
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DA0F1EF2F83D11F0A25A0B813D6F56BC.roa
File: DA0F1EF2F83D11F0A25A0B813D6F56BC.roa (raw, json)
Hash identifier: htbnvMZFr0rpVvZtBGKdSFqnpsyA+spHOM3fEdj7r6U=
Subject key identifier: 03:C6:86:26:01:3C:88:19:AE:4C:C0:91:A1:9D:1A:7F:D4:FC:A5:FB
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D77
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DA0F1EF2F83D11F0A25A0B813D6F56BC.roa
Signing time: Fri 02 Oct 2026 15:22:00 +0000
ROA not before: Fri 02 Oct 2026 15:22:00 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131360
IP address blocks: 103.9.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28023 (0x6d77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:22:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc18-6ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:dc:e6:6f:76:43:ea:d8:b6:be:42:95:1c:
c7:08:81:4e:8d:49:93:30:59:5a:e6:6f:eb:fe:18:
00:a4:f3:ee:45:0c:0c:04:9f:d7:94:43:38:72:be:
6b:6e:38:b4:d0:91:59:e8:37:2c:8f:7e:56:ca:d2:
3e:e3:ed:c6:ed:a5:66:b7:1f:48:ec:e5:5f:9c:3a:
3a:2f:ae:18:8f:e4:87:5a:0c:77:66:e3:28:1b:88:
eb:8c:7f:62:e3:47:17:4d:5c:cc:e3:08:4e:e1:39:
0f:61:25:98:4c:78:4f:60:bb:41:2b:bd:54:d6:d9:
ea:e2:f6:73:d5:44:ce:27:a5:6f:25:7b:d1:5b:a5:
dd:1e:97:3e:6e:26:1f:d7:d8:18:19:01:ca:a4:dc:
db:5f:2c:70:f2:03:bf:d3:ec:0a:f9:cc:bb:32:70:
03:87:52:a4:fc:ef:48:8d:08:c2:a0:14:5b:3a:73:
3c:bc:7c:32:a6:ae:4c:38:81:d4:44:20:28:fc:35:
1b:fc:31:c3:8e:f7:34:2f:d7:6b:ce:e6:1b:8e:82:
6a:7b:28:3d:23:dd:6c:ee:f3:ad:27:4f:0b:5c:f0:
95:2b:24:eb:a4:b5:25:d4:b3:54:7b:57:5d:f7:d4:
ca:71:7b:11:19:11:d5:30:5d:9a:e9:fd:7a:d7:ac:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:86:26:01:3C:88:19:AE:4C:C0:91:A1:9D:1A:7F:D4:FC:A5:FB
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DA0F1EF2F83D11F0A25A0B813D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.4.0/22
Signature Algorithm: sha256WithRSAEncryption
27:01:50:ef:0a:db:cf:e7:d6:53:8d:57:69:02:19:09:1d:b8:
9d:72:f9:c7:59:6d:d2:5c:79:49:85:58:8a:8a:c2:f9:f9:c7:
25:f4:42:97:a9:10:fc:72:76:04:ca:2a:02:f9:03:48:68:fc:
8a:10:3f:bc:65:5a:f1:37:8a:94:5c:92:77:b1:c5:ed:07:1e:
23:68:cc:33:96:d3:09:05:ae:7b:91:61:92:2e:6c:b6:96:0e:
f3:e2:72:63:0c:6a:73:31:03:a6:b0:fa:73:13:40:e9:1d:ab:
ba:87:b7:af:a9:a9:29:9d:3f:0d:d0:6f:cc:2b:30:48:ef:47:
b3:d4:e2:a6:6a:54:d6:89:6b:c8:40:42:00:44:8f:44:50:de:
c9:7b:b9:f4:71:0a:72:7e:1b:2c:dd:2f:39:1b:f6:59:ec:77:
ee:db:9b:8d:4a:b7:6d:b9:58:08:a6:3a:27:05:63:84:0f:03:
30:79:30:dd:15:64:31:39:51:7b:35:6c:61:83:58:3d:e3:19:
29:bb:aa:6c:f5:7a:64:4c:6b:25:20:63:82:e9:2c:66:32:00:
8e:32:14:5b:b7:fc:b8:2e:4f:f8:38:eb:ee:58:3e:c6:41:37:
d5:80:1b:1d:f7:74:ff:2d:d5:d6:b2:7c:be:b6:7c:e6:4d:19:
bb:28:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:38 2026 by rpki-client