
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
File: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (raw, json)
Hash identifier: qdHsepzcAOjuAg1w+GnK6uKVgZktZf14YKTA/qN5ags=
Subject key identifier: C8:B1:12:2E:A8:FA:FB:0E:F2:85:C8:DF:1E:B7:24:43:4D:DD:95:5D
Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial: 09C1
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
Signing time: Mon 22 Jun 2026 20:24:02 +0000
ROA not before: Mon 22 Jun 2026 20:24:02 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 141322
IP address blocks: 103.151.184.0/24 maxlen: 24
103.151.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Validity
Not Before: Jun 22 20:24:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3999e2-ee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:1b:5e:44:99:33:e0:70:c5:c0:48:86:8f:
40:b0:25:c6:9d:8a:d2:7f:00:de:53:c0:31:62:fc:
ff:a0:93:09:d1:fc:58:c1:c0:f5:d5:96:72:4a:6e:
f4:71:da:25:99:52:cf:5f:d2:99:95:c1:50:d1:c9:
c9:d8:30:f3:0f:81:08:87:45:4c:43:00:44:c7:a2:
7f:f3:37:ac:76:33:f8:c1:a3:52:dd:5a:e1:79:73:
a5:d9:0a:aa:20:ba:13:23:5c:fa:27:5e:80:63:95:
53:d9:74:24:81:48:fa:4f:a9:f4:24:f1:d3:7d:58:
fa:4f:6d:48:59:58:2c:22:df:35:36:6f:bf:f1:79:
89:cb:5e:2e:0e:4f:ac:2b:62:da:78:e3:db:1e:eb:
0d:f7:aa:2f:07:46:9f:b4:8d:ec:f9:e5:fc:58:c3:
a2:be:30:b0:f9:f9:30:2e:03:60:e5:de:08:58:c9:
3b:44:b6:d4:09:cc:e1:98:3f:1e:42:a3:2f:ab:1b:
84:47:86:c0:42:7f:20:8c:36:0b:d9:5d:e8:6e:13:
51:ea:d1:18:08:ee:f9:88:91:8f:2f:fe:04:58:e3:
92:51:48:19:a2:9e:3a:e3:e6:84:c0:08:81:7f:8d:
e1:de:85:74:90:55:71:df:8a:0d:5b:93:57:a3:11:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:12:2E:A8:FA:FB:0E:F2:85:C8:DF:1E:B7:24:43:4D:DD:95:5D
X509v3 Authority Key Identifier:
keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.184.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:c2:7a:aa:e6:d3:c4:7e:d5:9e:07:9d:5d:ea:b3:c3:12:ee:
43:a4:57:5d:5b:06:a5:94:74:91:ca:f6:0f:ca:81:96:66:04:
13:64:7f:36:bc:9c:3a:3c:c0:65:95:ac:76:1d:9b:7f:b9:5f:
1c:35:a4:3c:f9:98:2f:80:9d:ff:58:f3:44:9d:d9:c2:eb:03:
64:ea:0e:d9:d2:44:89:23:10:54:be:e2:5a:fc:2e:1a:94:5f:
55:68:50:eb:d1:f3:ef:ef:05:8a:9c:10:fb:7a:ee:81:d1:d7:
42:ad:a1:67:5a:63:49:b1:f8:e2:65:7a:7b:58:4f:67:b5:24:
cc:84:d2:0b:a0:80:ac:aa:bb:cf:7e:9e:bd:50:4e:10:56:c8:
df:48:c1:93:86:e2:1e:87:5b:0d:22:05:e7:06:d0:56:40:1c:
80:14:c8:79:3e:37:58:8e:cc:d0:39:91:48:b6:1b:f5:28:83:
47:6a:ab:6e:2b:33:0c:e7:72:e9:ff:e9:29:81:6b:2f:91:96:
ba:e4:22:6f:53:66:ae:ba:5e:46:b7:3b:cc:f5:16:26:ba:50:
24:cf:fd:03:4d:a7:0b:c0:f5:cc:dd:73:dd:0c:16:8c:0f:08:
71:0c:4a:c1:da:38:68:7b:95:ff:7b:b5:45:d3:42:a1:41:8d:
fd:c7:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:18:45 2026 by rpki-client