
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa
File: AFADDB38960011F18583530F5711F970.roa (raw, json)
Hash identifier: VW3xSm0BgFMfQUKFEQTwDrUx4dmpNnzjaeetEP1dFwE=
Subject key identifier: C7:8D:B8:87:0F:7A:09:DB:F2:D9:F6:0E:06:91:B8:B8:10:78:40:2A
Certificate issuer: /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
Certificate serial: 06
Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa
Signing time: Wed 12 Aug 2026 03:48:32 +0000
ROA not before: Wed 12 Aug 2026 03:48:32 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141382
IP address blocks: 103.157.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl
rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
Validity
Not Before: Aug 12 03:48:32 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a7bed10-be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:c6:9c:8a:4a:ec:2f:58:8d:ff:b1:68:9f:
b2:cb:99:6b:ac:cb:35:fd:32:f9:58:05:15:4f:05:
38:7a:9b:2d:db:c2:65:f9:81:36:20:ea:8c:80:b1:
98:98:93:f8:80:d0:6d:4a:06:c0:d0:15:4c:da:51:
66:cf:34:16:34:90:16:54:c0:b1:04:9d:8e:b5:c5:
ea:25:e6:fa:8e:c5:a2:e0:87:c7:fe:31:9e:5b:d0:
b0:52:47:35:54:c0:4e:68:c8:56:ee:8e:4b:3c:9b:
01:2f:30:56:13:9f:c5:bf:85:ed:2e:78:00:48:85:
a3:8a:d4:ad:77:29:44:23:fa:63:b4:93:72:6f:c0:
d6:e7:d3:71:03:19:6a:de:c4:d4:22:88:c9:48:52:
5f:63:b5:95:c2:8f:6c:f8:17:02:de:e1:7b:6c:ee:
d7:0d:08:fb:37:97:e4:5f:88:85:22:66:e2:b6:eb:
59:29:84:81:a5:26:0a:c4:74:42:99:f9:c3:ed:f8:
8d:ad:3d:d5:f8:40:32:3d:ae:13:1a:b4:c3:17:9b:
52:de:06:bf:e5:79:22:e4:e9:14:64:2a:c8:35:ec:
08:7c:54:0e:c5:d4:72:c0:75:4c:6c:83:3a:43:35:
b8:96:57:c5:cc:ec:05:1f:eb:1a:39:65:7e:58:55:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:B8:87:0F:7A:09:DB:F2:D9:F6:0E:06:91:B8:B8:10:78:40:2A
X509v3 Authority Key Identifier:
keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/AFADDB38960011F18583530F5711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.157.252.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4b:f0:a0:92:9f:fd:7d:36:71:01:fe:62:78:44:9e:c0:b4:
d2:d1:6f:87:aa:cb:5e:78:f8:4d:b8:3b:cc:d2:3f:16:21:b7:
81:f5:36:96:2c:c6:e0:dc:1e:80:d8:45:77:aa:1f:2b:46:f0:
91:bc:b4:cb:35:7a:08:8c:79:d6:5a:68:a3:70:5f:39:d5:ed:
9b:47:8d:89:cd:86:04:39:c8:16:94:99:c2:d4:c6:d2:6a:d9:
77:52:ac:cf:57:98:18:c4:3c:d2:73:e0:9a:37:28:4d:26:84:
4e:a8:78:9b:1b:5c:87:e8:e6:8e:60:4f:e5:d8:49:2a:af:f4:
4d:03:f2:9b:8c:13:69:2b:77:30:6a:d7:a4:87:49:17:59:69:
b8:d7:8a:19:9f:89:06:11:2d:f8:af:1e:12:47:d5:1d:e2:e9:
3c:3c:27:15:37:6f:f8:26:07:5d:2e:58:25:51:fd:f2:d7:31:
18:eb:6f:67:a5:de:12:71:5b:f4:b8:17:f8:5b:47:ed:92:9e:
35:cb:eb:4a:49:9a:6f:d1:8a:ce:b8:ed:a2:16:8b:1b:0b:a9:
f0:9a:31:52:04:7f:80:7d:62:ab:74:43:3d:d6:9a:74:f7:be:
06:48:31:97:e5:ec:7f:e7:b3:b1:13:9f:88:25:8e:27:5b:20:
fd:00:d7:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:58:59 2026 by rpki-client