
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/DE10576881C811F19DD5355C67A30FBC.roa
File: DE10576881C811F19DD5355C67A30FBC.roa (raw, json)
Hash identifier: Mybp7xu69McndoDjQ+vpXUAVd2ngNEP7A3p6m2zUXBk=
Subject key identifier: A2:47:37:C7:52:52:61:E8:08:32:65:D8:62:7F:6B:65:B1:6F:4C:06
Certificate issuer: /CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7
Certificate serial: 026C
Authority key identifier: DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/DE10576881C811F19DD5355C67A30FBC.roa
Signing time: Fri 17 Jul 2026 10:36:50 +0000
ROA not before: Fri 17 Jul 2026 10:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151189
IP address blocks: 103.158.236.0/24 maxlen: 24
103.158.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl
rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEFBB, serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7
Validity
Not Before: Jul 17 10:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5a05c2-d1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:5b:54:1e:81:b7:be:20:e9:0a:62:06:97:
cb:12:b9:0b:d8:61:ea:44:e5:35:00:1b:e9:9e:46:
db:a7:15:2f:a8:51:d4:11:39:b7:42:c6:61:75:2f:
e9:4c:5f:5a:e8:5f:59:80:58:44:42:a4:2b:e8:04:
f4:8e:5c:c7:95:c0:c3:ce:9f:3e:89:b0:62:9c:46:
57:5c:a8:7a:36:55:d9:9c:8a:62:f1:ad:a4:9a:de:
8c:2e:30:e5:31:2b:b7:ea:99:12:b1:ec:c8:c6:6b:
59:d7:79:18:9b:e3:05:ec:47:6d:da:e7:4d:1d:0a:
70:a8:08:6f:42:da:d4:7a:34:15:cd:7a:d5:f2:35:
ab:22:7c:8c:9c:b3:74:16:50:14:76:bc:55:4a:11:
13:1d:ab:ba:0b:fa:87:96:7a:36:e2:4a:e4:e4:c9:
62:bc:03:9f:d9:e5:3f:af:a5:61:f6:38:a2:c6:01:
a0:43:23:3d:f6:00:79:cb:8f:36:35:e2:f6:af:21:
36:1b:ad:6a:50:22:78:24:2c:96:99:ce:fd:81:53:
c4:25:24:57:17:99:c4:e9:0a:eb:b1:17:b2:06:13:
d0:a5:66:a7:af:69:b1:98:ca:c0:37:78:bb:88:12:
5b:a7:2b:38:2a:c5:15:29:84:09:74:25:3e:ea:39:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:47:37:C7:52:52:61:E8:08:32:65:D8:62:7F:6B:65:B1:6F:4C:06
X509v3 Authority Key Identifier:
keyid:DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/DE10576881C811F19DD5355C67A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.236.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:25:95:b6:32:58:55:7b:23:53:10:5a:27:23:97:ab:d0:74:
8f:74:20:35:37:87:89:c0:cb:1d:bc:e0:5d:5c:18:74:bd:f9:
68:88:eb:de:c8:98:82:53:3a:e0:10:c0:e0:65:13:b3:37:b1:
96:9f:05:f0:72:1e:e9:24:ee:45:44:ce:c5:46:7b:2e:30:72:
e2:c0:1c:e0:fb:61:18:93:e7:6a:ab:fb:40:83:5c:03:06:1b:
4c:04:c5:0b:cc:41:d8:11:ee:fd:81:e6:f6:38:d7:0a:c2:c6:
d6:15:64:c0:61:22:09:52:96:5e:b3:cb:b0:25:23:f7:15:b9:
4d:0b:0c:b2:55:f3:a2:f6:b2:3a:9e:e4:2a:bd:1b:5b:10:cd:
44:25:0f:07:ea:b5:bb:a3:71:ff:9c:1b:35:bd:d7:e5:57:5b:
a0:91:95:d7:37:f7:5b:75:dc:3c:e2:8d:39:63:95:df:d0:a7:
70:e5:fa:f5:3b:5b:fc:06:14:f8:b6:49:bc:99:60:c9:ce:dc:
05:24:14:6a:3d:7f:96:90:4f:65:4e:a4:92:10:ef:52:6b:5e:
19:32:0d:be:92:e6:b2:a0:93:f1:35:9b:2a:cd:3e:23:f5:9a:
6d:62:72:99:cd:47:65:4b:e7:f7:f5:e4:6e:f5:b6:11:42:78:
8a:d2:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:02 2026 by rpki-client