
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/A9F75788C22D11F1B1BFEDF35811F970.roa
File: A9F75788C22D11F1B1BFEDF35811F970.roa (raw, json)
Hash identifier: dSh3+HGtaxgMenCY9nQ0zTpNsBjlixqvgjtOkEZq+R4=
Subject key identifier: 18:E0:E3:9E:FC:CA:08:58:20:C0:F0:A2:59:88:A2:21:99:A9:BB:42
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 0934
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/A9F75788C22D11F1B1BFEDF35811F970.roa
Signing time: Wed 07 Oct 2026 09:01:21 +0000
ROA not before: Wed 07 Oct 2026 09:01:21 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133914
IP address blocks: 103.47.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356 (0x934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Validity
Not Before: Oct 7 09:01:21 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6ac60a61-5616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:ab:21:3c:8e:b1:17:fc:c9:7a:15:27:23:
9b:6a:3f:6a:0f:c2:25:44:2a:0c:fe:a5:ac:e8:62:
e7:94:f2:70:71:ea:7e:75:e9:e4:be:8b:67:ef:60:
a2:69:ab:69:d2:ee:a3:60:33:51:2e:0f:d2:76:22:
af:63:c0:9c:2e:36:d5:0a:c7:70:78:7c:ea:b2:c6:
e1:40:f2:e9:c2:d4:a7:5f:9f:12:ae:52:64:3f:1b:
7d:c7:f5:ea:cc:77:e9:27:9f:86:98:ce:a3:a4:e3:
b4:ce:f3:f4:b5:94:2d:34:a3:b3:70:93:33:9b:63:
8f:64:40:80:89:32:d5:79:08:e3:60:7b:b8:1f:41:
ba:1e:48:62:a5:fa:f3:9f:d4:14:fe:77:24:85:c3:
4a:67:09:03:9f:05:57:9b:77:3a:f9:dd:6a:47:91:
2e:97:c9:c3:e4:47:88:9c:bd:64:e4:79:4f:c0:bb:
7d:70:ac:87:85:ee:30:1c:d0:5c:ed:2a:96:c5:9e:
d0:1a:7c:d2:59:9c:f6:8d:89:9e:9a:09:20:ed:97:
f9:c5:49:d2:e6:0c:04:f7:de:88:f0:15:15:cd:e1:
04:2b:f4:75:55:2e:b5:f5:36:ca:63:3f:55:62:41:
89:56:a3:97:b5:7d:d1:69:62:58:e2:27:85:5f:b8:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:E3:9E:FC:CA:08:58:20:C0:F0:A2:59:88:A2:21:99:A9:BB:42
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/A9F75788C22D11F1B1BFEDF35811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.47.234.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:40:71:80:26:6a:f2:5e:b5:45:32:bc:af:2c:29:31:f3:dc:
11:c4:12:aa:e6:1d:8c:4d:0e:8c:f5:5a:85:0f:c6:43:5b:1b:
59:16:ac:c2:ba:a5:0b:df:0d:e2:42:15:2f:9a:4e:f4:2c:75:
dd:a1:74:0b:b5:39:e2:e9:03:93:a7:6a:d1:f3:95:19:51:9d:
44:13:53:81:5a:50:37:ce:e4:a1:b4:37:45:13:c3:aa:d9:98:
f6:51:66:a2:24:88:41:e1:bb:02:35:21:5a:35:ad:db:54:ca:
33:f3:55:8c:03:fb:2a:26:c9:e7:9b:67:8c:b4:dd:48:e3:de:
2e:d8:e7:62:a2:04:ee:ed:15:fe:c4:a6:15:ae:cb:ef:bd:81:
cc:e4:7f:88:6f:dc:30:60:f5:91:4f:c6:a1:45:a6:92:e6:c1:
9a:2c:7a:4e:01:0e:60:8a:8e:ba:16:e9:8d:7c:df:7e:c4:1b:
c3:fc:e8:7a:69:dc:d7:9b:53:8e:54:ef:e0:09:8d:68:3d:62:
33:3e:6e:63:85:be:47:7b:76:09:68:99:a9:8c:7c:05:1f:54:
7e:56:ef:b2:9f:00:5b:68:7c:93:3b:fb:87:3a:4d:4d:e2:69:
b5:ec:7f:ca:b8:0e:c9:56:7e:7c:04:3f:39:86:13:b0:7d:6b:
6d:0c:84:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:48:11 2026 by rpki-client