
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F400B883FFE11EEBFDFCF4CC4F9AE02.roa
File: 8F400B883FFE11EEBFDFCF4CC4F9AE02.roa (raw, json)
Hash identifier: YFPViE8bRiIQwgAPuIFF8rHqCX+it83dex3BHMA5C9k=
Subject key identifier: B3:00:C8:67:37:EE:BB:E3:B3:97:74:34:B8:E3:6D:2B:7E:A6:EB:86
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E67
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F400B883FFE11EEBFDFCF4CC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:29:49 +0000
ROA not before: Fri 02 Oct 2026 15:29:49 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150861
IP address blocks: 103.68.248.0/22 maxlen: 22
103.147.188.0/23 maxlen: 23
103.182.20.0/23 maxlen: 23
2001:df0:74c0::/48 maxlen: 48
2405:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28263 (0x6e67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:29:49 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcdec-dbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:25:c0:b7:9d:4b:11:d2:de:aa:76:f2:23:
32:29:3f:84:5d:fb:d4:5b:88:78:54:24:b4:8c:93:
86:f6:78:33:47:56:13:ca:a9:12:40:9e:2d:62:cb:
3a:84:b5:c8:a8:eb:ff:e8:92:c7:44:5a:d7:b3:27:
6a:52:a0:ae:fc:6b:91:ba:fe:84:e5:f1:34:20:d0:
4c:6d:e6:6c:5d:65:58:12:10:11:97:45:a8:78:74:
46:fc:03:a9:3c:14:44:4b:8f:f3:fe:7a:be:7d:e8:
e6:eb:5a:02:13:ed:e6:6c:af:7e:37:a3:26:a7:d7:
fe:0b:67:64:e6:93:97:b9:15:01:c2:cb:9a:80:08:
10:67:8c:95:b7:60:ba:e7:9c:f6:cb:e9:46:47:60:
c4:03:6f:f2:f3:ed:36:5d:9c:b7:5a:65:4b:8f:d2:
99:fc:d6:40:fa:14:a3:ee:7d:85:ee:06:8d:5e:a3:
e8:80:dc:4e:59:7e:a9:6d:f3:df:04:ad:7f:04:77:
b5:a3:b2:cd:8d:1e:62:11:27:fe:ae:29:d6:38:4d:
89:6b:72:53:07:23:84:22:32:b6:95:a8:b8:e5:18:
78:f9:53:28:3e:88:ea:80:bd:b5:a0:ba:67:20:11:
6d:d1:76:b4:20:25:83:7c:73:20:29:0c:63:18:4f:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:00:C8:67:37:EE:BB:E3:B3:97:74:34:B8:E3:6D:2B:7E:A6:EB:86
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F400B883FFE11EEBFDFCF4CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.248.0/22
103.147.188.0/23
103.182.20.0/23
IPv6:
2001:df0:74c0::/48
2405:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
10:8e:c8:12:00:1e:2d:fe:ec:f5:94:37:da:d7:9f:96:7d:23:
8b:6e:9b:ea:27:6a:a1:8b:34:40:a0:7d:d6:f9:7e:54:9e:91:
c3:86:2d:6b:e2:b1:81:fa:14:1a:82:c8:b3:ff:e0:ca:61:94:
d2:d7:cd:b3:a7:81:9d:b2:12:92:63:6b:0f:62:07:ce:ab:a3:
c4:43:92:7b:62:c4:68:27:ea:b8:5a:c7:ee:49:25:6b:65:4f:
25:78:8d:97:9b:a4:9c:fa:27:d1:00:aa:24:0b:54:44:82:eb:
e3:f2:87:de:77:9a:02:44:ab:b5:23:9f:b2:aa:e8:53:9b:7b:
85:ad:c5:bc:f0:4c:45:93:27:96:c0:1e:d4:45:f3:b0:fa:2e:
dd:3f:bb:ca:1e:e7:a3:35:21:f4:70:a4:a2:ea:03:77:83:69:
31:e4:bb:da:53:c1:e7:d4:1d:6c:80:a5:4e:c0:9f:c4:d0:2c:
83:58:5d:8e:67:73:9f:bd:0f:16:d7:d8:be:eb:bc:07:a5:e4:
4b:39:85:a3:85:f6:d1:63:23:35:a1:ec:cd:47:5c:70:d7:f2:
a1:3b:9f:be:61:25:9e:5c:66:9f:9c:73:2b:b2:cf:8c:8a:f3:
79:a4:fa:63:26:df:bd:4c:fd:1f:71:f7:ad:6b:1d:8c:e9:e4:
85:b3:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:36 2026 by rpki-client