
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/CBD093368EF411F1A6E45BB36711F970.roa
File: CBD093368EF411F1A6E45BB36711F970.roa (raw, json)
Hash identifier: sqOqFv0aPUesZbyHwfc/PnHTfU6CJgiPXHEbIZ9OAMY=
Subject key identifier: 63:8D:5C:48:8D:3E:43:ED:C1:4B:41:2B:5D:77:76:67:84:0B:4F:9C
Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial: 073D
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/CBD093368EF411F1A6E45BB36711F970.roa
Signing time: Mon 03 Aug 2026 04:35:47 +0000
ROA not before: Mon 03 Aug 2026 04:35:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.106.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 21:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Validity
Not Before: Aug 3 04:35:47 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a701aa3-20aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:9b:45:bd:15:47:30:38:0f:ca:b6:38:b0:
2c:56:06:c2:88:df:0a:46:3f:19:d0:2c:38:08:d4:
b9:d2:74:28:61:8b:16:83:2f:41:4d:0d:2c:24:76:
f9:93:62:32:86:90:a0:04:38:a5:41:7e:f7:1a:b6:
dc:c0:2b:8d:bc:bc:1a:e7:af:99:78:a5:17:eb:36:
5c:43:41:fd:b0:d9:63:e3:35:d7:0d:11:fe:42:da:
11:08:70:dd:64:aa:cf:3d:bb:aa:a4:37:09:da:64:
ec:52:17:f3:a5:f3:93:90:5f:ee:ef:0d:a6:ee:58:
67:2f:76:9e:b3:4e:cd:c4:64:83:cc:5a:c4:2d:73:
18:08:a9:45:35:3e:ec:32:04:5c:95:76:74:4b:d5:
fc:b6:e1:19:38:4d:2d:c1:42:c2:0c:0e:dd:31:23:
73:d2:24:8b:29:04:c1:16:de:9e:81:71:75:48:05:
03:ab:f6:84:83:1e:d1:99:99:72:00:fc:f8:14:5f:
bd:c9:db:a1:e1:3d:26:89:81:35:c3:14:32:f6:79:
46:bb:c3:33:12:4b:66:7b:2f:5b:e0:16:04:83:3e:
e2:ee:e3:17:b5:24:9c:e6:27:d5:00:89:b7:ba:95:
de:cf:98:df:5d:6e:19:de:92:55:04:1f:c2:b9:06:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8D:5C:48:8D:3E:43:ED:C1:4B:41:2B:5D:77:76:67:84:0B:4F:9C
X509v3 Authority Key Identifier:
keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/CBD093368EF411F1A6E45BB36711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.202.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f9:fd:aa:ed:fa:c1:b8:fe:a3:71:d4:59:52:06:1a:ac:af:
cb:ef:d0:ce:d9:69:a2:6a:fa:90:2f:d1:3a:d1:25:bb:5c:65:
ae:5d:97:28:72:86:59:71:e9:ad:e0:3e:96:a4:77:37:4a:b1:
8c:18:b2:09:36:95:0d:f9:d4:1b:63:8d:47:e6:f3:dc:f7:bd:
c8:a2:02:5c:dd:ad:2b:46:04:b3:fb:37:4a:ee:9a:90:3e:96:
fd:46:47:09:f6:e3:09:83:5d:0a:70:83:c1:fc:2e:ee:86:42:
80:26:82:45:27:2d:52:3f:df:b8:6e:9d:ed:cb:7c:b7:16:91:
b2:29:55:36:c4:ec:8f:93:73:f7:c9:19:53:b9:d8:5f:59:97:
b2:95:57:6b:99:75:5a:ba:5b:ee:46:5a:86:3d:ca:e7:b8:26:
5f:c6:34:d8:b6:bb:17:a9:1d:75:9e:b5:b9:ba:2a:42:15:85:
45:cd:8a:3c:49:44:ad:2b:f0:60:6e:7e:25:24:b0:a5:f3:22:
6d:97:e0:d3:27:e4:13:a5:46:86:58:8c:ef:f0:45:12:d0:91:
38:9c:27:0d:12:46:0f:f8:62:34:60:27:de:fe:b6:a4:7a:ea:
2b:39:1f:2d:f4:21:21:60:ed:3d:13:4d:ed:4b:4b:e9:99:7c:
e4:c0:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:50 2026 by rpki-client