
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa
File: 416EB4022F6111EE8C156634C4F9AE02.roa (raw, json)
Hash identifier: l6WlraQHSFxD5ZzijjCLvs/ztCHDvT/RfDgDzcuuDws=
Subject key identifier: C9:8F:39:A4:7D:31:E0:2B:64:F9:80:78:D6:0D:72:F7:C5:20:B1:AA
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 025F
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa
Signing time: Mon 05 Oct 2026 02:51:30 +0000
ROA not before: Mon 05 Oct 2026 02:51:30 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 4826
IP address blocks: 103.170.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Oct 5 02:51:30 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac310b2-5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:6c:82:49:63:03:ec:a1:1d:19:05:11:31:
47:cd:ca:10:5a:2a:d5:8c:76:f7:ec:0d:bb:46:45:
94:cd:e3:76:bb:2a:95:77:73:b5:dc:6d:c3:e1:22:
0b:2f:27:a1:d7:0d:22:80:73:72:19:4f:04:4c:6e:
85:09:36:fc:48:a2:f4:02:68:13:b0:59:eb:a9:59:
97:27:47:51:d2:9d:17:8f:29:64:50:a6:8f:2b:d0:
ed:0a:ed:0c:78:56:ed:79:74:db:78:10:b2:8e:19:
39:f2:98:1c:c8:9f:29:b7:cc:09:03:aa:b2:3f:67:
41:b7:7a:93:4c:c1:c3:69:d3:37:1a:7a:6e:9c:c1:
d8:83:01:10:0f:a3:50:6a:3b:0e:4f:0c:a3:f8:35:
ec:45:f3:f5:df:a2:76:82:85:b3:e7:f1:20:bc:1f:
54:8c:2b:56:fc:06:7a:ba:12:2b:ea:6f:d5:9a:e7:
b8:05:6c:df:ff:f8:a3:b8:ce:da:0d:18:68:93:29:
ec:a2:f4:95:63:8f:df:02:e1:a1:57:a1:ec:4c:bd:
53:5e:1e:b9:a4:9d:32:58:eb:7e:96:cc:07:cf:6e:
1f:62:43:a4:84:62:6d:68:91:c4:56:55:c3:3e:62:
f9:1e:11:76:97:72:66:31:d0:e8:c6:43:9c:60:a4:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:39:A4:7D:31:E0:2B:64:F9:80:78:D6:0D:72:F7:C5:20:B1:AA
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.238.0/23
Signature Algorithm: sha256WithRSAEncryption
83:77:89:cc:74:a5:6b:ea:e0:23:87:4c:13:8d:4d:23:0d:7b:
9b:a9:54:4b:dc:48:b5:37:e5:8f:bc:6f:2f:f5:5c:96:9e:d8:
b1:6f:58:80:e9:3e:e1:5e:23:65:af:bd:cf:15:82:d8:8f:33:
81:87:c4:44:48:ac:e5:f7:9a:27:d6:dc:23:6b:02:c1:01:73:
3e:7a:15:a6:72:c3:b7:64:6e:07:89:06:90:d3:69:ba:82:7e:
ee:f7:db:80:39:ac:fc:b7:9d:f4:f3:97:c1:23:da:5c:ff:f2:
89:d5:a7:c1:ae:79:d0:1d:9a:96:df:19:6b:39:5f:32:84:94:
f5:23:bf:7c:38:d5:20:7a:4f:8e:75:6a:ac:20:1f:9b:6a:db:
c2:93:d5:19:dd:9f:fa:0e:2d:0c:dc:4d:8b:01:1c:f5:72:3f:
a2:3e:9f:9a:84:bd:3b:e3:ba:a9:51:31:6e:7c:91:00:3e:65:
67:ea:a8:81:b3:8e:20:fb:22:e2:ff:75:88:a8:d0:5f:f9:68:
2e:d7:6c:41:41:75:b2:05:3e:36:23:21:ac:d9:8f:56:5c:2b:
d6:b2:ce:0e:06:c8:4e:3f:f2:87:32:22:f4:a1:3b:1a:a5:68:
02:eb:ac:70:f4:02:61:f6:f5:a8:cc:b9:6a:4b:fc:0f:db:d6:
8e:2f:c8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:21:40 2026 by rpki-client