
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/58AEC9929C0F11EA9CC4217CC4F9AE02.roa
File: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (raw, json)
Hash identifier: k6FWo7z/z7knCCQwUtoLy7aSnCm50oMkNhNPz6TXses=
Subject key identifier: 91:54:B5:E7:81:45:29:9F:31:39:6C:55:37:37:8C:BC:53:72:B8:6C
Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
Certificate serial: 0D43
Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/58AEC9929C0F11EA9CC4217CC4F9AE02.roa
Signing time: Wed 26 Aug 2026 18:36:24 +0000
ROA not before: Wed 26 Aug 2026 18:36:24 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 24342
IP address blocks: 103.97.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl
rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3395 (0xd43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
Validity
Not Before: Aug 26 18:36:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8f3228-10c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a3:21:71:9d:7d:e3:e2:49:4d:1f:02:a6:30:
58:0b:ea:f4:df:33:65:c7:d3:7e:d3:44:2c:ae:35:
9f:12:22:05:9a:15:d9:02:f9:ff:af:a7:a0:16:d7:
cc:2b:2e:85:81:ab:f1:2d:b8:cd:95:33:c6:ae:37:
a4:67:bf:28:93:41:04:c6:81:3e:ea:9d:f8:88:ea:
55:2c:ab:2b:17:a0:fa:3e:65:89:a2:6a:17:9f:07:
e2:07:3e:77:6f:f8:b7:83:62:e4:0c:00:28:71:f9:
00:d4:fe:4e:ac:96:a8:90:d8:6b:20:7c:2d:bc:21:
55:45:d3:e5:63:75:5a:26:6b:d8:fd:a0:b5:b4:37:
2b:94:55:ae:22:e0:29:9e:fc:ab:f5:a2:68:05:86:
5a:51:ed:01:fd:69:46:71:3f:c8:09:b6:27:b6:4e:
a4:6f:08:a5:06:29:d7:93:93:05:8b:36:97:56:a0:
34:f4:a1:51:07:93:dc:b6:29:e5:83:07:78:24:a6:
03:63:eb:3e:38:70:bf:f5:f6:d9:0f:73:df:71:6d:
8a:49:03:5f:36:f3:7b:fd:69:5b:f6:a8:67:65:51:
e4:8c:a4:8d:8d:93:5a:02:55:6e:5c:a6:ea:8a:48:
c1:2c:b7:53:0d:27:a5:db:a5:83:c9:d5:37:c4:c4:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:54:B5:E7:81:45:29:9F:31:39:6C:55:37:37:8C:BC:53:72:B8:6C
X509v3 Authority Key Identifier:
keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/58AEC9929C0F11EA9CC4217CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.120.0/22
Signature Algorithm: sha256WithRSAEncryption
17:4c:3d:a3:b4:67:3a:1d:66:8e:b9:34:f2:23:1e:87:0d:e0:
1e:fe:71:4f:9a:32:97:f6:66:dc:f4:18:30:06:31:8a:0b:2d:
e6:8b:d1:de:09:52:30:05:87:4a:c2:44:a1:26:a9:41:64:90:
e2:2a:8d:59:98:c3:fa:b5:f4:d9:cb:bd:c5:72:6f:50:c9:3a:
8b:7f:e4:91:d6:ab:3b:06:9a:1b:19:13:3e:a5:2d:db:3d:ff:
ab:e0:69:7e:de:de:bd:82:90:c8:d4:19:e7:83:61:fe:43:1e:
f7:5a:aa:5a:f1:81:b6:25:55:d7:66:48:10:18:be:cf:42:b6:
d0:b8:9e:84:7f:a9:01:d0:d4:1f:52:3f:d3:6a:0a:83:c0:5b:
99:56:30:d1:6d:34:f4:86:45:f6:43:3f:71:d2:c8:70:cb:e4:
da:de:2a:fe:3c:4a:40:0b:26:91:c9:ad:cb:58:d3:06:cb:bb:
0b:3e:ef:46:af:93:ba:8b:cb:63:8f:b0:a5:e1:3d:66:2d:38:
68:27:b0:79:83:80:88:ca:62:42:35:e8:6e:d9:3c:bb:fe:f6:
fc:51:27:c8:19:86:f8:05:29:69:d7:a8:fb:d5:b2:45:91:4c:
d0:64:b5:34:ed:fe:1b:5d:d7:cb:40:31:d4:2f:68:03:02:86:
49:e9:a6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:36:51 2026 by rpki-client