
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/D8831B4A4E8411F19692FE9BB2833773.roa
File: D8831B4A4E8411F19692FE9BB2833773.roa (raw, json)
Hash identifier: AmaSg04K09nhgDvkJFll07EOLr2ig9e1az30iEGIY3w=
Subject key identifier: B0:63:4E:D5:3D:24:EB:92:EB:A9:CF:B5:89:C8:0E:88:80:12:F9:D7
Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Certificate serial: 08CE
Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/D8831B4A4E8411F19692FE9BB2833773.roa
Signing time: Wed 13 May 2026 04:33:10 +0000
ROA not before: Wed 13 May 2026 04:33:10 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 963
IP address blocks: 103.127.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 20:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Validity
Not Before: May 13 04:33:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a03ff06-255e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:7d:23:c6:8a:87:0d:26:9e:b0:f4:9c:ee:
93:b5:f2:f2:2a:92:16:bf:c4:e6:79:12:75:e8:3e:
fc:67:21:a7:c0:22:2c:44:0b:21:00:37:f1:83:f1:
06:95:f8:c3:70:50:99:6f:78:4f:84:6d:bb:55:c5:
f0:9e:90:c4:28:f8:00:d8:4a:d7:35:9a:81:81:d4:
4c:76:00:fa:dd:f0:86:ef:f4:9f:ee:69:0f:cb:09:
56:ca:37:a7:4e:d7:91:81:67:68:c8:92:a1:5d:68:
69:3c:a7:1a:c2:16:89:a7:c8:67:92:fc:22:a3:0a:
14:c9:8d:00:38:e7:06:ef:92:e7:b2:9e:6f:ae:a5:
d3:c5:58:4c:60:fb:ca:50:41:fc:57:54:df:72:92:
46:90:56:42:0b:74:7f:ab:a9:10:60:74:52:84:4d:
12:15:62:ef:13:e4:5e:9b:0c:a6:a3:6e:b9:31:86:
b0:c8:79:c2:17:15:ce:5b:f7:d5:ae:00:f9:00:71:
3f:cb:db:d5:41:9e:0a:19:31:35:65:eb:7f:29:bc:
2a:ee:40:b1:92:3b:bb:af:7b:94:56:42:8e:9c:3d:
d3:44:07:5c:22:85:48:63:85:47:34:b1:6f:89:82:
d7:8f:30:29:82:b9:cd:33:1c:7b:6c:37:78:aa:65:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:63:4E:D5:3D:24:EB:92:EB:A9:CF:B5:89:C8:0E:88:80:12:F9:D7
X509v3 Authority Key Identifier:
keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/D8831B4A4E8411F19692FE9BB2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.24.0/22
Signature Algorithm: sha256WithRSAEncryption
52:c9:fa:fa:42:a8:da:36:73:6c:b5:e4:cf:e1:a3:03:75:53:
a5:a2:6c:e9:d4:be:9a:fe:34:07:5b:06:96:60:c1:85:1b:bf:
30:83:9c:aa:af:a8:95:05:93:ca:16:f3:1e:da:ea:39:7c:41:
8b:70:12:ff:6d:5e:3c:88:3a:cd:48:b1:ba:1a:14:28:8c:87:
52:5f:6e:ad:0f:ad:c2:09:c0:21:a8:07:50:d1:64:5b:5b:23:
52:10:42:c9:14:a4:ed:fb:d7:6d:6e:ef:31:fb:09:18:1a:19:
ab:2f:68:13:4a:eb:ad:4a:24:94:75:d0:93:44:8b:cf:1e:c9:
2a:7c:39:ef:4f:cc:95:95:3f:5a:fe:bc:dc:73:fe:96:f2:b7:
26:f3:ab:ac:e4:25:65:95:81:22:31:e2:59:d2:79:bc:f0:2e:
8a:4a:3c:36:52:63:bb:26:6a:46:89:60:c4:b4:0b:d6:30:a5:
9c:4d:eb:c9:ea:41:7e:b9:e9:0a:07:32:58:7a:6e:3b:d1:72:
a5:eb:35:c3:78:b7:8e:d9:08:de:94:94:06:a3:75:d7:ad:81:
a3:97:20:6b:01:c3:04:7f:1a:84:b8:d1:25:77:2f:ab:4f:db:
b0:d7:90:2e:f8:e3:7f:75:be:11:e9:4d:57:88:2e:bf:b0:4b:
a8:bf:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:10 2026 by rpki-client