
$ rpki-client -vvf rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/7CE8E4446F9111F1A8C39A2C6CA30FBC.roa
File: 7CE8E4446F9111F1A8C39A2C6CA30FBC.roa (raw, json)
Hash identifier: wEYk8+b/zlouMRDVVaad91i65oh9NEMZk+zI9rvUNyY=
Subject key identifier: 24:49:C1:1A:18:F6:59:25:30:07:2C:A3:6C:7B:A4:F4:F0:4E:48:A8
Certificate issuer: /CN=A91784CD/serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84
Certificate serial: 04
Authority key identifier: E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/7CE8E4446F9111F1A8C39A2C6CA30FBC.roa
Signing time: Wed 24 Jun 2026 05:56:48 +0000
ROA not before: Wed 24 Jun 2026 05:56:48 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140325
IP address blocks: 103.251.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl
rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 10:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91784CD, serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84
Validity
Not Before: Jun 24 05:56:48 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a3b71a0-819d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:bf:d4:49:4b:04:d1:8c:c5:1a:a6:d7:00:
19:98:0e:4b:d2:e0:f3:23:0c:06:ac:d4:a8:ae:27:
d1:1e:f4:74:1c:9e:b2:9d:9c:b7:eb:76:f7:99:29:
50:44:26:87:00:23:69:f6:8d:1d:8b:80:da:68:df:
ee:08:14:bb:63:4e:8f:d4:ef:c8:85:e8:65:0d:f9:
fb:79:b2:39:fd:1a:37:6b:17:83:2c:55:a7:d0:4e:
6b:3d:08:b3:6c:6c:9c:34:1e:e5:33:d5:db:94:64:
55:c1:27:07:d5:15:23:8a:f3:16:c8:79:a9:6d:2c:
02:d1:98:26:90:3e:8d:d2:5b:17:ec:e5:22:ce:20:
e0:32:6e:d5:d3:54:e2:04:72:45:bf:79:ea:de:14:
0d:ff:b7:81:13:9c:d8:01:f9:dc:1e:c5:11:a7:a7:
5d:4a:66:68:b7:2d:7c:16:73:6a:30:54:c1:71:15:
6a:7b:20:11:b6:ee:c5:86:dd:be:cd:75:eb:55:b3:
77:ee:4f:36:18:e7:82:e3:ce:e5:3f:cb:98:49:76:
36:db:41:12:a9:b8:4b:d1:58:be:d3:02:43:02:0c:
eb:7d:f6:73:ad:c7:cb:48:e0:c1:8e:d0:40:fb:fd:
45:bb:73:cf:a3:43:af:e4:09:f4:83:82:06:e8:2c:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:49:C1:1A:18:F6:59:25:30:07:2C:A3:6C:7B:A4:F4:F0:4E:48:A8
X509v3 Authority Key Identifier:
keyid:E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/7CE8E4446F9111F1A8C39A2C6CA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.251.110.0/23
Signature Algorithm: sha256WithRSAEncryption
19:fb:6a:54:a9:21:3a:1a:f3:4d:6e:7f:54:5c:d2:b9:11:47:
38:4f:78:15:5e:fe:39:16:35:6d:58:43:87:6e:cb:ec:c7:df:
6b:7d:8b:70:73:61:49:74:4f:52:4c:94:b3:ee:64:fa:9f:d2:
75:56:19:5c:81:e9:e6:69:68:01:e8:02:1d:3f:f7:6c:43:1d:
0b:9b:fe:9f:18:4a:99:82:33:fe:4e:a4:ee:f1:cd:93:2a:03:
6e:3f:5b:70:46:45:e8:56:8c:ce:3a:98:24:57:09:f1:91:49:
04:27:90:b5:15:d7:1b:fa:cb:e8:9d:89:2f:ed:3b:05:b3:3f:
27:01:ec:41:68:16:f7:09:39:af:d7:b4:ab:8d:a8:ae:3c:a0:
9c:8e:20:f5:2b:69:e6:1c:c0:f5:92:e4:61:86:15:07:d7:c7:
e9:c9:72:ab:71:9e:cd:98:e1:96:01:8a:0b:cc:d9:e1:67:eb:
84:a8:e7:70:0c:fd:b7:82:84:fc:24:83:30:38:4c:c1:be:fb:
06:93:0c:a7:84:f7:40:8a:39:7a:91:b4:01:c1:f3:c7:4e:6d:
2f:7f:3d:e1:dd:f5:e4:a3:6b:5c:7f:5d:7c:00:e6:60:dc:79:
02:1a:5e:84:9e:0b:98:e9:41:a5:fb:a9:ab:b7:04:6e:74:25:
4a:27:10:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 5 09:20:47 2026 by rpki-client