
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa
File: 9FC61D303F7A11F0BC711E7FC4F9AE02.roa (raw, json)
Hash identifier: gzcKTWUYCkW7/UycwF0pi+085wVbUmNYAwtTydE5q9k=
Subject key identifier: 35:C8:67:7F:9A:05:8E:36:57:DE:E9:6E:E2:82:07:73:BB:DE:91:81
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0CDE
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa
Signing time: Mon 18 May 2026 19:22:57 +0000
ROA not before: Mon 18 May 2026 19:22:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150371
IP address blocks: 103.70.86.0/24 maxlen: 24
103.70.87.0/24 maxlen: 24
103.117.162.0/24 maxlen: 24
103.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: May 18 19:22:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a0b6711-4559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:9d:d1:2f:71:36:93:33:c7:c5:b2:28:9a:
f1:41:85:99:ab:f8:95:d7:d5:39:e5:6f:c1:bf:3e:
36:7e:bd:a6:ec:b7:31:7b:19:36:e3:af:29:ba:46:
6b:62:fd:e1:87:1b:a6:a7:e0:35:98:3c:b6:d8:6d:
3e:0b:85:0a:12:98:06:03:3d:23:56:42:d5:76:f2:
db:ff:87:36:0c:90:02:9b:0e:7d:3b:b7:06:88:75:
4f:ee:ed:cf:a6:dc:cc:ef:d0:77:1f:5b:d0:fa:54:
f1:e4:57:5e:f7:50:f5:f3:35:82:07:38:3d:62:47:
e0:6e:8c:0f:4d:2b:57:ef:fb:29:e5:d1:1b:a2:17:
41:8f:8b:6d:38:df:2f:8d:f6:ce:02:79:7d:5b:75:
a0:c2:2e:59:e3:55:41:98:92:60:32:e5:77:da:5c:
10:24:a2:82:1b:58:96:ce:7f:93:9b:e9:a2:76:a9:
50:76:f7:cd:5a:06:e6:76:74:02:46:f1:a0:4f:21:
65:06:2f:a6:94:c6:db:40:5e:1d:da:3f:69:0b:a7:
10:94:4b:7c:f8:0d:2e:40:10:af:cb:32:c6:60:1f:
29:9a:57:eb:06:96:64:cd:4d:e8:2d:8e:15:1b:aa:
67:fd:c0:71:1b:d6:dc:ef:ce:a0:13:c4:ea:2d:12:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:67:7F:9A:05:8E:36:57:DE:E9:6E:E2:82:07:73:BB:DE:91:81
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.86.0/23
103.117.162.0/23
Signature Algorithm: sha256WithRSAEncryption
25:86:7f:7e:91:e8:6b:aa:c8:8e:83:20:1c:3b:35:39:f2:58:
17:9a:3c:b0:47:f1:21:3b:85:36:2b:1d:89:60:87:ad:b7:8a:
bd:2b:d8:ac:86:76:c4:e7:77:7b:8b:0a:49:e6:3d:35:76:f6:
ae:09:87:ef:6d:6f:30:f5:4c:38:f4:58:37:44:ba:ee:a8:46:
23:bd:01:f1:8a:ab:b6:e2:e0:9d:ba:76:f3:84:ea:95:5a:80:
72:ce:ce:d9:cd:b6:27:ba:40:d1:07:3f:09:45:8d:eb:71:76:
55:31:fd:fe:4b:5e:d5:94:2f:b6:25:3e:4f:b6:83:54:54:cd:
d6:ca:b0:e3:59:b6:d6:ac:a0:cb:c1:4f:b4:43:82:31:57:19:
79:fe:1a:d0:6e:96:c7:bb:f2:78:8f:69:0c:d7:50:bf:61:8e:
53:84:e2:65:2e:4b:c9:57:9e:5a:12:2f:a6:b4:6a:2b:9c:6a:
9d:1f:b0:63:b2:5d:99:80:18:c4:98:3f:75:c9:16:8c:3a:79:
5e:80:6a:c9:3c:c9:ca:e9:2a:36:ee:e4:b3:00:40:ec:74:90:
59:b1:5f:22:43:4b:ab:f6:16:07:ac:44:a9:50:2d:7d:01:86:
98:0f:87:12:36:e3:5d:a8:4d:87:c4:ec:0a:e4:c0:a0:4a:55:
02:f8:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 18:34:25 2026 by rpki-client