
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa
File: 0153CD24917111F1B35E84E13111F970.roa (raw, json)
Hash identifier: gpbfqZ64C5JfvxlcGssQB3FMKbhNFMGDd3/tTDBuG6k=
Subject key identifier: D6:48:6B:FF:1D:89:21:CA:DC:DB:BF:05:40:09:39:AE:63:DF:AA:E2
Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial: 018C
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa
Signing time: Thu 06 Aug 2026 08:29:57 +0000
ROA not before: Thu 06 Aug 2026 08:29:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7607
IP address blocks: 103.110.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Validity
Not Before: Aug 6 08:29:57 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a744604-e3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:08:5d:f7:ad:ec:df:fc:a7:7e:8c:92:ac:
af:c1:dd:2f:35:8e:c7:16:21:6b:e6:28:cf:69:de:
39:0e:c4:82:25:5a:63:47:41:01:68:90:0f:df:b1:
0a:44:6c:04:cb:dc:85:32:c3:fd:aa:f8:52:d7:ee:
2b:06:dc:2b:d2:d8:15:22:fc:5f:be:97:1a:cd:03:
3e:59:3c:6a:19:71:fa:39:3e:7c:8e:fa:7b:90:7a:
b2:ef:92:b8:be:87:c3:20:6f:ef:75:1d:d6:a8:35:
06:ce:6c:d4:aa:96:b0:2f:22:85:be:22:f2:d3:4c:
6f:6e:58:ab:52:78:0e:db:ea:9e:db:37:f0:cf:5c:
f6:c4:b0:bd:a2:6a:e1:57:8f:1d:0a:56:cd:3d:64:
5b:4b:c0:ab:11:d9:d8:97:ba:c8:e4:f4:84:e1:85:
21:97:08:e7:ab:a9:61:90:59:4c:4f:28:fa:02:53:
31:39:02:64:18:07:b8:d4:6d:84:a5:41:a7:d9:74:
bc:eb:b6:4e:b4:dc:0d:fb:05:35:db:cf:5b:77:08:
0e:d6:17:9e:6f:fe:bb:68:6e:f3:c8:41:c0:6e:af:
7e:49:9a:09:93:17:d1:9a:60:ba:fb:ce:5b:c8:81:
1f:0d:cf:7f:f6:98:bb:7b:a6:46:c5:0c:05:ee:20:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:6B:FF:1D:89:21:CA:DC:DB:BF:05:40:09:39:AE:63:DF:AA:E2
X509v3 Authority Key Identifier:
keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/0153CD24917111F1B35E84E13111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.220.0/23
Signature Algorithm: sha256WithRSAEncryption
27:b3:85:f7:af:5e:78:c0:e8:43:d9:76:75:4c:d2:c8:23:ac:
96:01:a8:15:80:f6:71:16:41:7c:76:4d:8d:68:94:57:a0:a1:
d0:87:e5:63:3e:79:19:b5:89:5e:41:bc:87:87:7b:c9:1c:04:
d3:80:78:c6:b0:79:41:dd:78:95:94:0f:30:5a:bf:9c:b9:17:
df:8f:0f:a6:ce:1b:af:69:7d:7f:cf:9f:e4:28:45:c5:48:6b:
c9:42:3d:79:e5:4d:d9:3e:6c:fe:04:f4:2a:d4:4f:92:e3:a4:
22:66:8f:dc:e7:19:19:b0:ba:ed:a3:80:65:f6:00:ed:50:f9:
54:c9:f1:33:a2:9e:69:46:2a:90:d8:3b:82:a5:75:5e:75:e6:
b1:8b:82:fd:48:5e:be:9a:fc:4d:ce:0a:2a:a6:cd:3e:ce:1f:
97:7e:3c:2f:89:d1:25:7c:40:6b:59:21:88:27:7e:62:9d:2d:
2a:18:1e:f3:50:f4:e1:0e:84:9b:37:1c:47:8f:e4:2d:a2:42:
58:a8:3a:3d:a0:41:ab:a1:fe:a9:fb:1e:d7:ec:2d:ad:3f:b3:
1f:8d:80:bf:c5:ce:52:85:e7:dc:8b:e7:d6:0c:05:e1:76:ad:
84:a0:43:04:21:48:08:8f:d8:85:ea:5c:14:a0:d3:2d:c7:fa:
96:1d:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:39:24 2026 by rpki-client