c1:16:99:fe:39:fe:
20:e3:90:88:0c:6a:71:a0:55:84:cf:3c:50:2c:35:
26:aa:63:37:5c:16:13:02:17:fd:fa:4a:2e:fd:62:
9d:85:e7:c1:8a:3d:fd:56:96:4b:94:46:5f:f9:1e:
04:8e:42:f3:79:11:fc:08:72:a6:b3:7e:2d:1a:2a:
97:8e:c9:8f:bd:8a:7f:e5:0b:33:28:c4:64:02:a7:
0f:9d:17:b3:41:8c:8c:2d:d7:50:09:7e:9e:50:33:
dd:81:b6:0e:47:01:a8:68:85:e9:7e:22:82:5b:ab:
61:ee:3a:30:06:d1:dd:04:b1:00:1f:96:9e:d7:76:
a5:24:41:be:16:83:6b:c8:1c:5a:84:1f:5f:1f:4d:
5a:52:a4:a7:68:ad:4e:f9:71:47:fd:d5:b3:6b:15:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E1:88:10:68:0C:C8:6E:68:31:B6:B6:61:56:E6:E6:22:CC:57:BD
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/9E1DAA4A7D6B11F1802936357FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.246.0/23
Signature Algorithm: sha256WithRSAEncryption
61:54:c2:a8:4d:8a:7e:97:05:00:0b:03:52:10:fd:2b:72:ba:
fe:32:09:42:0e:c8:fb:2a:51:15:15:41:8f:29:15:aa:40:45:
cf:a3:68:79:e9:cf:bc:98:83:42:c7:21:d2:8a:bc:0f:8c:f4:
71:76:21:83:84:02:b2:75:1c:16:75:94:1b:56:25:5c:cd:58:
f9:0d:92:28:52:22:4f:8b:4a:4d:dc:59:c1:0b:2f:e8:b5:e7:
21:5e:5d:f0:4c:78:f4:a7:06:00:b8:e2:de:62:d7:8e:39:23:
c3:1a:8e:82:41:4f:25:11:4a:7c:08:03:d8:9c:a5:a1:e1:ce:
61:72:a5:cd:de:c4:37:1e:14:47:1d:2c:d4:5b:8c:21:eb:5b:
6c:e3:73:d1:1c:c5:c9:29:98:5c:40:5e:f7:37:00:20:c9:1d:
30:7d:ef:c9:d6:d8:91:5e:56:1a:43:cc:af:0a:b5:f4:38:27:
1c:f4:8a:60:b6:ce:8d:27:51:8d:21:7c:04:39:67:a3:59:e1:
51:98:5d:79:5d:fb:a0:70:32:34:96:95:b2:e6:05:c6:93:96:
ed:87:29:da:ad:ba:6a:de:75:07:1f:21:cc:f9:eb:31:c0:a7:
78:d6:fd:f9:ca:b2:6b:c5:9c:5b:8a:9f:fe:c7:19:5d:74:9d:
47:4d:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:28 2026 by rpki-client