
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/A1B8513612FE11ED8A1DA356C4F9AE02.roa
File: A1B8513612FE11ED8A1DA356C4F9AE02.roa (raw, json)
Hash identifier: BM+ozPBqi+7jkDfiv4Ek3CSSWjwIGqheBBZo7D8CtKg=
Subject key identifier: 5B:BB:6F:7F:FF:36:92:15:A6:48:DF:1F:7E:40:F5:66:B3:26:70:67
Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial: 0359
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/A1B8513612FE11ED8A1DA356C4F9AE02.roa
Signing time: Wed 05 Aug 2026 01:50:59 +0000
ROA not before: Wed 05 Aug 2026 01:50:59 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150150
IP address blocks: 103.8.215.0/24 maxlen: 24
2402:3960::/32 maxlen: 32
2402:3960:1000::/48 maxlen: 48
2402:3960:2000::/48 maxlen: 48
2402:3960:3000::/48 maxlen: 48
2402:3960:4000::/48 maxlen: 48
2402:3960:5000::/48 maxlen: 48
2402:3960:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 00:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857 (0x359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Validity
Not Before: Aug 5 01:50:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a729703-707b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:a0:11:17:f5:f6:df:8b:bd:73:10:5d:71:
ef:80:b4:87:b3:63:7e:1a:d6:22:30:af:08:7d:90:
c0:84:40:e6:40:f0:f7:6b:25:40:0e:41:2b:d7:bf:
e7:43:52:46:a2:81:17:e9:ac:5f:d8:76:7a:09:39:
48:70:20:13:0e:3d:cf:ff:1e:ba:cd:1e:f2:66:41:
f6:b4:f8:c8:0b:8e:51:95:e1:9b:ef:24:f7:bb:dd:
5f:8a:6a:11:8c:49:bc:cc:16:ab:2d:b9:fd:74:3a:
c7:7d:f8:f4:43:dc:d4:03:6d:60:5e:2b:26:ba:16:
71:13:e5:61:23:fe:67:09:07:3e:70:cb:c2:87:30:
28:8b:4e:ff:3e:96:4f:28:b0:b7:64:95:a2:25:ae:
d6:0b:5b:2f:b7:fa:d7:62:5e:63:3c:06:45:b3:3c:
6d:58:df:78:d6:40:3f:d7:a6:c2:aa:fe:4a:f1:bb:
ff:2a:7e:3c:26:c7:c1:6b:e4:9a:27:ba:ef:af:81:
b8:0e:a6:dc:b5:60:89:c6:af:ea:34:20:36:9b:86:
e7:e6:5b:e5:5d:9e:20:c1:33:7b:ef:15:b1:0c:89:
b6:f8:07:5d:39:ec:0a:2e:70:01:5c:27:f1:ed:be:
78:dd:50:a3:f6:98:94:81:2b:ee:d1:df:82:51:9e:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:6F:7F:FF:36:92:15:A6:48:DF:1F:7E:40:F5:66:B3:26:70:67
X509v3 Authority Key Identifier:
keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/A1B8513612FE11ED8A1DA356C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.8.215.0/24
IPv6:
2402:3960::/32
Signature Algorithm: sha256WithRSAEncryption
a5:fd:8e:b1:63:f2:fd:6b:e2:49:8f:ec:e2:c4:5d:7d:db:13:
52:c0:3f:e2:48:77:62:85:53:86:92:a6:63:2e:5a:24:1d:61:
2c:8e:3a:9f:31:de:91:63:12:cc:f9:73:3f:f4:7f:3e:c8:e2:
9b:70:5d:76:9f:74:fd:83:fb:4f:cb:ff:18:1f:3e:b5:96:81:
28:b5:ea:a5:83:8d:c3:4b:3d:2f:63:fd:f4:f5:d9:28:51:21:
25:ac:52:06:39:c2:0d:27:2d:fe:a7:df:61:c1:81:d1:bd:c4:
7b:bc:ed:73:a2:bf:0f:98:70:1b:35:9f:c0:a5:58:a3:f4:c4:
a1:5f:d0:d9:71:b2:22:69:a3:ed:3d:92:46:d3:a2:66:11:f2:
e6:ed:fd:d9:6a:d9:1e:f6:66:94:b6:cd:af:ab:3c:e4:b5:84:
bf:c3:f3:cd:68:2c:c2:19:43:cb:6d:d0:27:e6:f6:80:2e:9a:
1a:af:30:6e:1b:ef:07:fb:e7:fe:1c:34:24:ee:85:74:e4:2e:
b7:18:ba:53:be:f5:8a:49:f6:64:1f:89:d0:0b:24:28:0d:13:
5f:81:8a:55:25:e7:48:93:16:fb:bd:91:0f:f9:e8:88:43:65:
a6:d5:af:15:16:53:58:1f:e4:c5:76:04:41:96:6a:16:bc:35:
62:52:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:21:21 2026 by rpki-client