
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/56BB541A96D211F18C2EA54B5711F970.roa
File: 56BB541A96D211F18C2EA54B5711F970.roa (raw, json)
Hash identifier: Ik8lfHXDjOltLbsxdu6F0PFtvlma5DhjdJtEPmrqpWI=
Subject key identifier: 83:08:62:8F:75:9C:CC:A4:31:11:85:FB:08:47:6F:2C:F4:DF:80:92
Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial: 0A91
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/56BB541A96D211F18C2EA54B5711F970.roa
Signing time: Thu 13 Aug 2026 04:49:17 +0000
ROA not before: Thu 13 Aug 2026 04:49:17 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.207.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 04:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2705 (0xa91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Validity
Not Before: Aug 13 04:49:17 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a7d4ccd-a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:46:95:ac:b9:08:b4:ef:92:ff:58:4b:03:4a:
78:f9:6b:8f:95:63:81:60:6d:66:9d:2e:f3:c5:8a:
b9:d0:82:82:85:10:55:72:7f:8a:4b:24:67:00:41:
e2:39:a5:30:38:89:fd:27:2e:5e:30:85:b1:85:b8:
6a:e8:25:90:a8:5c:0b:c2:98:0d:c5:a2:52:51:38:
ad:ad:54:94:41:e7:3f:ea:d4:c2:0f:e1:19:72:d1:
62:ee:cf:f6:63:84:50:0e:4d:51:e0:c7:61:54:da:
96:53:b6:f2:55:4a:ee:de:b6:90:1f:5a:7e:4c:44:
83:5b:06:73:74:94:d6:94:b4:12:3e:01:26:cb:7a:
e4:38:a8:91:14:ca:68:5a:42:e7:2c:59:3b:bf:79:
cd:e4:de:44:9b:05:64:90:f3:56:29:e5:01:ee:57:
b3:f1:01:22:02:a6:fe:71:99:ab:99:82:f7:52:53:
6f:36:f2:1d:4c:e5:fa:3d:a9:8a:0f:cd:7a:43:2a:
73:f7:5a:a1:e2:7a:0b:95:d4:d6:8a:d3:d9:da:fd:
e4:01:fb:63:7f:23:6d:4d:4e:18:34:7d:af:fb:d4:
02:3a:43:c3:a5:67:2d:1e:cc:50:b2:4d:e4:c9:79:
4e:e8:bf:15:60:b1:d5:ff:38:7f:5a:3a:f2:73:8e:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:08:62:8F:75:9C:CC:A4:31:11:85:FB:08:47:6F:2C:F4:DF:80:92
X509v3 Authority Key Identifier:
keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/56BB541A96D211F18C2EA54B5711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f6:aa:5b:d2:60:c6:2b:62:fe:45:eb:19:14:55:29:63:17:
0a:72:77:9c:b7:d6:93:dd:33:c4:02:8e:be:af:c1:43:55:48:
11:57:f4:8e:4a:e4:1e:42:3a:97:c8:e4:b3:35:42:d8:1f:08:
97:8d:e5:a1:a5:20:64:69:24:d6:d0:62:2c:fd:05:50:af:89:
ab:ff:b0:91:f8:0b:4c:ea:01:22:d0:c5:66:4e:4f:c2:29:a1:
e0:c3:e2:31:26:e3:7d:82:cb:ed:05:80:81:a0:0f:67:0b:01:
34:9f:45:65:e2:67:19:1f:64:9f:b7:3c:58:f9:8d:88:a6:c0:
86:4f:85:b9:45:6d:6d:18:2a:76:63:7d:a9:a7:61:67:8e:76:
43:70:18:07:34:bb:f8:4d:1d:89:1b:7d:24:0f:a0:31:d3:75:
e5:39:38:c2:39:0a:cd:43:b9:ad:65:e1:06:1c:5b:0c:a0:70:
6f:a0:53:ef:05:1e:e8:2a:51:07:18:97:23:2f:c5:a0:b8:f5:
25:9f:c9:ac:b5:8e:07:e9:bc:10:23:6f:a3:0a:63:43:89:0c:
1d:6b:87:02:12:15:5b:48:f0:ed:40:ef:1e:49:c3:4c:52:45:
4d:a9:a1:c9:01:92:c0:c0:c7:e2:20:23:f3:ad:89:8d:b1:91:
6e:1f:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:31 2026 by rpki-client