
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2DAD33AC31211ED86F35C63C4F9AE02.roa
File: A2DAD33AC31211ED86F35C63C4F9AE02.roa (raw, json)
Hash identifier: YUoRmS+wLl/OfE51/0CZ6oE4s2OOODSx/uZXPzUZ9vc=
Subject key identifier: 13:CF:5E:D1:DA:24:60:02:9D:2C:8D:4F:4B:7B:6A:D0:36:3D:76:72
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DBD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2DAD33AC31211ED86F35C63C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:24:22 +0000
ROA not before: Fri 02 Oct 2026 15:24:22 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135923
IP address blocks: 103.99.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28093 (0x6dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:24:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcca6-4be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:13:ca:67:ce:b7:34:e3:79:36:86:58:70:
aa:3a:1b:0e:c2:54:85:e0:9f:36:84:37:0f:c9:d4:
97:cf:94:dd:34:08:94:44:74:1f:c1:77:47:a4:56:
b0:65:40:e8:c3:ed:9c:19:56:6f:b2:94:f5:56:03:
0c:a2:05:44:c4:ef:eb:9b:66:e6:9d:af:db:5c:98:
ed:7d:2f:c4:61:05:3e:28:01:75:cc:2c:06:97:30:
aa:3a:11:bc:7d:30:9c:1a:d7:bc:2b:3b:7f:30:d6:
63:8c:af:97:22:af:0f:0f:f7:23:35:2c:b5:6c:c6:
17:6a:94:b2:5d:9b:67:c1:64:7d:8d:2c:63:2c:46:
d9:8a:5c:51:d0:b6:1a:fd:b9:69:10:5a:3c:f9:80:
7f:eb:de:b8:2a:d6:92:96:68:0c:6a:0a:c8:c6:e4:
99:3f:ab:a8:40:70:b0:b7:8c:d1:68:21:64:63:ee:
da:18:44:94:d2:84:e8:d1:e8:36:51:26:ec:77:f6:
37:f9:e0:e1:ca:f7:61:9a:e0:85:e6:98:59:f3:20:
1c:9c:e2:b5:b2:cb:9c:55:fa:ec:66:51:e0:ec:93:
bb:72:41:0d:97:d6:62:9e:6a:88:80:e1:49:ce:14:
04:1f:47:07:f6:a5:6b:eb:1f:2d:73:83:f2:97:7c:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:5E:D1:DA:24:60:02:9D:2C:8D:4F:4B:7B:6A:D0:36:3D:76:72
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2DAD33AC31211ED86F35C63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:d2:61:2e:7c:5a:aa:15:ad:ae:b2:e4:51:95:2d:7e:48:6e:
08:03:14:ea:64:84:f4:32:3b:a8:e9:75:19:1a:74:40:72:b8:
11:d9:d3:f2:ca:42:6b:db:18:a0:08:4f:f3:62:8c:5f:ca:a8:
41:0b:28:93:97:09:ea:ca:85:53:0c:6b:35:27:e2:2c:29:a9:
98:96:11:08:ec:80:77:1b:f2:95:5d:8b:c7:52:88:ad:37:25:
f8:49:2e:d9:5d:8d:b8:89:fe:38:c3:8a:39:82:41:d5:68:9b:
4c:c1:0d:c3:b5:b8:16:d4:d7:dd:d7:98:29:1f:c9:51:fb:4e:
10:e1:5b:99:20:19:14:cc:cd:a9:4c:98:6c:54:e5:08:52:61:
12:91:85:c6:0d:05:27:87:86:49:3b:44:f9:db:f7:a4:dd:22:
cd:2f:74:74:c6:d7:17:7d:7f:eb:5e:ed:ee:ea:11:bb:af:af:
fb:bf:1c:28:40:1f:6c:0a:c7:17:94:aa:c7:03:40:d2:92:75:
07:fc:4e:19:f9:d1:d3:8f:0a:62:f3:97:f3:a0:e9:d3:b0:db:
af:83:6e:82:43:c7:03:ed:e1:91:01:0f:d5:4a:b3:af:04:d7:
15:b3:65:8d:02:0f:95:5d:13:1a:fd:d6:22:83:97:a7:8c:cf:
e7:39:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:31:04 2026 by rpki-client