
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
File: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (raw, json)
Hash identifier: 3yI5gZ2vGPgL1FKd+BCUys3WRaz0/cKCtffyBVWrgS8=
Subject key identifier: 48:1E:A5:BE:4B:A6:3A:36:C7:7F:71:5D:D8:DE:9D:70:B6:78:E3:10
Certificate issuer: /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Certificate serial: 0BB0
Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
Signing time: Tue 26 May 2026 19:27:13 +0000
ROA not before: Tue 26 May 2026 19:27:13 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135311
IP address blocks: 103.213.240.0/23 maxlen: 24
103.213.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl
rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F88F4, serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Validity
Not Before: May 26 19:27:13 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a15f411-d39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:d7:cf:9f:01:f1:32:69:1c:ac:90:2f:15:
2a:93:6f:2f:17:a6:02:81:13:b7:e5:ec:d0:36:6e:
2c:13:24:eb:ab:31:ab:d4:d1:ed:2d:df:05:1e:8c:
28:11:70:2a:c2:13:22:19:ca:7c:3c:35:1f:81:21:
e4:d3:0f:78:18:bc:a6:0d:e8:80:11:fd:08:33:ed:
c6:6f:c0:a5:51:f3:22:ad:5e:af:99:b7:6c:b0:43:
de:b8:f7:77:84:b3:b8:b3:78:a3:69:76:63:25:76:
80:dc:7e:ea:c8:a0:8d:9c:18:38:9e:12:7f:38:3e:
25:6c:cc:05:d7:b1:bc:81:85:2d:df:93:91:38:49:
96:e4:4f:c2:28:bc:e3:93:92:84:00:de:f1:8c:88:
ad:b7:7b:c4:f9:74:a1:aa:0d:c4:53:e9:9e:5f:6f:
b9:76:7f:20:52:b0:9c:5e:5c:bf:3d:0b:34:87:40:
d2:ff:8f:0d:77:fb:bf:20:08:3f:12:76:ea:0c:55:
45:06:f3:40:65:05:41:8b:e4:aa:68:db:3a:4e:5b:
38:01:f7:ba:51:c8:c7:7e:8c:fd:1b:c2:67:a3:d8:
40:60:01:04:e1:82:29:a7:d8:dd:ef:d1:32:73:7a:
90:bd:25:9f:cb:52:4e:2c:df:2d:76:90:5e:57:db:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1E:A5:BE:4B:A6:3A:36:C7:7F:71:5D:D8:DE:9D:70:B6:78:E3:10
X509v3 Authority Key Identifier:
keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.240.0/22
Signature Algorithm: sha256WithRSAEncryption
23:f2:bc:af:65:b0:e1:0f:17:f7:b5:a1:98:63:c2:8d:87:17:
12:8c:6c:cb:fc:b1:89:9e:93:26:9b:6d:f6:f0:43:dd:0b:1f:
d2:98:54:47:f4:a8:17:e9:0f:58:67:8b:29:e1:28:0f:e6:6a:
a7:0e:d9:13:24:04:3b:bf:f5:fd:fe:ff:5a:1f:13:ea:7e:ef:
ac:5a:71:91:da:35:74:fd:cc:dd:94:22:4e:92:85:b7:39:99:
00:2d:48:48:27:b3:cc:8f:ef:cd:da:0b:19:e8:7f:4b:0d:e6:
9a:f2:6d:67:30:25:a2:70:ab:e3:4c:ef:b2:fb:59:99:ad:1e:
eb:89:38:8a:bf:5d:a8:24:50:40:59:76:1c:70:77:13:b8:7a:
ee:79:56:19:2c:15:8a:e8:75:bc:3e:b6:b1:49:28:7b:d0:db:
a4:db:3a:58:8d:12:b1:9a:ce:d5:c8:68:74:44:15:fb:07:3d:
a2:2d:5e:33:09:16:19:6d:83:3e:7d:25:80:21:c9:94:38:21:
d8:85:0d:ad:57:83:df:31:c1:dc:28:07:29:e7:00:8c:cf:b0:
57:0a:23:03:a8:97:48:ff:00:3b:88:b9:a8:f8:6a:e5:1d:f7:
2d:3d:55:2b:04:63:9f:7d:bf:60:5f:6d:1a:de:ea:d4:7f:d9:
2d:b3:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:43 2026 by rpki-client