
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/D7F68AC88BAF11F18DC99137ACEE528E.roa
File: D7F68AC88BAF11F18DC99137ACEE528E.roa (raw, json)
Hash identifier: 6xRVo6naiADGyUh5hdnY9XCvlMgfuKg8NEjgI902K9s=
Subject key identifier: BE:DA:C9:E5:8D:D8:5F:EF:D7:1E:62:58:89:CA:82:BA:43:5F:60:A3
Certificate issuer: /CN=A91923E1/serialNumber=A2B761005784304F974A6E8D586A405327089A5D
Certificate serial: 02
Authority key identifier: A2:B7:61:00:57:84:30:4F:97:4A:6E:8D:58:6A:40:53:27:08:9A:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/D7F68AC88BAF11F18DC99137ACEE528E.roa
Signing time: Thu 30 Jul 2026 00:44:38 +0000
ROA not before: Thu 30 Jul 2026 00:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141884
IP address blocks: 103.163.252.0/23 maxlen: 23
103.163.252.0/24 maxlen: 24
103.163.253.0/24 maxlen: 24
2400:7460::/32 maxlen: 32
2400:7460:100::/40 maxlen: 40
2400:7460:200::/40 maxlen: 40
2400:7460:300::/40 maxlen: 40
2400:7460:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.crl
rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923E1, serialNumber=A2B761005784304F974A6E8D586A405327089A5D
Validity
Not Before: Jul 30 00:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a6a9e76-96e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:2e:17:e2:3e:27:08:2c:db:12:c8:8b:6d:
50:3a:a2:65:88:ef:f2:af:31:7d:54:60:8e:a1:36:
8b:ac:3f:f5:db:31:76:eb:57:94:84:f0:37:17:38:
cd:48:7d:26:fc:4f:9f:59:94:f2:4c:dd:cb:8d:9d:
fc:5b:19:f9:bf:cc:a5:7a:b8:dd:e6:6a:95:5e:b3:
e7:fa:42:af:f7:a8:a0:59:95:bf:e4:e8:2c:c3:fc:
5f:4e:0f:b6:21:2a:22:87:3c:5e:87:c8:f5:b8:57:
d5:37:4c:b7:94:a8:67:13:b7:a5:ca:11:93:c3:bf:
e3:5e:7a:6f:f2:be:9c:3c:6b:f4:8f:31:40:ea:84:
27:6c:af:8f:8f:1c:dd:27:e9:2b:58:1f:3b:a5:da:
45:1f:8f:83:e9:63:48:11:f5:11:bd:53:0a:79:9e:
83:e1:59:66:22:50:de:d9:6c:7e:a2:e5:8a:52:17:
68:89:94:9d:ec:93:f5:90:d5:13:40:68:57:af:cd:
71:e8:8c:be:01:e9:6e:83:62:e9:17:73:8b:92:68:
d8:7d:60:a4:74:be:88:03:6e:22:31:f5:24:b3:03:
6c:90:27:aa:90:65:9b:3f:4f:57:63:90:20:f7:24:
70:33:2e:4f:61:98:e6:66:ec:5b:d1:63:5b:9a:e9:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:C9:E5:8D:D8:5F:EF:D7:1E:62:58:89:CA:82:BA:43:5F:60:A3
X509v3 Authority Key Identifier:
keyid:A2:B7:61:00:57:84:30:4F:97:4A:6E:8D:58:6A:40:53:27:08:9A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/ordhAFeEME-XSm6NWGpAUycIml0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ordhAFeEME-XSm6NWGpAUycIml0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/D7F68AC88BAF11F18DC99137ACEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.252.0/23
IPv6:
2400:7460::/32
Signature Algorithm: sha256WithRSAEncryption
12:7b:ba:3b:32:e9:ab:18:4a:b8:45:a0:e4:a6:c7:c2:07:fd:
49:f7:1e:eb:55:df:7c:f6:d5:74:5c:8b:69:b5:06:79:04:f7:
ab:a3:11:3e:23:c6:f4:16:4f:7d:a9:0a:2a:4d:1f:a1:4a:06:
1a:66:0d:d2:b9:e8:57:ba:a3:6d:4f:f4:50:80:c5:f9:cc:41:
41:87:a9:e7:5f:95:d6:1a:16:d7:51:db:47:e3:76:c9:31:ad:
52:59:24:92:7e:d5:bf:11:52:17:78:27:1d:b0:f3:f6:38:0e:
9f:65:95:ed:88:c7:1f:14:d8:36:5e:5b:08:a1:3d:db:24:bb:
5a:05:60:4a:a7:21:29:c6:54:70:3e:93:b0:82:2e:af:44:b5:
fd:e3:59:f2:9e:38:09:e8:c6:b9:62:29:48:a7:cc:e1:6b:ce:
5a:4d:35:e2:65:24:ca:00:7a:29:28:5f:ea:10:c8:94:fd:1a:
0e:22:dc:7f:23:30:06:10:38:dd:0b:26:9c:bd:7d:5c:7a:43:
fa:ef:16:9e:53:dd:87:1b:20:6a:24:d1:5c:4f:fd:91:81:a9:
47:8f:b9:04:3e:59:cf:0d:37:10:ff:0b:33:b9:7a:87:20:89:
71:fa:56:8e:0c:7d:f6:d4:ed:6f:2f:98:f4:9d:11:63:30:24:
5d:77:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:24 2026 by rpki-client