
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
File: 108CCEAE7F6A11F0A3280286C4F9AE02.roa (raw, json)
Hash identifier: YKGeyBZx1z5ttUcEYMKokgoMQl86Vu6OzhUug7Me+I0=
Subject key identifier: 20:B4:54:A8:78:E6:2E:5C:69:DD:21:60:F6:4D:D1:C2:9D:96:41:D9
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CE6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
Signing time: Wed 15 Jul 2026 09:25:09 +0000
ROA not before: Wed 15 Jul 2026 09:25:09 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131418
IP address blocks: 45.119.243.0/24 maxlen: 24
103.239.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27878 (0x6ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 15 09:25:09 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a5751f4-64a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:26:4d:f4:37:76:d2:e0:fe:d7:5f:4d:9f:
be:c8:0a:41:73:f7:a5:35:06:d4:b9:26:a3:59:25:
69:35:99:ad:b3:f6:c0:00:73:2d:67:a3:0a:60:8c:
87:ea:93:06:0b:2b:84:c0:a0:bd:6e:1d:8a:d2:82:
26:a2:2f:71:7e:ea:28:7c:34:00:c7:6a:06:77:23:
98:02:76:4f:ac:8b:77:74:42:23:65:7b:e8:d5:a8:
29:2d:08:26:f3:6a:0d:83:30:06:7a:7f:32:52:9d:
5a:ae:d9:34:98:06:56:c1:2a:c2:48:ec:20:de:87:
76:50:34:2e:ed:eb:d9:01:6e:78:08:b2:94:4c:b4:
b6:6c:a2:04:24:22:0e:af:57:fd:25:66:b2:48:0d:
9d:18:08:03:13:f0:1d:8d:99:a9:98:8c:79:ef:47:
24:1b:bf:5f:26:18:3a:91:c5:78:02:65:03:08:22:
7b:f5:cc:66:38:14:37:94:4d:36:7b:d5:6a:fe:92:
37:ab:72:9a:3e:0f:16:eb:7a:97:38:4c:22:b1:f8:
42:13:22:49:fb:65:7f:d3:60:07:e7:df:b2:ab:47:
79:fe:1d:f0:88:d2:e9:39:86:45:06:e7:13:b0:10:
a9:93:7f:31:23:5b:fa:fc:19:16:e3:b5:da:2a:4a:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:54:A8:78:E6:2E:5C:69:DD:21:60:F6:4D:D1:C2:9D:96:41:D9
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.119.243.0/24
103.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
50:e7:2c:a4:cb:08:16:0a:a9:51:1e:85:14:26:39:2a:d6:ea:
4e:89:f2:c4:f3:01:96:aa:09:bf:86:6e:b7:ce:43:be:0a:e3:
6e:93:36:b3:17:cd:bc:92:f5:42:91:23:96:73:c6:3a:18:b1:
e6:68:fd:47:58:7b:f6:ac:55:ec:1c:87:03:36:9f:a3:56:34:
d8:e0:99:9e:f0:ed:f1:29:b4:0d:43:7d:b3:6d:1a:5c:a3:3d:
61:f5:ea:12:1f:38:ab:fb:08:af:61:d2:6d:ca:98:5d:cb:d7:
2e:98:bd:98:e7:b8:c5:66:98:e5:38:5c:33:03:18:f6:8e:ea:
9b:7e:57:41:86:7d:a5:fc:c2:a0:bd:1b:6d:64:6d:32:54:69:
2d:49:b9:df:9b:3d:82:9e:a2:e1:25:10:15:ea:79:8b:f1:5e:
62:f7:0f:c8:20:45:a3:63:21:0a:b8:d4:7c:31:20:b4:d8:91:
30:29:73:4c:26:19:c6:90:91:bd:52:54:74:a2:4c:b2:ea:d6:
8f:b0:68:74:7f:5c:8d:6a:1f:75:ed:01:09:bc:40:cd:c6:92:
87:e9:dc:69:4e:bf:f9:46:4c:ef:2c:08:51:06:44:43:31:9a:
69:e4:72:0f:a3:f6:67:f2:67:16:df:55:ce:6d:3e:0e:98:57:
98:1e:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:00:43 2026 by rpki-client