
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
File: C435900ACF7C11F0AAC14644C4F9AE02.roa (raw, json)
Hash identifier: qVwJ/vwm5XFANli3yyVsiUhVINMVoW4a5PClUSRYBSE=
Subject key identifier: C4:96:EA:73:0F:E9:65:EA:D5:90:7D:3D:A7:BF:3F:92:BD:33:93:FB
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 1264
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
Signing time: Wed 26 Aug 2026 17:34:58 +0000
ROA not before: Wed 26 Aug 2026 17:34:58 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 8796
IP address blocks: 103.140.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4708 (0x1264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 26 17:34:58 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8f23c2-b41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:93:c2:02:45:02:88:bc:d7:d8:ee:5e:76:
6a:a5:67:4c:b4:06:be:07:57:b3:ad:0d:d5:78:5a:
a8:3e:f7:39:05:b2:cc:f7:d8:0c:7e:14:6e:07:f2:
cb:ae:eb:6e:b8:3a:58:ff:14:f1:f4:a2:4c:bf:08:
6c:cb:54:01:30:50:c1:85:14:3c:4e:5d:92:5b:63:
90:81:0c:d1:49:48:96:c4:2c:73:33:84:9b:aa:1d:
c6:02:fd:8b:25:06:a1:06:85:5c:d3:d0:d0:72:f1:
57:09:3d:14:a2:ef:f0:50:be:b4:e2:15:4b:4b:06:
a1:e2:58:88:fb:2b:63:41:52:13:fb:84:e5:1f:44:
26:2d:cd:2c:3a:35:04:63:33:fa:70:ec:ce:8b:ec:
1c:74:51:a1:d0:9a:d2:f7:96:cc:5a:23:b2:ae:a5:
6b:21:d1:37:06:ed:0a:0b:e5:fc:c9:f2:29:31:4a:
c7:22:b5:ce:66:b9:62:9f:98:d7:f8:53:53:97:35:
d3:0b:53:37:f1:99:c3:64:d1:6e:97:64:14:7a:69:
3d:29:16:8d:a0:ad:4d:85:a9:95:45:84:3b:c6:bd:
1b:73:25:ad:70:44:89:e3:63:62:e5:21:38:5d:46:
a9:c1:b7:6b:60:32:7c:bb:e3:b3:78:3c:12:60:eb:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:EA:73:0F:E9:65:EA:D5:90:7D:3D:A7:BF:3F:92:BD:33:93:FB
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:29:86:90:aa:57:e0:b6:9f:80:66:a3:30:93:4c:6e:1a:ec:
ba:55:62:cb:e6:d4:e1:60:fc:78:55:b3:bb:b9:5e:a7:4b:06:
4a:e3:20:cc:c2:5a:32:a5:b9:a7:10:c9:67:ac:38:97:59:e1:
25:6a:05:c8:89:b7:43:de:1f:65:8a:cc:dd:77:50:a7:f6:db:
72:8e:f4:25:43:be:64:4d:b1:d1:48:ab:c6:d5:48:e7:e2:78:
7e:33:46:42:9d:c6:c4:b2:f5:4a:7e:af:86:72:20:66:ac:51:
b2:95:01:03:9e:6c:6f:8e:3c:fb:2f:0d:42:f8:e4:5e:a8:fd:
1c:41:13:fc:68:35:4f:97:af:23:0e:62:18:e1:93:3f:d7:e6:
d7:66:f6:0c:e7:3f:7a:b6:c3:7b:79:b3:4c:ca:3d:28:d1:27:
0c:d8:a5:07:36:07:fb:dd:4d:47:7d:7f:66:ef:68:bf:39:89:
6f:91:5b:31:1a:7f:0a:8d:74:80:ad:83:44:ce:76:3e:24:6a:
56:d6:30:d6:ac:d9:1f:34:30:39:c5:d9:06:dc:c2:0a:05:a5:
30:21:b4:f6:90:04:57:0e:a2:80:c2:c5:b7:30:d0:cc:4f:ba:
72:5f:46:2f:2c:48:05:47:82:f6:8a:84:d3:2d:a5:38:92:dc:
d1:8b:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:31 2026 by rpki-client