
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/6E038820BF6211EA94C2957CC4F9AE02.roa
File: 6E038820BF6211EA94C2957CC4F9AE02.roa (raw, json)
Hash identifier: bR/cjGdfq0JwjhxDM7vEMQcNpWmxlExdz3OXXAbaui0=
Subject key identifier: B5:8A:61:55:FD:97:A3:31:AB:68:3C:12:C3:49:1C:F7:E4:3B:DC:9B
Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial: 097D
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/6E038820BF6211EA94C2957CC4F9AE02.roa
Signing time: Sat 08 Aug 2026 20:40:25 +0000
ROA not before: Sat 08 Aug 2026 20:40:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 18351
IP address blocks: 103.69.64.0/22 maxlen: 24
203.201.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2429 (0x97d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Validity
Not Before: Aug 8 20:40:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a779439-bff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:4c:fb:91:44:68:4f:80:66:95:c9:5d:f2:
cc:d7:8a:3e:d9:15:0d:6d:8a:b0:00:77:0a:3a:49:
92:46:5f:1d:cf:77:8f:82:ab:bc:8d:8b:ad:a5:a5:
56:85:f6:80:b9:0f:48:3c:60:63:c8:3b:2e:e4:bb:
2e:bf:62:3e:65:2e:f1:62:12:50:4a:e4:99:3d:a9:
3f:bf:82:e7:13:37:c9:64:5d:93:f9:02:75:13:55:
c0:de:97:de:1b:b9:44:87:91:7b:8e:27:1e:d0:4d:
a5:2f:a9:e4:b3:6d:a0:90:d3:0b:1d:dd:23:15:3b:
dc:fd:67:b9:9b:a3:d9:43:eb:d6:0c:c1:ae:2e:05:
27:d5:50:9c:fc:87:df:5e:cd:8f:e9:37:a9:53:16:
1e:b0:82:29:74:1c:20:7e:b1:0f:b9:a9:97:45:cc:
f0:9b:7b:a4:e6:86:3d:f6:27:09:59:53:01:87:80:
97:0a:69:d0:78:80:7f:ad:08:57:53:1a:c1:b9:5c:
a4:17:e2:ea:8e:bf:3d:c8:1b:7b:c6:86:f1:c6:20:
8b:b2:12:cd:f0:54:cc:bf:17:0d:33:a1:ec:b0:a0:
ec:bd:4e:48:96:25:de:6b:e4:6a:db:6a:cd:84:77:
79:d8:e3:5d:e3:0f:0e:a0:c2:4d:55:7f:d7:53:7b:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8A:61:55:FD:97:A3:31:AB:68:3C:12:C3:49:1C:F7:E4:3B:DC:9B
X509v3 Authority Key Identifier:
keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/6E038820BF6211EA94C2957CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.64.0/22
203.201.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:40:0e:8f:74:f7:c2:b1:6b:0f:4b:34:1a:bb:9b:a0:c4:94:
6e:72:ca:7f:d7:ed:e9:4b:29:f6:f9:dd:a9:a9:e9:bf:9e:65:
a7:cf:09:f0:e5:1d:01:44:a5:b8:f1:c0:a7:60:a4:49:49:17:
6b:0b:e1:6e:fe:fb:0b:70:5f:57:9c:f9:f8:fe:90:73:6c:72:
4a:83:2c:3f:50:82:83:55:03:fe:5d:8a:10:65:7f:d1:bb:b1:
b3:34:e4:76:cc:e5:30:c9:3a:0a:ee:37:d1:87:8e:b8:c3:9c:
ba:30:e8:e2:4c:dd:d2:c1:63:ea:e0:04:12:4d:c4:95:ce:f1:
cc:61:6f:d9:d9:70:26:bd:de:56:c1:91:35:37:d5:92:1c:97:
09:da:d1:ea:f3:48:e1:30:a2:d8:26:c4:25:da:b0:66:ef:24:
a0:15:25:41:07:05:e1:0f:d4:f0:f5:55:74:d7:36:ac:48:d7:
a1:ac:65:fd:e6:60:37:79:38:63:b3:48:7b:c4:c8:d2:6d:ec:
c2:40:07:8e:65:b8:e2:38:29:2e:37:1b:fd:df:ae:3b:a9:21:
cf:be:91:5f:3a:b3:77:17:6a:70:a0:c0:49:de:09:2c:a1:9f:
04:7b:eb:d4:b3:76:23:fd:14:18:e8:5d:74:73:64:ab:e7:87:
41:0f:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 07:38:08 2026 by rpki-client