
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa
File: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (raw, json)
Hash identifier: PRALUoBFqhC2JvgAv3jlaF5QZjAnuYEo4AE90TsAThE=
Subject key identifier: 59:13:84:20:AC:4C:0E:21:39:CE:D1:32:12:17:A0:A6:4C:4D:0C:BB
Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial: 0600
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa
Signing time: Fri 04 Sep 2026 23:44:31 +0000
ROA not before: Fri 04 Sep 2026 23:44:31 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 139484
IP address blocks: 103.172.104.0/23 maxlen: 23
103.172.104.0/24 maxlen: 24
103.172.105.0/24 maxlen: 24
2001:df7:6d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Validity
Not Before: Sep 4 23:44:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9b57de-8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:76:5e:64:58:61:b6:f1:38:00:10:45:02:
6e:66:94:5c:38:45:45:66:30:4e:ac:2c:45:2b:0e:
b3:e8:31:80:d7:12:73:cb:21:1f:25:23:a4:94:34:
0e:38:29:46:17:a0:e0:34:e0:78:ff:60:3e:70:8f:
af:1e:fe:8b:bc:82:a8:9b:5b:b1:af:25:b0:d1:03:
96:4d:2b:83:9d:b1:ac:60:81:32:8d:22:af:f2:c8:
66:56:66:6e:02:ce:a4:1a:76:96:2b:f1:07:16:c6:
86:53:77:0d:cb:6a:59:35:b8:56:e2:d6:d7:42:ea:
fc:12:11:b5:fc:c2:e0:9d:7d:0c:1e:ac:7c:21:fe:
16:6a:ee:9c:a7:eb:34:ab:89:65:c5:ca:2e:f6:cb:
b9:69:a9:c6:ba:ee:16:07:44:2e:a7:e4:50:44:5d:
a3:6c:0f:d8:29:80:74:15:24:68:7a:15:25:94:e4:
32:39:f6:4e:ac:c6:56:bf:d3:9a:0c:a4:b0:e9:bf:
14:8b:2b:9b:79:1b:76:43:54:7f:23:30:a6:0c:fb:
a9:e7:4a:04:75:eb:4e:a6:75:cd:0c:a6:13:fe:4d:
42:97:21:1c:83:31:e2:1b:aa:4f:94:db:75:24:fe:
e0:88:6f:49:2a:b0:1e:68:b6:b3:d1:93:78:4b:21:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:84:20:AC:4C:0E:21:39:CE:D1:32:12:17:A0:A6:4C:4D:0C:BB
X509v3 Authority Key Identifier:
keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.104.0/23
IPv6:
2001:df7:6d80::/48
Signature Algorithm: sha256WithRSAEncryption
76:57:12:8c:e1:9c:79:e7:cb:bb:05:f3:ae:e5:77:d9:b0:2e:
07:20:f0:a9:c6:40:eb:a5:5c:84:cb:d8:a6:13:7b:7c:16:0a:
85:28:db:03:d7:c4:7d:42:8e:a1:9b:40:31:f0:b6:1e:0f:88:
3e:e6:1e:2f:7e:67:72:74:c0:6d:e4:dd:f8:47:05:55:dc:e2:
af:78:ee:6c:35:3d:12:81:6e:da:36:ba:00:9d:a4:82:e4:15:
a0:cc:bc:1c:d5:bf:98:ff:fa:7d:d5:44:00:cf:db:6c:8f:90:
fd:78:00:1f:92:7c:2e:de:1e:52:66:70:6e:4c:3e:9f:73:f9:
3f:44:7a:54:de:b1:4b:e5:62:00:51:fd:af:8a:00:9a:e9:31:
3f:26:79:60:37:4a:bf:83:ef:6b:6f:f9:31:e5:05:bf:20:da:
81:82:1f:59:ec:b7:61:dd:1d:15:0f:2e:20:cf:d8:7b:ae:fe:
d9:16:05:88:49:b5:2c:65:94:cb:ba:fa:67:97:e3:09:c7:6c:
5f:8b:3e:2a:fb:4f:19:ff:5a:c2:c4:6d:51:dc:17:5e:46:5f:
8b:c7:31:59:19:e2:69:ba:6a:73:a0:16:08:10:7b:2c:0a:6e:
eb:81:48:9e:23:6e:84:04:5f:88:63:d6:61:23:05:41:a2:e8:
d5:28:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:20 2026 by rpki-client