
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/20494A1A789E11F19E950C8485A30FBC.roa
File: 20494A1A789E11F19E950C8485A30FBC.roa (raw, json)
Hash identifier: 8QkOo6DSuZrLANDcvUtTMwgZQm2ePeN8RKBM2E7THgU=
Subject key identifier: 74:75:61:DC:15:1F:B3:18:87:93:95:6A:12:7B:11:88:D4:FE:39:B9
Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial: 0760
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/20494A1A789E11F19E950C8485A30FBC.roa
Signing time: Sun 05 Jul 2026 18:19:57 +0000
ROA not before: Sun 05 Jul 2026 18:19:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.99.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 22:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Validity
Not Before: Jul 5 18:19:57 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a4aa04d-6229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:66:6b:3d:b2:fa:33:51:a7:8a:84:82:8d:
5b:74:22:38:15:6f:29:f4:3e:98:4a:0c:1c:a3:a4:
93:71:f9:9d:34:3b:17:72:e6:40:22:f7:8b:e1:38:
b7:cf:c8:2a:50:ae:49:36:6d:8d:34:07:8f:5f:60:
d1:8a:a8:5c:89:ca:16:e0:3b:4e:d3:74:0d:fc:9c:
36:f5:58:b4:f4:85:b9:df:e6:ac:ea:fe:e4:23:6a:
29:65:a3:74:1f:d2:a2:41:6d:f3:14:f1:74:da:79:
ad:c7:25:12:47:44:42:11:49:08:f1:4a:92:10:2e:
28:dc:93:42:bd:33:9a:1a:98:0f:b2:e2:2f:3b:e9:
fd:cb:d0:95:3c:f7:41:51:06:16:b1:c8:7a:91:39:
ce:61:c8:2d:f5:67:97:ec:3a:d5:ba:9f:12:1b:44:
b0:ec:a0:81:a5:c4:48:2e:03:ee:18:81:de:42:c3:
f5:8f:10:98:11:d6:0c:20:be:f0:68:0d:b1:45:0a:
a5:c1:47:71:64:4f:bf:87:28:d0:bd:21:6e:70:b6:
e0:51:6d:e0:bf:fc:30:6e:e5:bc:09:4c:c5:e9:75:
1d:2c:35:e3:8a:dc:e8:ea:10:c8:eb:61:84:70:49:
26:86:51:98:20:13:dc:63:f0:6e:8c:c3:8d:ba:29:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:75:61:DC:15:1F:B3:18:87:93:95:6A:12:7B:11:88:D4:FE:39:B9
X509v3 Authority Key Identifier:
keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/20494A1A789E11F19E950C8485A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:bc:dc:07:92:6d:8b:c9:40:45:2b:bd:99:5c:17:f0:65:b8:
61:4a:76:10:61:29:22:a3:bd:16:c7:43:78:f2:1c:c8:9e:08:
28:25:cb:af:78:15:41:7a:22:81:83:67:59:92:78:fc:42:db:
c5:1d:d5:86:24:8e:c3:9a:9b:c8:8c:34:78:47:ba:08:de:4b:
4a:95:3c:eb:4b:6d:40:ec:a0:ad:1a:44:32:d7:84:40:13:ac:
09:8f:5d:f9:be:41:bf:64:75:74:aa:e1:83:43:a3:54:28:fb:
59:ca:1e:c1:99:44:f6:83:2f:d0:26:3d:47:7c:49:d4:66:3e:
7e:81:0a:08:77:c6:cb:06:6e:6e:dd:20:d6:b4:05:89:3c:e6:
fc:0d:1b:e6:87:4a:46:16:c5:06:64:f8:5d:52:c4:6a:56:32:
0e:79:bd:a8:a9:d6:a0:85:69:33:81:42:8a:c1:21:d9:7f:95:
9e:71:01:7a:4e:e8:82:52:ec:0a:a9:fb:23:79:6b:35:e8:80:
e1:1d:35:a4:6f:8b:fc:72:f3:c2:6f:8b:b8:dc:11:45:e2:df:
80:c8:8e:30:e1:b4:da:b4:d1:cb:74:41:9c:70:67:6b:6d:2b:
90:92:65:aa:af:cf:e8:06:ad:77:82:29:d3:e6:9b:ee:66:af:
3d:64:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:53:55 2026 by rpki-client