
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa
File: ABD5003E079C11EBA7C04832C4F9AE02.roa (raw, json)
Hash identifier: c52POv1l+IxL+X32oaXtqiMTTJbwhKIWuZtTDidGWio=
Subject key identifier: B9:C7:99:70:0E:2A:02:D3:65:3C:A7:07:11:FB:1A:96:9D:58:5C:5B
Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial: 08A5
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa
Signing time: Mon 12 Oct 2026 21:40:42 +0000
ROA not before: Mon 12 Oct 2026 21:40:42 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 38880
IP address blocks: 103.195.207.0/24 maxlen: 24
2001:df6:2400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213 (0x8a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Validity
Not Before: Oct 12 21:40:42 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acd53da-6145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:0b:6c:3c:b1:93:59:20:58:13:11:f3:92:
8c:38:aa:2c:f8:98:72:65:cf:9c:39:78:3c:df:b6:
3d:19:37:58:ed:e7:e7:81:6c:f4:49:54:c8:82:9d:
17:59:c9:52:17:7d:1b:14:cd:5f:6e:47:8b:02:9d:
04:5e:0b:39:f3:30:da:0d:0f:00:4f:c6:4e:28:d9:
43:01:81:46:0b:c4:e0:75:4e:90:c0:f2:85:2f:de:
e9:5e:4a:85:80:97:39:30:52:68:6e:b6:63:7e:1b:
4d:2f:d1:62:94:8e:d9:80:b4:44:60:53:8d:7c:79:
09:f3:8f:68:f7:61:47:15:f3:75:a2:27:63:33:5d:
0d:70:16:f8:5a:b4:e9:90:08:52:97:73:2d:2d:c7:
ca:b4:09:38:9d:27:0b:d0:08:f1:84:49:9f:f8:bc:
07:c6:6c:79:9f:68:9e:85:ca:0c:d0:9b:4d:33:f1:
b4:dc:ed:1d:c3:49:1d:bc:d4:c3:db:2a:a9:82:cb:
f7:9a:45:1c:6c:39:94:73:58:88:10:51:ba:7f:a9:
1d:2d:1e:56:c6:59:58:dd:50:3a:32:41:0b:ce:a0:
87:a7:80:e2:c7:8c:47:c9:8a:a4:42:1d:03:b1:2c:
7c:5d:f7:0f:e3:73:0e:ef:3e:2a:ab:aa:63:4a:a8:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C7:99:70:0E:2A:02:D3:65:3C:A7:07:11:FB:1A:96:9D:58:5C:5B
X509v3 Authority Key Identifier:
keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.195.207.0/24
IPv6:
2001:df6:2400::/48
Signature Algorithm: sha256WithRSAEncryption
a1:22:3f:f7:46:7e:59:a7:dd:14:81:1d:bd:04:bc:42:92:c9:
91:8e:4c:ff:ef:fb:60:19:dd:3c:74:5d:af:eb:ab:f9:29:b3:
45:da:44:75:53:5b:dc:46:b1:bd:e9:b0:78:73:42:b5:72:a1:
e1:f8:70:3b:be:6b:c8:4b:fb:c5:49:96:a8:68:20:25:11:82:
bd:5f:53:d5:dc:c2:bb:d8:1c:1f:a2:7e:40:73:76:51:55:30:
fb:fe:40:e5:1e:52:5c:00:4e:6a:78:6e:d2:26:a7:e1:7c:a0:
0a:5e:1a:7a:09:4a:33:f5:b8:35:7b:2e:5d:56:70:4f:97:db:
78:07:a1:61:b3:a1:91:66:17:2e:4c:5e:6a:a2:43:e4:59:64:
5d:c1:fd:18:be:06:f8:38:dd:d2:86:a4:2a:55:77:49:7c:35:
49:53:8c:9e:fc:fa:89:0a:51:9f:f6:ba:cf:67:a0:0f:02:94:
54:a0:65:d5:7a:7e:67:21:e8:56:c1:73:62:cd:ff:56:fb:dd:
15:2b:7f:ba:36:70:d1:b0:b9:a6:3e:a1:c3:d7:78:b9:d9:74:
39:11:ec:30:50:ae:4d:5d:22:5e:2a:f0:b4:2b:fa:0c:19:f7:
85:51:41:16:6c:f4:9c:e6:cb:b2:4d:3b:86:6c:ce:f1:db:8b:
64:18:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:00:01 2026 by rpki-client