
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/EC796D6C42D411E88EC29742C4F9AE02.roa
File: EC796D6C42D411E88EC29742C4F9AE02.roa (raw, json)
Hash identifier: Lo3XMSKg8agVzx55tHFzr470VZoMbp50JJLkCDFF7Uo=
Subject key identifier: AD:78:32:0B:5E:13:A6:C4:7F:BC:BB:27:51:9C:86:FC:5C:33:B9:93
Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial: 1646
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/EC796D6C42D411E88EC29742C4F9AE02.roa
Signing time: Fri 04 Sep 2026 17:30:48 +0000
ROA not before: Fri 04 Sep 2026 17:30:48 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38456
IP address blocks: 103.112.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5702 (0x1646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Validity
Not Before: Sep 4 17:30:48 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9b0047-06ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:50:7d:82:97:f4:e9:3c:c2:f9:31:a1:67:
ed:b7:84:a1:3f:2a:6f:67:6b:5a:5f:8d:36:c8:40:
aa:9d:ee:cf:df:31:36:2e:bc:c5:93:64:cb:cd:f6:
20:e2:b5:21:f6:3d:89:fe:81:a3:25:50:f7:2a:67:
79:80:e2:17:2f:a6:d0:44:89:22:57:9f:21:af:63:
ab:08:78:18:a8:4d:69:52:27:ae:d9:f2:e5:40:14:
13:28:4d:1f:e5:9b:bb:f1:76:e3:31:14:28:db:ed:
a9:22:51:02:ab:8c:72:cc:b8:29:58:20:a0:14:c5:
0b:b5:29:57:69:45:0a:ff:83:c3:92:e5:7f:01:2a:
95:d0:bc:a0:5f:b4:9a:43:4f:b7:03:80:fc:9d:a5:
a9:bb:b6:b9:55:7f:ff:3c:35:7a:fc:9f:64:c9:57:
7d:ff:3c:b4:4c:86:a8:69:08:2e:cc:c0:c7:b4:9c:
3c:14:1f:34:ef:01:72:9a:2a:a6:12:39:66:57:8e:
b7:c4:1a:6d:6a:21:ff:2a:5c:c5:28:64:f8:7c:e5:
f9:17:78:23:0b:dd:37:b2:a8:e3:d2:39:d4:67:f1:
9e:e3:20:45:93:f6:69:1d:1a:26:30:a0:b0:3a:aa:
19:59:e7:92:15:b5:ec:36:9b:48:2f:46:3b:3c:ff:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:78:32:0B:5E:13:A6:C4:7F:BC:BB:27:51:9C:86:FC:5C:33:B9:93
X509v3 Authority Key Identifier:
keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/EC796D6C42D411E88EC29742C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.101.0/24
Signature Algorithm: sha256WithRSAEncryption
92:53:96:35:7e:89:60:2c:0a:c0:c4:22:a8:6f:29:27:c2:44:
18:2d:31:eb:4b:da:1b:8c:fc:e2:95:03:26:29:e7:cd:d7:5d:
08:3e:19:be:68:3f:69:36:0d:38:37:9a:d9:23:db:fb:63:f8:
1e:d5:10:f6:07:ea:0a:95:0b:b7:dd:30:a5:b1:49:4c:30:fa:
76:43:43:71:95:8c:73:e6:55:fe:d2:c6:ef:ff:19:3f:0e:2a:
c4:0b:08:de:b1:0f:8a:1a:30:62:d4:73:bb:ec:4f:f6:78:91:
56:fe:09:35:5a:ce:b1:d1:05:97:68:62:80:d3:8e:11:b0:24:
5f:b7:73:9c:38:2b:cf:95:55:f1:ea:57:d3:88:be:1c:f7:f5:
d4:ad:7a:06:38:13:f9:78:9c:5c:e4:9a:c6:be:23:c3:38:ee:
d4:a4:c8:d8:d6:02:e7:a8:ff:39:65:c5:c5:2d:9c:b1:01:25:
da:36:59:9a:ae:27:52:ed:6a:0f:a5:3c:ee:42:28:56:2a:a8:
19:f3:7b:a2:9b:93:d1:f4:09:b9:e3:63:30:f6:73:e4:e0:73:
c7:fd:a0:0b:80:29:75:56:64:30:12:20:9c:72:4f:05:fa:15:
19:78:58:ee:a0:64:59:f3:0d:98:81:08:e6:ca:46:e1:3d:90:
06:3c:7c:65
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw
OUIwRTlENkQwHhcNMjYwOTA0MTczMDQ4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTliMDA0Ny0wNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+9QfYKX9Ok8wvkxoWftt4ShPypvZ2taX402yECqne7P3zE2LrzFk2TLzfYg
4rUh9j2J/oGjJVD3Kmd5gOIXL6bQRIkiV58hr2OrCHgYqE1pUieu2fLlQBQTKE0f
5Zu78XbjMRQo2+2pIlECq4xyzLgpWCCgFMULtSlXaUUK/4PDkuV/ASqV0LygX7Sa
Q0+3A4D8naWpu7a5VX//PDV6/J9kyVd9/zy0TIaoaQguzMDHtJw8FB807wFymiqm
EjlmV463xBptaiH/KlzFKGT4fOX5F3gjC903sqjj0jnUZ/Ge4yBFk/ZpHRomMKCw
OqoZWeeSFbXsNptIL0Y7PP9X8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK14Mgte
E6bEf7y7J1GchvxcM7mTMB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy
RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkI0MzQvRTJDNjI2NzY0MkQzMTFFOEJCREMwOTQxQzRGOUFFMDIvRUM3OTZENkM0
MkQ0MTFFODhFQzI5NzQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3BlMA0GCSqGSIb3DQEBCwUAA4IBAQCSU5Y1folgLArAxCKobykn
wkQYLTHrS9objPzilQMmKefN110IPhm+aD9pNg04N5rZI9v7Y/ge1RD2B+oKlQu3
3TClsUlMMPp2Q0NxlYxz5lX+0sbv/xk/DirECwjesQ+KGjBi1HO77E/2eJFW/gk1
Ws6x0QWXaGKA044RsCRft3OcOCvPlVXx6lfTiL4c9/XUrXoGOBP5eJxc5JrGviPD
OO7UpMjY1gLnqP85ZcXFLZyxASXaNlmaridS7WoPpTzuQihWKqgZ83uim5PR9Am5
42Mw9nPk4HPH/aALgCl1VmQwEiCcck8F+hUZeFjuoGRZ8w2YgQjmykbhPZAGPHxl
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:51:12 2026 by rpki-client