
$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
File: 1069D50EB54B11F092E79246C4F9AE02.roa (raw, json)
Hash identifier: GhfbbBIsZM+E4EuVHL/xJ2Fu2eRbGFvM+U1LBFCjiS0=
Subject key identifier: F4:C8:38:A0:CA:B8:FB:3F:C3:BA:71:5E:99:B6:0C:7F:09:87:04:D0
Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial: 08D0
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
Signing time: Sun 02 Aug 2026 21:40:41 +0000
ROA not before: Sun 02 Aug 2026 21:40:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151622
IP address blocks: 103.8.21.0/24 maxlen: 24
103.8.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Validity
Not Before: Aug 2 21:40:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6fb959-b070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:0a:da:30:88:f3:e3:7c:2d:59:20:52:69:
f3:8a:84:7a:ed:e4:b2:d9:00:82:bb:13:bd:a8:2d:
3f:06:67:cc:a6:7a:ee:c1:7d:3e:ab:2e:2a:96:f4:
f1:47:1f:34:60:20:eb:7f:80:d5:64:cc:7e:5a:03:
b7:13:b3:ae:e8:f3:6a:d6:5a:7e:7d:99:4f:51:c3:
63:37:a5:49:2b:d2:63:fd:41:b5:62:a7:86:61:42:
72:3e:e5:43:c8:54:4d:7e:6d:97:e9:2d:ad:da:5e:
f8:68:d5:17:1c:84:ce:3b:84:3e:0d:d4:c4:81:f3:
7a:5f:82:d4:b8:62:5f:d2:72:ac:61:a6:17:6f:7a:
f0:39:81:00:e2:f3:04:e8:19:3f:fd:3c:ca:b0:57:
20:ea:10:02:37:69:35:57:20:11:88:4c:e3:32:0b:
ab:de:f4:46:68:ca:22:1d:31:25:38:45:cb:e0:64:
27:c2:ab:8f:97:dd:69:29:43:b2:95:46:3d:98:64:
26:bb:71:98:dc:f4:e2:b2:13:5e:7b:f0:4b:d9:df:
94:d0:71:62:6a:0e:bc:d6:02:ae:71:c9:27:8f:5e:
74:08:b5:7b:33:0e:1a:4e:8b:41:d3:98:ad:5e:a1:
b9:82:09:2e:14:d1:47:b3:5e:d7:32:57:eb:9e:44:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:38:A0:CA:B8:FB:3F:C3:BA:71:5E:99:B6:0C:7F:09:87:04:D0
X509v3 Authority Key Identifier:
keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1069D50EB54B11F092E79246C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.8.21.0/24
103.8.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e0:b4:c6:f3:9c:c2:42:e8:e1:c0:75:ad:71:17:ac:24:04:
0e:37:db:8d:a4:0c:5f:7e:de:7b:f7:31:aa:5f:2b:d4:25:31:
8f:6a:36:8b:4d:44:fa:f0:28:76:a0:c1:dd:d5:5b:10:59:fe:
c6:da:36:ab:ee:f7:b7:ff:18:ad:25:cb:1d:a3:52:74:b2:35:
e3:66:e4:00:a4:39:7e:8d:a6:2b:38:31:a3:64:7b:e6:df:75:
df:28:4e:65:86:66:d7:bd:2c:3f:78:37:6b:5b:be:df:d9:00:
a4:95:10:51:c2:21:fc:23:9f:bb:ca:87:e4:f3:cd:39:63:69:
01:fa:00:d1:f5:91:6b:8c:6d:c3:38:7e:98:22:6b:4a:56:e5:
cf:ee:96:3f:85:43:2b:a7:af:4f:35:b0:56:29:39:a9:95:f6:
39:92:83:b6:5f:81:52:c1:26:98:c5:0e:bd:46:38:a6:1e:89:
83:3e:43:9a:08:81:1d:57:85:c2:8a:48:0e:22:de:14:24:6f:
05:82:e4:c2:69:fd:48:a6:b8:d5:e0:fb:d5:af:8a:a5:0b:63:
ef:51:1e:0a:17:15:19:8e:dd:b0:10:93:e0:81:63:85:d7:b6:
11:cc:c5:26:97:ea:49:09:ac:18:b1:4d:28:dd:85:9c:95:90:
b7:f3:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:19:27 2026 by rpki-client