
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/628C9174B6E011EF87D3F60CC4F9AE02.roa
File: 628C9174B6E011EF87D3F60CC4F9AE02.roa (raw, json)
Hash identifier: lAMERlTic/OZedT2hna8JwKOo6bjrptHcfrfsFynvCc=
Subject key identifier: 64:7B:8F:16:19:79:CB:6A:9A:29:38:F7:09:ED:46:AF:09:15:38:45
Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197
Certificate serial: 01D3
Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/628C9174B6E011EF87D3F60CC4F9AE02.roa
Signing time: Sun 23 Aug 2026 03:53:24 +0000
ROA not before: Sun 23 Aug 2026 03:53:24 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 31898
IP address blocks: 103.15.179.0/24 maxlen: 24
103.159.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl
rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 03:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197
Validity
Not Before: Aug 23 03:53:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8a6eb4-8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:ce:cd:25:59:98:2f:4f:d8:0f:d9:ef:80:
ce:6a:a8:fe:3b:0e:35:7c:13:b6:34:5a:aa:b0:40:
99:31:a5:56:df:2b:7e:e8:15:21:0d:0a:e7:cb:ef:
ee:4a:01:8a:5f:17:59:25:3f:1f:12:77:82:c0:1b:
f3:79:d3:dc:64:66:fa:60:13:f5:58:15:1d:bd:f2:
3e:df:2b:12:f8:66:94:7e:50:7d:2d:96:d1:5e:7e:
f2:b3:d8:e9:62:05:29:34:17:f8:d4:ab:9c:fc:5f:
38:70:f0:cd:93:c9:34:9f:dc:06:19:47:74:8e:42:
c7:d1:76:8d:8b:c2:e7:15:3c:21:ea:9e:d4:bd:2c:
30:66:8e:95:76:fe:42:0f:74:f5:cd:25:f6:80:0c:
22:d2:e2:bd:1a:a4:e8:32:4d:93:6d:47:bc:aa:a5:
05:55:59:c9:8d:d0:f6:58:5c:82:5f:96:09:91:9a:
78:b3:44:44:0f:5a:3c:32:e6:e5:70:09:a0:d0:43:
73:5a:16:10:46:cd:24:70:75:46:30:27:6a:fb:b9:
d5:b9:2f:5c:df:f4:00:25:da:ca:9a:88:74:03:ca:
54:ba:bb:c5:db:4a:79:c5:cf:a7:d9:7b:f3:09:3c:
d1:02:d4:02:f1:2e:98:11:53:21:16:af:cb:08:b8:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:8F:16:19:79:CB:6A:9A:29:38:F7:09:ED:46:AF:09:15:38:45
X509v3 Authority Key Identifier:
keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/628C9174B6E011EF87D3F60CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.179.0/24
103.159.76.0/24
Signature Algorithm: sha256WithRSAEncryption
14:08:9f:cb:ae:90:a9:e5:4e:34:59:67:b4:c3:3f:e1:ee:4b:
3c:13:c6:1c:08:44:8d:6d:c3:95:ab:52:72:62:b9:8d:d9:d1:
20:f8:99:80:bd:fb:af:ec:92:12:85:b5:49:5c:c7:fb:0c:17:
66:5a:aa:8b:b2:75:41:92:17:ac:ae:58:3d:dd:dd:bf:08:4e:
c9:e9:14:56:43:7e:9c:19:0c:44:b3:52:bd:4e:26:1f:45:ea:
ad:2f:df:6b:9e:34:e3:bd:8e:a4:3f:d0:62:bf:84:37:1f:58:
e5:1d:f9:9b:88:6f:d6:9f:5c:95:90:0a:07:b4:e6:50:ec:0c:
63:2e:ee:00:ef:84:c7:df:c7:28:d5:14:92:53:2b:92:c8:86:
8b:31:b3:d9:8b:90:80:e5:33:e5:e5:65:f1:77:10:b2:6f:e5:
1d:7c:fa:57:bc:fa:24:79:98:8f:c5:15:dc:cf:b7:04:b4:d4:
6e:e1:93:8f:99:f9:c2:e5:03:28:35:f0:52:7a:28:9e:11:9e:
61:b5:2f:3a:6f:e2:a2:3a:40:6c:75:88:80:1d:5e:40:5d:b0:
26:bb:cd:0d:e4:db:4e:a8:84:6f:a7:bb:98:fc:f9:1f:31:a4:
5d:e1:8c:7c:9b:36:e2:2b:65:ed:e6:b0:f4:66:28:34:88:25:
3e:aa:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:55:59 2026 by rpki-client