
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/E3ACB710B9B211E9A9A37254C4F9AE02.roa
File: E3ACB710B9B211E9A9A37254C4F9AE02.roa (raw, json)
Hash identifier: njW4G80Rv9z2lly1Ec6m17apN76EYAUVeT2oNP+2cUU=
Subject key identifier: 14:00:DC:F4:F5:65:54:83:CD:0F:1E:D7:52:86:0C:79:A5:24:2F:64
Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Certificate serial: 0E88
Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/E3ACB710B9B211E9A9A37254C4F9AE02.roa
Signing time: Wed 06 May 2026 18:21:27 +0000
ROA not before: Wed 06 May 2026 18:21:27 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 133408
IP address blocks: 103.97.142.0/23 maxlen: 23
103.97.152.0/24 maxlen: 24
103.227.140.0/24 maxlen: 24
2001:df3:a800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3720 (0xe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F783D, serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Validity
Not Before: May 6 18:21:27 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69fb86a6-48d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:e3:43:f0:50:b5:dd:99:5c:b6:fb:8d:35:
ee:31:ce:46:cf:4e:7a:21:86:6b:c8:8e:4d:ed:25:
9b:6b:23:5a:d8:f0:b1:42:c3:3e:a2:03:27:05:0c:
50:96:34:17:e0:32:bb:12:18:f7:4f:e3:49:7d:3d:
b7:b2:6b:c3:04:93:b9:ae:0f:d4:1b:b1:2d:9a:06:
a5:1f:b3:7d:1e:37:34:84:35:29:fc:e4:b4:b4:65:
bd:66:0b:78:58:f4:76:c2:5d:c3:c1:10:05:90:67:
a9:a4:49:fc:2d:1c:e6:d2:ee:60:01:87:c7:d6:f8:
1f:5c:f6:70:19:56:f2:f1:90:2d:f3:23:e7:e4:61:
f0:b1:24:eb:b9:ce:e7:42:ca:e1:33:a2:b5:d3:fd:
0f:42:d8:85:53:6b:cf:bd:75:49:57:e3:01:77:e1:
11:8f:a8:b8:b6:20:8b:c5:3f:3f:44:f3:cf:7a:1b:
36:56:d7:da:1c:ae:a5:35:9d:ff:d7:3d:44:67:86:
04:98:01:a2:e0:35:22:18:70:21:f4:f2:01:02:77:
8c:f9:97:c5:8d:7a:ce:94:22:58:8e:4d:a4:6e:f8:
f6:4e:29:9b:60:e0:48:a1:9d:69:78:41:29:11:67:
f4:8a:ea:b6:f7:45:73:52:d7:33:ba:0b:6c:02:b7:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:DC:F4:F5:65:54:83:CD:0F:1E:D7:52:86:0C:79:A5:24:2F:64
X509v3 Authority Key Identifier:
keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/E3ACB710B9B211E9A9A37254C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.142.0/23
103.97.152.0/24
103.227.140.0/24
IPv6:
2001:df3:a800::/48
Signature Algorithm: sha256WithRSAEncryption
30:05:9e:9c:41:f9:22:b8:26:32:9b:07:fe:7c:86:10:0b:2a:
0c:71:ae:c6:de:9e:e6:56:c4:67:f2:ff:ef:ff:4c:0e:20:63:
5a:6a:42:91:2c:40:71:10:3d:a0:f7:ed:47:be:cc:35:3b:d3:
3d:5c:c5:fb:d9:df:f9:c8:56:d0:97:b2:9f:d9:02:53:33:f4:
6c:0a:5d:02:af:2f:0f:83:76:83:49:68:90:48:b4:95:3b:79:
59:60:52:65:be:d2:cb:b5:c9:57:85:85:86:23:94:05:d9:b6:
2c:44:4f:b4:6f:ad:d8:2b:be:44:9d:d6:a9:8d:de:cd:55:1e:
41:98:97:45:e5:a6:04:dd:30:5e:0a:78:1c:3b:8a:d2:f0:0f:
3f:46:1a:3b:7c:02:99:9c:be:67:c7:75:d8:b8:9d:7d:c2:d6:
cd:ba:f9:c7:6d:53:fa:2c:29:33:82:29:8a:87:31:45:59:19:
df:17:eb:9c:90:d6:15:45:c0:12:11:8a:0b:44:8a:c0:f8:82:
a4:b8:23:98:0c:01:06:72:54:6d:d0:46:d4:f1:9f:e0:82:a5:
ea:9a:d7:16:df:ed:85:f1:82:c0:11:93:40:fb:54:7f:d1:39:
d6:75:45:b6:fe:d5:e2:c6:28:0f:bc:64:c3:09:d1:e3:1c:da:
82:4f:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:48 2026 by rpki-client