
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/E1C6B9720DCC11EBAB25BC31C4F9AE02.roa
File: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (raw, json)
Hash identifier: PI9xVbuN9iLwRFvPVikPHj6xkwP6ohiLgSsNDUNun9g=
Subject key identifier: 06:ED:C3:D3:17:FF:81:F8:20:EF:EF:46:DA:2F:FE:FF:0E:7F:BD:4C
Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial: 0885
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/E1C6B9720DCC11EBAB25BC31C4F9AE02.roa
Signing time: Wed 22 Jul 2026 21:22:30 +0000
ROA not before: Wed 22 Jul 2026 21:22:30 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 7595
IP address blocks: 103.3.164.0/24 maxlen: 24
103.3.165.0/24 maxlen: 24
103.3.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Validity
Not Before: Jul 22 21:22:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a613496-c54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:42:6f:04:0a:a6:c4:90:e6:8c:c7:c7:49:
e2:31:61:cf:ef:48:c3:aa:43:71:c1:5f:60:d2:74:
a4:19:92:2c:af:11:f9:0c:20:64:86:41:36:1b:35:
d0:8c:f9:f7:c9:68:ae:28:37:bf:87:ee:b0:dd:18:
8c:eb:43:a4:28:e2:7a:c6:f3:8c:ed:44:1c:63:7d:
dd:9b:bb:3f:9e:b7:3d:a9:9d:1b:c0:96:7e:b6:c8:
97:73:de:87:cb:2e:71:b5:4e:0d:96:11:bb:da:88:
eb:98:37:59:d6:5a:88:b7:0a:37:4f:48:4e:6e:4f:
01:94:28:b1:14:20:94:d0:11:57:0e:93:04:ff:bd:
88:7a:67:d3:9c:05:fb:f9:85:ea:71:dd:df:7d:a6:
fe:46:a8:07:43:b3:91:91:12:c4:1b:f8:85:1b:3c:
af:ce:c1:59:01:09:a4:ff:e7:4c:34:22:eb:20:d1:
49:a4:09:f3:76:d7:ad:5e:eb:43:89:c2:eb:b6:66:
c3:56:ce:77:7c:f7:16:49:d4:33:36:8e:cd:de:a0:
5e:5c:4f:d3:2a:e5:ea:7f:ce:ff:2d:ce:ad:a2:20:
c2:ba:21:19:3d:a3:7d:ff:67:3d:00:a2:dc:b8:56:
16:ec:9e:a9:25:9f:eb:48:60:cf:ab:f1:78:a1:55:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:ED:C3:D3:17:FF:81:F8:20:EF:EF:46:DA:2F:FE:FF:0E:7F:BD:4C
X509v3 Authority Key Identifier:
keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/E1C6B9720DCC11EBAB25BC31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.3.164.0-103.3.166.255
Signature Algorithm: sha256WithRSAEncryption
9f:b1:2b:9d:46:06:da:e0:23:47:db:31:e3:be:d4:a4:b1:4a:
36:ba:cc:43:9c:de:50:0a:5f:6a:ec:87:b7:fe:ec:3e:27:04:
a1:f2:86:c4:96:c1:41:3f:5d:0e:50:bf:16:ce:02:dd:ff:2b:
8e:f7:ef:45:42:6f:64:01:c9:61:e0:65:c2:d1:51:d9:3a:50:
87:36:d2:30:e6:98:a6:43:ce:5a:68:f9:8b:41:80:48:85:7a:
7f:ac:c4:6d:8f:e5:e5:ad:3e:9c:6b:a6:63:6e:82:cf:70:b7:
92:65:48:71:df:3a:e1:e4:54:7f:a9:08:e7:af:83:fe:45:f8:
cc:31:ec:fb:f5:99:65:b5:52:6f:69:c9:5d:9e:a4:6d:2c:7d:
da:94:a3:48:aa:c1:f1:52:96:f5:7d:ee:01:73:5e:9a:f7:ef:
e5:f8:d0:94:3e:b8:dd:72:17:e4:c4:a4:5f:a7:ed:55:36:f5:
dd:69:c2:a2:0e:88:24:0b:5e:a0:08:c2:21:8d:ae:51:b7:ef:
8d:f9:cc:f6:84:90:10:cc:24:93:d9:a6:bf:8d:9b:5d:ad:ce:
63:92:8a:2a:c3:f0:3a:72:05:c6:51:12:0d:09:7a:57:b6:c4:
f7:61:f9:a1:24:e3:d9:24:32:bf:a9:7b:8f:17:d7:78:8c:2b:
0d:87:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:42 2026 by rpki-client