
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa
File: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (raw, json)
Hash identifier: i5Rintjycnuo9u71FbQoVNcu5/vekh+2HiEq9B95npE=
Subject key identifier: 6F:8B:C3:FD:15:6D:D8:41:AD:2A:AB:51:FB:91:57:34:D2:D0:76:34
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 1257
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa
Signing time: Wed 26 Aug 2026 17:34:30 +0000
ROA not before: Wed 26 Aug 2026 17:34:30 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 0
IP address blocks: 103.140.8.0/23 maxlen: 23
103.149.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4695 (0x1257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 26 17:34:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8f23a6-1d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:ef:9b:2c:57:4c:f2:1d:24:8a:bc:f5:6f:
36:14:8d:30:97:04:18:5b:76:f9:b6:63:66:59:3d:
df:21:5a:34:aa:5a:24:76:69:14:8e:5b:dc:56:96:
63:82:2d:8f:7a:c2:51:6b:3f:d6:98:f0:fb:5c:5e:
88:8e:49:b5:49:48:5f:55:66:a1:fc:b6:93:c1:e3:
0e:b7:13:6a:77:2e:e4:71:8a:64:eb:5d:b3:7d:fc:
96:cd:60:d1:a1:0c:05:72:42:6c:c6:d9:88:52:07:
3a:7a:b8:5d:a3:a6:89:d9:6a:0a:4e:b3:05:3e:52:
14:24:cd:8d:bf:83:6d:f3:95:65:c9:c8:58:db:50:
08:4f:ff:8c:17:de:7e:14:f1:86:fa:28:98:a8:44:
bd:7e:31:20:a2:8f:21:90:34:d7:ec:78:1f:ec:40:
9d:d3:82:f5:08:2a:97:85:5f:6a:66:87:e1:63:3b:
99:05:9c:6e:44:b0:ee:17:e8:ac:8b:10:de:7f:ed:
e1:c2:14:14:d0:aa:d6:6e:f0:8e:79:90:0e:37:2f:
ac:1a:a1:d2:55:0a:b8:dc:07:42:46:4e:f0:11:62:
80:a1:02:72:9f:37:00:37:b1:1c:9e:04:87:cd:0b:
de:54:17:4a:e9:07:f2:af:b8:f1:97:9e:30:7a:d2:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8B:C3:FD:15:6D:D8:41:AD:2A:AB:51:FB:91:57:34:D2:D0:76:34
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.8.0/23
103.149.144.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:42:2d:48:f7:9f:2b:9d:56:21:7b:47:c0:11:61:ea:29:3b:
4c:be:21:40:a7:d1:96:8b:6b:8f:5b:e8:e4:26:29:2c:f0:a4:
d5:54:cc:03:46:aa:38:8b:95:89:e4:17:ad:e7:b6:99:ab:0a:
a0:78:5d:fb:89:b1:69:6d:cc:fd:50:a9:f9:bb:6e:37:6a:f0:
f1:e9:89:d4:59:47:73:94:9f:e6:12:93:fc:d5:cb:23:c3:3f:
99:21:f1:23:69:94:c5:02:3a:10:e7:0d:ca:6c:53:53:ea:83:
2a:ab:cd:39:8a:31:f5:65:d3:aa:e2:50:9d:a1:df:67:f9:7f:
ad:91:02:da:27:02:e7:0b:a6:f4:fc:29:98:5e:2d:de:1b:f9:
4e:23:26:94:67:76:bb:eb:7f:02:19:8d:4d:2b:0b:61:58:e6:
6b:9c:1e:69:72:95:e1:b9:30:f7:37:68:fd:35:e5:3d:03:00:
73:cf:ac:ee:38:8d:06:c4:ba:96:0e:68:8b:69:0d:51:c0:0e:
c8:6e:93:35:b8:45:97:61:09:e7:c2:93:b7:f2:e8:cc:41:67:
0f:1c:b3:f8:ba:73:37:c1:67:2a:5b:09:99:14:1a:9e:e1:b8:
03:d1:06:40:c1:51:49:a9:a9:03:13:63:75:6c:72:66:ef:3a:
e8:cb:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:33 2026 by rpki-client