
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa
File: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (raw, json)
Hash identifier: anud056i0pXYbRncgVJTkdjRCUcpxpVeDT3/UVMnGCM=
Subject key identifier: 5A:34:15:58:57:6D:E3:02:58:54:E9:36:2C:C1:DB:AC:A7:C0:BB:39
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 3703
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa
Signing time: Thu 30 Jul 2026 15:11:26 +0000
ROA not before: Thu 30 Jul 2026 15:11:26 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55407
IP address blocks: 103.19.104.0/24 maxlen: 24
103.19.105.0/24 maxlen: 24
103.19.106.0/24 maxlen: 24
203.209.97.0/24 maxlen: 24
203.209.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 14:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14083 (0x3703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 30 15:11:26 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6b699d-2284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:02:8e:4f:63:57:23:68:17:1e:5b:92:f1:
4d:b2:32:1b:37:b8:2f:66:d1:5e:04:43:49:f9:d9:
7f:de:7d:98:8c:df:a1:ab:02:ad:c6:26:52:82:16:
d3:6e:2e:97:cc:20:b5:84:3d:4d:32:50:c4:af:8a:
46:78:79:9a:1d:87:7d:c3:89:23:ef:cc:6e:05:8d:
24:39:c1:bb:2a:5a:75:de:24:e7:39:53:52:43:bf:
7a:d0:ba:63:78:e7:05:b3:6f:83:33:be:ae:8f:dc:
68:14:ad:6d:1e:86:95:49:cf:46:6e:c8:29:02:7c:
95:3f:51:40:7a:63:02:34:6f:28:bd:46:3c:89:53:
41:10:7a:f6:70:19:6c:aa:49:c5:25:17:a2:2f:06:
0e:4e:a0:ad:b8:9c:c4:7e:31:bc:b7:0b:ab:56:de:
ae:2b:ac:99:ac:b8:4f:7b:d3:da:7d:58:a8:32:36:
72:48:47:ed:fd:dc:ee:96:19:9c:9b:12:8f:4f:b1:
e5:d9:dc:a3:d0:e6:18:f2:86:26:5f:95:8d:49:ba:
d2:94:de:41:98:21:9d:96:5c:1c:85:30:b2:77:b2:
a5:50:24:9a:e1:cd:7f:b4:f5:cb:c7:8e:17:11:e5:
59:c6:d2:8e:38:59:83:35:4e:b3:72:ac:8f:c0:ff:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:15:58:57:6D:E3:02:58:54:E9:36:2C:C1:DB:AC:A7:C0:BB:39
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.19.104.0-103.19.106.255
203.209.97.0-203.209.98.255
Signature Algorithm: sha256WithRSAEncryption
7f:b6:d3:a2:01:ef:1d:c0:4c:3e:b2:8f:e2:62:0a:23:c4:f1:
ba:aa:a4:ab:8c:a9:d4:62:58:e8:af:15:79:5a:ae:b8:a8:a5:
09:3a:a5:bc:16:1c:94:55:f3:dd:7b:b8:f6:b8:06:d5:39:96:
89:7a:2e:10:1d:2a:8c:bc:2f:e8:b1:33:2c:0a:64:72:8e:22:
91:7a:ba:e2:00:79:f3:d1:18:09:06:18:28:6b:6c:29:e0:c5:
db:7c:30:9d:98:0c:17:3e:5c:00:07:da:6c:3f:47:ad:b7:44:
bd:ba:d6:cd:ef:51:77:de:8f:24:dd:21:8f:4c:8c:de:0e:fc:
9c:83:44:26:02:e5:ea:27:8c:1a:f9:14:96:39:2e:8d:80:9b:
f5:6f:c1:1e:c5:0a:43:3c:fe:85:42:5f:c7:d7:e6:56:38:de:
8f:4d:18:4e:9b:15:53:29:bb:0c:c7:0f:b0:94:1a:8b:40:6c:
b8:9f:a3:59:b3:2c:f3:ab:9c:d2:0c:40:15:2f:09:bd:e7:fe:
5d:6c:04:76:de:80:e2:21:bb:da:e8:bd:83:4d:b5:d6:41:77:
d4:6b:a7:09:0b:dc:18:bf:9a:e0:82:47:bb:f4:1c:0e:31:09:
ff:49:86:a1:5f:a5:03:c6:7f:c8:98:a2:6a:65:95:a5:f2:ed:
6e:4c:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:53:49 2026 by rpki-client