
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa
File: 2EB4CB7A717E11EFB0C5E227C4F9AE02.roa (raw, json)
Hash identifier: RxL+L6QOrrI1FzY3Ur47BxvUUDuLdp1lFWdlCtLm8Pc=
Subject key identifier: A9:44:7C:34:80:C8:15:1A:0D:06:46:0D:70:3D:10:9A:0E:B7:6A:4A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DE0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:25:29 +0000
ROA not before: Fri 02 Oct 2026 15:25:29 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135987
IP address blocks: 103.127.196.0/24 maxlen: 24
103.127.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28128 (0x6de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:25:29 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcce9-dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:00:54:3e:e1:4d:1c:4e:83:79:1e:26:bb:
3b:65:f5:ea:4d:df:d1:8d:7e:bd:f9:a6:f9:a4:06:
8d:a6:29:00:c5:b0:33:d3:cc:07:98:6f:42:cb:71:
a8:4b:6d:87:a2:d6:32:ad:bb:a4:2d:c0:cd:8b:11:
c7:ab:48:94:84:65:cd:b3:8b:32:a6:d1:af:71:f9:
1e:06:35:0f:fb:2e:12:d1:67:b8:57:ce:c4:65:46:
5a:32:1b:ca:49:d2:ac:5f:10:00:af:16:17:9e:01:
fd:0b:b0:27:8a:d6:1b:fe:91:91:76:1c:37:b8:70:
08:8b:bb:9e:69:bd:3e:c9:da:30:35:50:e2:88:9c:
76:74:81:04:5d:93:d1:ce:45:87:03:51:bf:68:be:
cb:98:96:02:fb:60:6d:e5:8a:73:49:7a:2f:b7:1a:
f0:31:f6:c0:fc:02:e1:b0:99:93:a8:b6:5b:e6:2d:
25:f6:c3:6a:3f:39:3f:bf:db:dd:94:fb:dd:f7:1a:
3e:4c:ce:81:a2:a0:69:53:d9:3f:06:6a:1e:91:7d:
c3:02:dc:d1:bf:c1:a5:5a:73:9d:93:e2:27:8a:82:
6f:a8:54:10:6c:7c:a4:82:e6:d5:b7:8f:df:29:c9:
90:5f:1c:85:df:85:58:a0:5d:7f:b7:90:02:ca:98:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:7C:34:80:C8:15:1A:0D:06:46:0D:70:3D:10:9A:0E:B7:6A:4A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.196.0/23
Signature Algorithm: sha256WithRSAEncryption
36:0f:f2:de:77:13:d3:79:96:ee:ac:9c:db:8d:0a:90:09:cf:
61:51:01:39:87:73:97:84:50:6d:ce:75:f1:bf:d0:43:98:8c:
4f:03:bf:44:b2:ab:11:c3:92:26:9b:13:af:c5:ea:18:1e:5f:
1d:a3:d5:4d:e7:6c:a5:f5:1c:1d:4b:5f:38:27:8b:43:4b:4a:
b5:1d:8b:47:30:6d:e0:33:40:0a:87:6c:ae:a0:2f:15:04:e5:
15:b4:d9:06:ba:ca:15:d1:50:01:9a:6b:02:27:64:64:86:17:
de:30:72:93:17:de:ba:ca:5d:b9:cb:3a:6f:58:37:dc:d6:3a:
5b:7a:2d:13:61:48:75:c7:8f:db:a5:09:5d:14:38:5f:27:47:
e1:f2:ce:e4:e9:b6:5d:54:8c:b9:3f:12:b1:10:4c:32:b8:14:
47:45:1b:3d:8b:b3:b9:0e:a8:fd:19:1d:30:92:0f:f8:65:37:
88:ac:d7:a2:c6:5a:36:df:1b:11:78:7a:07:79:9e:e1:b9:26:
e0:9c:d3:79:3c:a6:1d:57:d6:60:91:d3:33:01:ed:10:75:57:
c9:94:c1:ca:4c:f3:85:5b:be:23:6b:d1:e4:91:30:98:5e:3d:
51:14:78:fa:bd:38:01:b2:f8:16:6c:f3:2a:ac:8c:bb:92:47:
2a:cc:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:32:06 2026 by rpki-client