
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/ECD21166AB8411F1A790DC444511F970.roa
File: ECD21166AB8411F1A790DC444511F970.roa (raw, json)
Hash identifier: ExjgxAT7/41xhDKMAdd+90Z1vz5zXbsrx5cyjWeI5wk=
Subject key identifier: D2:25:00:E6:88:56:40:D6:37:F4:4A:58:D9:3F:6F:23:68:2B:BA:D4
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 06EB
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/ECD21166AB8411F1A790DC444511F970.roa
Signing time: Tue 08 Sep 2026 12:58:02 +0000
ROA not before: Tue 08 Sep 2026 12:58:02 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38254
IP address blocks: 103.167.250.0/23 maxlen: 24
2001:df6:c480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 22:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Validity
Not Before: Sep 8 12:58:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa0065a-a4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:88:5b:c9:1b:35:09:3e:67:c1:2b:29:00:
78:f4:5b:21:50:73:6a:23:22:16:0a:af:e9:73:56:
0a:2c:dd:1b:8a:4f:35:f8:46:33:e4:80:35:2d:9a:
fb:1d:2f:cc:03:c7:60:18:33:53:62:7f:42:c1:d0:
2b:5e:6e:77:6b:2d:7c:6c:0a:ca:84:77:89:83:1a:
ad:b3:75:d7:6d:2f:41:08:32:ed:12:11:a9:f7:59:
be:be:6a:eb:a0:21:16:72:2f:4f:9f:39:e7:0f:9e:
aa:de:b2:c7:b5:5b:bc:13:a0:ea:df:32:84:21:70:
cc:38:8e:ec:e3:9e:6a:b7:0a:4e:8b:5c:12:9b:77:
2f:ce:6a:49:4f:37:3b:0c:6f:d8:b2:95:4d:37:03:
3e:3a:d1:5d:7c:e5:63:72:68:48:f4:76:e6:16:24:
f9:e3:13:2d:92:52:67:1f:22:92:dc:68:88:08:e2:
06:ed:b2:2a:e4:41:d8:97:75:8b:20:91:1d:24:90:
8c:0b:d3:41:07:3f:c9:6c:67:a2:09:85:1d:2c:25:
a1:f4:48:b0:49:dc:5f:c7:50:55:61:fd:51:19:d3:
28:01:64:52:b5:c0:f4:cc:d2:93:8d:5b:43:00:b1:
b1:f5:c5:55:cd:03:3d:15:00:ff:9b:fb:67:1c:29:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:00:E6:88:56:40:D6:37:F4:4A:58:D9:3F:6F:23:68:2B:BA:D4
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/ECD21166AB8411F1A790DC444511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.250.0/23
IPv6:
2001:df6:c480::/48
Signature Algorithm: sha256WithRSAEncryption
db:79:3e:f7:3b:b6:f0:68:69:32:57:fb:f7:4c:c1:e4:27:7f:
fb:1f:1a:0e:d0:c1:54:96:43:95:98:cd:c8:1f:81:d3:ef:05:
97:d9:e0:96:76:e4:c2:7b:38:c8:76:f4:07:53:4d:9b:26:2b:
3d:9b:ec:6e:b9:4f:fc:a9:08:8f:d2:54:11:84:d8:bc:a4:d4:
91:00:f2:57:49:8d:d5:40:2a:15:ef:d9:0b:f1:80:d6:a5:4e:
87:f8:58:67:d0:90:01:bd:15:13:3a:1e:af:1b:ba:36:16:6f:
21:3b:61:31:60:72:d8:14:b0:ee:ee:1c:67:c1:74:73:b9:ad:
02:f6:1e:09:12:75:13:47:5f:2d:98:43:4b:56:34:b4:af:92:
bf:1b:b2:52:31:dd:83:b8:17:cc:ff:aa:c8:b8:cc:31:f8:2c:
0c:2f:a4:d2:7d:a5:17:06:32:46:53:a1:85:41:20:5f:3e:89:
83:f7:eb:1c:ee:93:9b:e8:2d:5c:42:f1:99:ae:9a:db:b2:5a:
b5:41:18:74:41:49:c7:41:38:e6:8e:a2:f2:e8:85:27:0f:b4:
75:3a:42:e1:18:28:57:0c:8e:46:b3:fc:93:23:a9:d0:27:fe:
ff:d0:51:c6:bb:3b:94:4a:96:e8:e6:24:81:72:04:93:09:42:
6f:f5:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:07 2026 by rpki-client