
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8039A5F8844411F198D529F56BA30FBC.roa
File: 8039A5F8844411F198D529F56BA30FBC.roa (raw, json)
Hash identifier: 8TXjOcqx6SaHYW4wqBChLHG+oMkTFPQokzF75XGnFxA=
Subject key identifier: 83:8B:5E:91:4A:8F:B9:BF:BC:A2:2B:65:F5:68:BC:9A:3B:B6:CE:AF
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CEE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8039A5F8844411F198D529F56BA30FBC.roa
Signing time: Mon 20 Jul 2026 14:08:37 +0000
ROA not before: Mon 20 Jul 2026 14:08:37 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140785
IP address blocks: 103.163.212.0/23 maxlen: 24
2001:df6:2880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27886 (0x6cee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 20 14:08:37 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a5e2be5-7a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:5a:12:2b:66:61:15:eb:c6:14:8c:b4:6e:
34:60:dd:25:1f:f6:d5:2e:01:10:5d:98:de:94:a1:
b5:46:44:86:8a:4f:23:40:5d:4a:96:6a:75:c3:5b:
e0:a1:8d:8a:80:90:5b:22:fb:c7:77:43:8f:54:c5:
cd:1d:40:2d:8c:d9:b5:67:79:cd:b5:65:ad:36:df:
fa:3a:b6:b2:81:0e:bc:37:fc:d5:3a:31:53:ae:1e:
7a:5c:60:d4:d3:74:2e:e9:10:14:ea:92:ba:2b:a1:
60:90:fa:17:17:13:a9:15:7b:8c:6a:24:e5:dd:79:
e8:d9:b3:8e:86:6e:af:cb:d4:72:c9:2f:32:1a:9a:
70:b3:bc:bb:6f:b4:b8:74:7e:af:ff:cb:50:28:92:
40:e1:18:95:7f:f2:26:d3:b5:ca:5a:98:2a:64:ed:
96:fa:c7:ba:7a:10:34:55:00:ee:de:f3:c1:f4:ff:
88:45:b4:5f:04:8a:96:43:27:32:12:46:3c:58:ce:
d2:f2:f1:38:91:35:a8:90:34:84:db:d3:5a:02:97:
17:56:65:63:4d:63:05:34:b6:5c:26:58:55:36:74:
fa:93:3d:e8:cf:81:5a:7b:4b:c9:f2:2b:15:49:c2:
3b:ad:cb:2a:ac:de:ff:37:26:66:03:ea:6f:8c:5c:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8B:5E:91:4A:8F:B9:BF:BC:A2:2B:65:F5:68:BC:9A:3B:B6:CE:AF
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8039A5F8844411F198D529F56BA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.212.0/23
IPv6:
2001:df6:2880::/48
Signature Algorithm: sha256WithRSAEncryption
4a:d6:8d:40:cb:b8:36:36:1a:d3:34:b5:a0:8d:9e:43:02:c5:
d9:e4:ef:ab:12:72:cc:72:3d:06:0d:28:ad:fc:f2:e4:71:49:
91:c5:e6:ff:da:92:82:ff:7a:49:9c:00:5b:13:4d:c6:e2:d7:
3d:9c:f8:49:63:3f:f4:7f:3e:57:8a:1f:a3:83:0a:84:b5:d4:
5e:89:ef:b4:8e:c8:13:63:5b:27:b1:78:c0:4b:de:3e:9f:c3:
21:00:52:a8:77:21:d2:e5:af:95:dc:c7:1b:fb:36:40:a1:27:
9a:55:e7:58:01:77:02:d3:df:05:70:81:6b:9c:12:f3:40:5e:
62:a1:90:8a:f3:c0:e6:47:bd:2a:74:0d:f4:8c:46:73:50:b0:
ea:09:d5:4d:6f:c9:8d:18:ce:7e:3d:fc:a0:15:fb:a7:71:34:
65:fb:79:cf:85:bb:27:7c:88:cd:db:b8:ba:0c:3b:d9:88:de:
97:f0:18:06:c5:4d:8f:88:de:a8:de:2d:a4:f0:6a:f7:41:62:
25:c3:2b:56:0b:02:70:98:e3:be:f4:d2:00:8a:ad:c7:27:2c:
9d:ef:e0:71:cc:9a:a4:14:42:b3:32:cd:18:ef:16:be:8e:c8:
46:e9:45:b7:a3:29:a3:f0:e4:bb:df:e9:d3:64:03:e0:8d:1e:
3b:cd:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:45 2026 by rpki-client