
$ rpki-client -vvf rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/22D62D36898111F1A3670DB57111F970.roa
File: 22D62D36898111F1A3670DB57111F970.roa (raw, json)
Hash identifier: gWYW4p/xaqTFNf7paDgnkOo/IHbmHFa68m0fAbS62oI=
Subject key identifier: D2:4A:90:C0:64:DF:58:8B:66:77:B0:27:8D:55:B6:B4:23:C2:D0:C2
Certificate issuer: /CN=A91834CD/serialNumber=CD7872AAF747BAE03A6118C8381441FF987FCD75
Certificate serial: 03
Authority key identifier: CD:78:72:AA:F7:47:BA:E0:3A:61:18:C8:38:14:41:FF:98:7F:CD:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/22D62D36898111F1A3670DB57111F970.roa
Signing time: Mon 27 Jul 2026 06:05:15 +0000
ROA not before: Mon 27 Jul 2026 06:05:15 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 2764
IP address blocks: 103.153.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl
rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91834CD, serialNumber=CD7872AAF747BAE03A6118C8381441FF987FCD75
Validity
Not Before: Jul 27 06:05:15 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a66f51b-651a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:72:0c:11:e4:0e:da:4f:25:e3:19:b9:85:
71:e8:2b:4b:51:b8:4f:56:6a:c7:3d:eb:82:95:a5:
47:d8:ba:4a:56:a1:a9:f9:e4:d8:70:c0:4c:8c:e0:
db:c2:88:25:2f:be:39:e1:cc:9e:95:7b:e5:53:cc:
e6:45:03:23:31:72:a8:e6:49:79:47:cc:40:4b:ab:
52:40:f2:0b:16:d0:77:38:fd:67:dd:bd:3f:a6:5c:
87:13:4b:67:c3:52:0e:80:18:a7:55:eb:34:75:73:
ea:a3:de:26:75:20:5e:28:41:e9:8c:34:a5:b7:0c:
94:5e:42:80:69:5a:4c:42:df:a4:c7:14:26:7f:a7:
de:02:e8:8b:8b:75:97:9d:d8:da:bb:ef:a8:60:4e:
67:60:d5:e1:40:81:8e:4b:ca:13:8d:a9:56:b0:53:
7d:7c:2b:fe:1d:2a:b7:b7:60:f2:3c:28:4a:93:14:
ee:23:e3:36:2a:3b:96:2e:0d:a4:ad:20:11:da:20:
37:90:1a:01:5f:0f:27:1e:15:30:8c:e5:82:d6:4b:
0e:94:ba:1f:56:80:c2:90:02:06:79:d4:37:31:b0:
8c:5b:6f:1a:da:6a:97:e9:4d:cc:a7:ea:7f:42:40:
0a:d9:50:71:20:43:6b:37:d5:4a:d9:e2:91:fe:28:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:90:C0:64:DF:58:8B:66:77:B0:27:8D:55:B6:B4:23:C2:D0:C2
X509v3 Authority Key Identifier:
keyid:CD:78:72:AA:F7:47:BA:E0:3A:61:18:C8:38:14:41:FF:98:7F:CD:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/22D62D36898111F1A3670DB57111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8d:d8:3f:c4:e3:a7:74:90:a6:b4:e6:7e:fa:fb:cc:01:dc:
7a:0e:c4:4e:a8:11:02:18:60:ed:37:79:0a:f7:f4:6f:9f:4e:
6b:d5:15:a4:c2:fa:aa:a2:49:68:18:73:a2:8e:7c:3a:d4:5a:
dd:01:10:b3:d1:16:d6:1a:21:98:77:2d:68:8a:76:ce:42:9b:
fe:9f:92:8a:a6:3d:13:ba:d3:1d:a7:46:f3:d7:ab:71:37:90:
a8:dc:4f:97:d0:bd:79:44:ef:14:37:2a:96:6c:84:fa:e4:f4:
7e:52:2f:9b:33:6a:d1:e7:52:56:19:40:41:fb:99:30:dc:31:
43:a6:b1:16:7d:de:25:aa:4b:70:4f:2c:00:61:a0:8c:d2:16:
d9:f9:a1:fb:da:48:3a:3d:82:25:71:64:86:1f:67:24:7c:d8:
25:d9:0b:79:70:24:74:39:c8:25:99:39:a9:f7:fb:8b:8c:7b:
8c:c3:2f:9f:21:e4:e3:7a:83:1d:81:4f:30:42:d3:ac:f2:c2:
66:38:2c:ea:55:27:f5:9f:30:fb:d7:66:a2:fc:7d:2c:3e:5f:
23:47:38:ed:98:66:c1:33:0c:77:90:f0:f1:d4:41:bd:01:08:
d7:7c:7c:c8:94:65:30:5e:72:4e:38:3f:4f:0f:0e:e3:b9:26:
94:78:fd:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:31:42 2026 by rpki-client