
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/984E33E4E01F11F0913A4E89646F56BC.roa
File: 984E33E4E01F11F0913A4E89646F56BC.roa (raw, json)
Hash identifier: TnTPauZII3K7TfOUqxleA9AY3NzIglaVPhckpoVW1/I=
Subject key identifier: 33:A9:CE:EE:AC:B5:8C:39:6C:95:67:D1:1F:6A:73:84:5A:DD:30:F4
Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial: 035B
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/984E33E4E01F11F0913A4E89646F56BC.roa
Signing time: Mon 17 Aug 2026 01:49:54 +0000
ROA not before: Mon 17 Aug 2026 01:49:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150143
IP address blocks: 103.20.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859 (0x35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Validity
Not Before: Aug 17 01:49:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8268c2-745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:8c:a3:98:49:b6:2a:7d:23:07:ca:eb:3d:
fa:19:dc:59:b3:22:7a:57:e2:7c:ab:45:3b:73:ee:
72:92:d0:d2:86:c5:f5:8a:42:c7:e7:be:f3:ab:b4:
81:f2:72:4f:85:71:ee:33:23:89:ca:9f:ac:f8:ec:
3e:2f:a3:bb:f8:3e:9f:15:6d:29:81:4e:09:d8:f7:
0f:1a:72:3c:f1:eb:57:47:e3:ed:ac:71:9c:33:24:
d6:58:cf:f2:2f:2b:ac:9a:96:1d:32:22:0d:e1:d3:
2f:78:f9:99:23:5c:57:a9:63:c4:37:3b:8a:66:b3:
9e:a1:c2:bb:18:46:a8:6d:bd:e5:15:8c:2b:af:b3:
f7:2b:c1:f5:df:b9:60:2f:45:f0:ae:da:78:9c:a9:
57:ad:61:a3:e1:1e:b8:c0:e7:7b:ab:44:de:06:4e:
42:9f:4a:1d:de:41:7d:fa:83:96:68:f3:92:12:d8:
fc:64:81:53:66:9f:31:1a:02:08:3b:66:3b:c5:d2:
c1:37:70:68:74:b3:99:42:dc:fb:b5:49:78:0a:56:
21:e9:d9:9c:a2:76:af:48:19:74:71:75:62:3c:8b:
fc:60:e8:40:dc:a7:94:6c:07:5c:e6:cd:8a:0c:b8:
45:3f:79:a1:a2:f3:69:70:e4:c6:00:36:9b:41:a4:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A9:CE:EE:AC:B5:8C:39:6C:95:67:D1:1F:6A:73:84:5A:DD:30:F4
X509v3 Authority Key Identifier:
keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/984E33E4E01F11F0913A4E89646F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.198.0/23
Signature Algorithm: sha256WithRSAEncryption
49:23:63:da:1f:93:15:45:89:c7:7d:62:75:42:ec:b0:26:e0:
3d:23:68:96:b0:1e:43:d4:37:50:28:a3:a1:a6:3b:ff:0a:e6:
b8:14:de:9e:87:7d:9d:2c:36:78:23:83:f9:5e:02:29:70:35:
9b:84:4f:09:a1:ee:a5:f3:c6:93:a5:fb:56:40:11:46:60:52:
da:5e:b5:48:03:0e:28:60:0b:0a:6a:6d:ba:cb:4a:68:c2:68:
b7:39:33:be:79:68:a7:4f:0c:9f:93:14:d9:8c:b7:83:92:3f:
0a:85:54:13:fd:e8:37:29:6b:3b:70:a1:62:b4:ee:6f:e9:d5:
00:c4:e1:ce:f9:24:1a:49:4e:d4:a5:2a:67:cd:da:b0:23:d5:
19:af:6c:e8:85:00:4b:fa:66:f1:c1:93:24:ab:6b:97:2b:04:
48:97:96:44:52:20:2a:12:75:3f:6b:7f:33:a2:7d:29:f8:a5:
14:3a:68:f9:d9:e9:ff:44:33:dc:17:d3:c0:f4:9e:01:72:3d:
7b:ea:06:5a:35:cd:7b:63:d4:7a:7c:7a:61:da:3a:2d:16:08:
10:b3:f8:d5:23:8b:87:14:52:dd:fa:aa:a4:e0:96:51:84:ce:
62:38:19:03:5a:4f:09:43:e5:0e:e1:20:94:88:c0:d2:11:52:
f4:31:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:44:58 2026 by rpki-client