
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/2A9D9D34D69211F1B763FE2C2D66CEF9.roa
File: 2A9D9D34D69211F1B763FE2C2D66CEF9.roa (raw, json)
Hash identifier: haM2AzItG2hWTufrCylCvErQ4EQD0U6nrw2yF913Afc=
Subject key identifier: 7D:9F:9A:02:AF:14:13:9F:D9:26:1E:B5:EB:08:D2:B3:1E:E2:88:B2
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0AFD
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/2A9D9D34D69211F1B763FE2C2D66CEF9.roa
Signing time: Mon 02 Nov 2026 07:51:09 +0000
ROA not before: Mon 02 Nov 2026 07:51:09 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17941
IP address blocks: 103.26.33.0/24 maxlen: 24
103.26.35.0/24 maxlen: 24
2404:5480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 19:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Nov 2 07:51:09 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ae840ed-b46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:79:1d:14:f5:18:d0:07:02:ee:d2:31:c9:
b5:42:e2:9c:ea:ed:fe:6c:71:3b:1a:b2:a7:a3:aa:
37:09:f5:f7:b4:5e:d3:62:89:e3:9a:4e:27:3a:48:
22:44:68:84:17:6f:86:57:31:32:f1:05:7a:fd:a4:
51:9d:55:d8:c5:db:22:1a:7b:11:1e:f9:59:a7:e5:
97:7e:3d:b3:7e:5a:f3:ac:55:d2:31:be:ee:44:20:
4c:5d:a0:ab:41:02:80:0a:11:83:cb:6c:d4:10:8e:
dc:b3:99:9e:78:f0:eb:a9:11:b5:76:ce:83:6f:70:
53:f1:31:74:7b:27:b1:6e:e0:67:5b:8b:be:d8:27:
a8:1a:e6:dd:7a:7f:47:cf:b9:cb:a6:f5:43:4d:0d:
22:d4:ba:f2:ac:24:1e:c3:d8:ec:bc:b7:b9:56:33:
3c:05:67:cc:84:b2:dd:e5:ae:55:2e:00:0f:66:01:
aa:46:d4:ca:44:32:02:9f:f5:33:b8:c6:aa:b6:6b:
1a:ab:91:23:55:ad:cb:fe:53:3b:bf:da:bc:4a:df:
db:63:45:76:17:4d:ae:31:43:33:1d:18:81:14:41:
23:4b:8b:0c:f5:a2:6d:0f:80:46:8f:1c:ce:3a:96:
96:26:30:93:8d:b9:77:d7:ed:4e:6b:d6:7e:12:78:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:9A:02:AF:14:13:9F:D9:26:1E:B5:EB:08:D2:B3:1E:E2:88:B2
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/2A9D9D34D69211F1B763FE2C2D66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.33.0/24
103.26.35.0/24
IPv6:
2404:5480::/32
Signature Algorithm: sha256WithRSAEncryption
58:06:33:a9:0b:f2:8d:4e:59:c0:e5:92:11:04:d1:8b:d9:1b:
7b:67:62:14:54:2f:0d:a5:9f:f7:99:86:79:fa:38:43:e3:37:
cc:9a:83:c1:b4:e3:c5:a9:c0:8f:e9:49:c2:ca:81:63:c2:4f:
32:c6:d8:98:68:04:24:f2:dd:5a:ab:50:21:63:bb:76:2e:73:
05:9a:94:9a:53:92:10:1e:8f:54:2c:82:e2:44:e7:be:4b:77:
0a:a8:02:64:50:17:6f:a3:79:11:06:c8:6f:de:d7:66:b6:b8:
62:73:d2:6f:e7:ab:d8:4b:2b:88:12:6e:aa:3a:0e:86:7a:83:
73:db:3b:16:d9:da:8f:09:d0:bb:0e:77:9d:d8:81:95:20:56:
84:97:d3:ee:df:a5:b5:e8:83:c9:33:ca:d5:0b:fc:3c:81:56:
1e:b9:0c:80:f9:22:54:44:38:c5:30:56:fd:5c:c3:07:59:4f:
52:31:98:5a:85:e1:d3:a0:90:e7:92:1e:d0:0c:1f:36:36:65:
fd:0c:05:1a:fe:99:85:65:26:ba:10:8c:2b:fa:16:34:e9:66:
e9:13:0d:77:78:63:da:0e:2c:7f:4d:1a:0e:f5:2c:cb:7b:29:
91:e2:f9:01:c0:3b:24:30:c1:b6:a9:17:6c:cd:99:1d:1b:1b:
7f:c1:24:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:42:22 2026 by rpki-client