
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa
File: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (raw, json)
Hash identifier: OsD6QVw68BIdG1MVoaL/Udii2PuQJPsFN4FwB3juEyY=
Subject key identifier: 66:30:34:F0:6E:0C:2C:46:EF:0D:EB:93:AF:BC:C3:DE:11:DE:73:EE
Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Certificate serial: 09C8
Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa
Signing time: Tue 06 Oct 2026 20:39:19 +0000
ROA not before: Tue 06 Oct 2026 20:39:19 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 136936
IP address blocks: 103.99.103.0/24 maxlen: 24
2001:df2:5d00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2504 (0x9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Validity
Not Before: Oct 6 20:39:19 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac55c77-4f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:fd:18:32:06:fc:3f:dc:28:bd:7d:f3:6c:
49:0e:bd:8e:b3:01:8f:35:91:ce:cc:7e:85:e9:e9:
d5:cc:12:46:81:8c:39:b4:f6:e7:99:67:51:ca:c3:
e2:e4:86:8e:c0:c0:2b:40:79:ce:da:a8:14:b8:69:
44:02:56:b9:28:22:14:ce:89:b0:f0:d1:16:85:45:
15:66:27:90:45:f7:15:c5:d4:90:2b:e7:8a:f8:4d:
2b:6e:62:4d:6b:bc:80:43:d7:38:35:16:0c:f4:ad:
10:65:39:f3:fc:2f:70:e2:40:b2:5d:58:1a:7e:8c:
74:21:40:7d:09:c7:52:58:9b:ce:f3:7e:5d:37:9e:
76:96:80:da:4f:90:60:a0:2d:05:60:02:df:6b:20:
95:a3:e8:56:43:57:d5:a5:3e:0c:91:3e:67:c6:e8:
65:bc:c1:0e:1c:c2:65:15:56:e5:2d:bd:33:18:99:
71:3a:45:bf:8e:37:4b:40:8e:81:75:5e:1b:2a:0a:
37:a0:92:73:8a:17:19:79:48:09:fd:a2:36:4a:3a:
6e:ad:8b:bd:6a:68:6e:ab:0f:5c:7d:cb:7f:d0:cd:
3d:e8:b0:4b:55:fe:a1:c3:93:44:d7:54:10:04:09:
58:83:1b:55:d0:83:a1:89:81:65:48:a1:f0:4e:93:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:34:F0:6E:0C:2C:46:EF:0D:EB:93:AF:BC:C3:DE:11:DE:73:EE
X509v3 Authority Key Identifier:
keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.103.0/24
IPv6:
2001:df2:5d00::/48
Signature Algorithm: sha256WithRSAEncryption
29:32:cf:56:7a:53:dd:76:9b:98:f8:1f:92:4a:b4:51:42:e7:
2b:90:20:46:a6:95:58:c5:67:da:4a:0f:1f:ca:27:14:6f:7a:
7c:df:b3:29:0b:32:c6:af:31:0c:55:19:8e:fe:93:87:31:80:
23:d9:a1:d6:d5:29:1d:20:70:81:e8:7d:3d:f3:bb:79:6a:61:
2f:47:fe:31:95:ac:65:7f:0f:65:12:fd:f9:9e:3b:b0:a8:0c:
db:d7:97:c2:12:8f:ed:b3:2c:46:a2:cc:86:e0:39:08:0c:5c:
12:56:f3:c6:2b:80:09:d7:68:ef:2a:4a:15:24:81:6e:b4:e7:
d6:d7:6d:63:c3:6a:de:34:ba:02:b9:b6:b2:f9:92:8c:26:08:
b9:ea:47:1d:d2:a5:fd:73:14:8e:a3:e6:58:a4:8a:17:44:62:
c3:87:c0:b7:ad:e5:19:1b:2c:0d:78:64:1f:2f:94:4f:05:79:
33:15:dc:73:9e:71:8e:e6:8f:32:a8:40:06:97:80:8d:f0:c8:
0e:99:f9:be:8c:07:da:2a:8c:6a:85:18:b7:12:8e:62:ed:bb:
f9:95:21:f2:b7:4c:a0:94:66:4c:4b:88:82:28:0b:3a:92:d3:
26:ee:5b:fd:cf:2a:eb:d2:43:8c:e9:d8:9d:bf:df:ec:c8:94:
6a:ce:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:59:31 2026 by rpki-client