
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa
File: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (raw, json)
Hash identifier: qkdMLW4ml5LNjU2lCiySD8NT3992IeZdEG85+xrnRsc=
Subject key identifier: 37:E9:87:14:BC:87:A5:97:D8:A0:4E:FA:B0:44:04:07:B3:3E:42:D9
Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E
Certificate serial: 19ED
Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa
Signing time: Mon 12 Oct 2026 16:29:53 +0000
ROA not before: Mon 12 Oct 2026 16:29:53 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 136956
IP address blocks: 103.210.132.0/22 maxlen: 24
2401:b840::/32 maxlen: 32
2404:6e80::/32 maxlen: 32
2404:6e80:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl
rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6637 (0x19ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E
Validity
Not Before: Oct 12 16:29:53 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6acd0b01-2d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:09:9d:fe:4c:63:6c:44:31:6a:50:1b:3a:
e1:51:c7:23:08:06:b0:23:77:34:1a:3c:2e:c8:ff:
ee:ce:80:51:14:36:d5:80:a2:67:cf:75:32:05:25:
80:0a:fb:8f:65:18:b0:0d:32:cb:12:61:81:88:e4:
4e:59:22:1f:9f:e8:96:2e:d4:51:02:a8:9f:58:b6:
91:c1:d7:75:75:4f:5a:8a:48:55:17:9a:46:77:73:
73:a8:79:aa:85:10:db:10:e9:bd:2b:1d:37:52:a1:
85:92:40:03:d1:bd:32:3c:67:97:b8:7c:c1:35:94:
52:8f:1a:db:ce:2d:fc:a6:be:dd:2d:7f:34:8c:91:
df:74:6b:11:45:36:ae:f0:4d:b0:d7:28:bb:de:de:
35:aa:f7:73:a8:37:7f:9b:74:67:cd:b4:16:ad:3c:
9e:83:dc:be:e8:67:ec:02:09:65:95:a8:a9:fa:25:
00:41:09:2e:59:86:ff:94:4c:88:d7:05:9e:37:37:
ef:e0:f2:67:1d:48:8d:18:5a:7c:2c:6e:63:5f:83:
f5:58:a8:18:67:9d:03:16:93:43:30:c8:40:66:1f:
8c:21:57:1c:84:ec:3f:b7:0d:7b:27:b9:26:ab:a9:
ef:51:d2:b5:ac:1f:c6:d7:f3:f6:90:1d:e0:0b:2e:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:87:14:BC:87:A5:97:D8:A0:4E:FA:B0:44:04:07:B3:3E:42:D9
X509v3 Authority Key Identifier:
keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.210.132.0/22
IPv6:
2401:b840::/32
2404:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
6b:f4:07:aa:8f:29:76:8c:40:22:9c:87:30:2b:4b:d4:ae:6b:
0b:81:8a:17:ab:d7:a7:e1:b0:f5:64:c2:25:d1:74:78:b0:a4:
98:72:0e:ff:1a:c5:54:dc:45:1c:c1:57:b1:39:81:a5:4f:e9:
5d:b9:3d:33:c5:c1:ec:bb:3c:d2:7c:c3:72:00:d5:07:8f:88:
ea:f0:dd:35:5a:76:fd:a9:5e:71:71:68:d4:4b:26:3b:61:e8:
2e:88:6b:cb:2c:e9:d6:a0:77:62:3a:0f:6a:97:11:6f:3c:a2:
26:03:1e:10:cb:39:87:d7:43:38:51:ef:1f:20:a1:0a:da:b8:
8f:20:ec:8c:5b:78:69:f3:13:7f:f0:c6:3c:fb:74:fe:95:b1:
6d:13:02:71:d7:7b:ad:48:11:39:c1:17:83:10:49:9a:61:1d:
c8:38:77:4d:eb:d5:ca:3a:24:eb:37:27:ab:23:6e:05:6c:f0:
fa:c1:1a:39:07:4b:5e:b5:4f:3f:75:7f:37:ea:1c:53:a9:ea:
7c:18:d4:5d:d9:f6:8c:ab:0f:6c:5f:26:4b:a5:57:19:6f:d6:
70:16:1b:39:43:a0:9e:5f:39:e2:9f:bd:22:50:c3:8b:66:0b:
0b:fe:d3:48:cf:d5:eb:ba:87:db:53:ed:2a:2c:04:f5:c6:f8:
75:aa:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:19:49 2026 by rpki-client