
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa
File: B67BE8ECC13C11EE80101E73C4F9AE02.roa (raw, json)
Hash identifier: mEA6pK1+kPCEgBGE8QLt8NRqO5P+TggoXjWxm6twcFs=
Subject key identifier: 37:CA:EC:B7:C9:F4:73:83:26:61:40:2F:83:5D:BD:30:94:04:46:9B
Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial: 0AD2
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa
Signing time: Sat 26 Sep 2026 19:40:15 +0000
ROA not before: Sat 26 Sep 2026 19:40:15 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 141342
IP address blocks: 103.72.0.0/24 maxlen: 24
103.72.1.0/24 maxlen: 24
103.72.2.0/24 maxlen: 24
103.72.3.0/24 maxlen: 24
103.194.92.0/24 maxlen: 24
103.194.93.0/24 maxlen: 24
103.194.94.0/24 maxlen: 24
103.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 19:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Validity
Not Before: Sep 26 19:40:15 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab81f9f-c635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:4e:d3:48:de:c6:93:f6:c0:26:ef:06:03:
1c:c7:06:ed:f0:3f:4a:a2:e2:c7:ab:dc:da:ad:78:
56:cb:8b:e8:94:5f:37:c4:28:e2:8c:06:7d:5d:6c:
99:e2:d7:b9:3c:19:7a:a8:b5:43:31:58:b9:8e:f3:
ef:41:b2:49:ce:28:41:61:48:ff:2a:67:99:5e:c2:
72:45:25:15:bb:c0:ce:9f:4c:03:0a:1c:70:70:31:
6d:de:6a:cf:cf:7c:5d:27:c9:81:e1:4b:72:c5:c3:
70:04:12:32:f6:47:a3:9e:25:3a:84:42:ad:c4:98:
77:5e:fb:e7:d2:09:ac:71:9c:4d:d4:cd:a3:1a:69:
f2:05:dd:ef:f6:2e:5c:f8:8a:c4:5f:88:34:23:44:
d2:b1:90:77:98:1c:17:0c:ec:1c:6f:fc:f6:cb:80:
c7:80:6e:22:4e:91:f2:b4:ab:7c:f3:64:ab:82:6a:
79:c8:71:38:d3:9a:78:48:a8:97:d5:2c:99:dc:22:
bc:8c:db:c8:61:f0:b3:bb:52:58:02:3c:b8:85:88:
8e:53:35:bb:0c:19:df:c6:da:5c:fc:8e:58:b8:cf:
4c:d0:40:39:4d:25:2f:5e:e3:16:51:21:4e:d3:da:
c5:30:25:2a:ea:2d:86:92:27:49:c4:30:c6:00:6a:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CA:EC:B7:C9:F4:73:83:26:61:40:2F:83:5D:BD:30:94:04:46:9B
X509v3 Authority Key Identifier:
keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.0.0/22
103.194.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:0f:e3:46:0d:ea:3e:cf:ab:e3:19:69:83:1c:5b:f7:51:9f:
01:74:9b:bb:a7:af:85:ce:c7:e8:36:c1:bc:be:dc:2d:b8:33:
65:b6:af:20:2a:3e:4f:98:40:ee:e9:4c:42:a5:1c:68:13:28:
45:60:97:dc:40:04:db:5e:a1:68:e3:5c:30:31:1a:e6:e1:c0:
3a:a0:37:55:5b:31:9e:9e:ad:80:4e:0a:c2:27:cc:bf:83:61:
4d:87:ed:e2:03:bb:6b:28:10:f1:e3:21:7b:56:c0:3a:3f:d6:
a9:4c:68:60:cf:4a:6e:15:4e:04:c1:3a:2b:49:1a:16:fc:cd:
af:14:72:d9:be:77:6c:e6:fe:b1:8d:66:fb:a9:aa:fc:e0:10:
17:a9:8c:ac:b5:94:d1:f6:ef:6c:0d:71:de:93:4f:62:13:7c:
3b:d1:4e:87:e5:75:33:44:97:a0:0d:ea:4f:50:49:e5:e3:06:
8b:18:8f:ac:d0:00:3d:c4:3d:83:ac:5f:36:f3:71:b7:72:57:
f3:00:65:eb:9c:c3:8f:22:52:f9:0a:6b:a4:22:c5:03:b1:dc:
60:0e:1f:20:b0:64:0f:13:ed:14:70:cb:cd:31:f6:f9:97:67:
76:5a:dd:e5:61:5d:a8:26:47:4b:72:c7:24:f4:01:2f:bd:47:
8f:c3:fa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:50:55 2026 by rpki-client