
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B51D6/2A01AF88C7C811F1BC9EAD965211F970/2E3FBE9AC7C911F182F172A35311F970.roa
File: 2E3FBE9AC7C911F182F172A35311F970.roa (raw, json)
Hash identifier: jrat5b1ZU6WyU6d7Oo/8JveB35eOCEyMhDQ0duH+C4s=
Subject key identifier: 1C:B5:A9:D7:96:50:80:62:0A:72:5D:6B:DA:5A:F0:07:6B:E8:F4:DC
Certificate issuer: /CN=A91B51D6/serialNumber=D23F8CD4C27CFDDA813FFC5BD4021BA6E3B94F4E
Certificate serial: 04
Authority key identifier: D2:3F:8C:D4:C2:7C:FD:DA:81:3F:FC:5B:D4:02:1B:A6:E3:B9:4F:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0j-M1MJ8_dqBP_xb1AIbpuO5T04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B51D6/2A01AF88C7C811F1BC9EAD965211F970/2E3FBE9AC7C911F182F172A35311F970.roa
Signing time: Wed 14 Oct 2026 12:17:11 +0000
ROA not before: Wed 14 Oct 2026 12:17:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136476
IP address blocks: 103.89.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B51D6/2A01AF88C7C811F1BC9EAD965211F970/0j-M1MJ8_dqBP_xb1AIbpuO5T04.crl
rsync://rpki.apnic.net/member_repository/A91B51D6/2A01AF88C7C811F1BC9EAD965211F970/0j-M1MJ8_dqBP_xb1AIbpuO5T04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0j-M1MJ8_dqBP_xb1AIbpuO5T04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B51D6, serialNumber=D23F8CD4C27CFDDA813FFC5BD4021BA6E3B94F4E
Validity
Not Before: Oct 14 12:17:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6acf72c6-768c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:9c:7a:3f:61:0b:56:31:47:1a:60:4d:e5:
42:dd:47:9a:8d:63:6e:2b:eb:ab:23:3f:4b:ac:7f:
27:c7:ce:67:14:26:61:c5:77:7d:ce:e4:05:a9:fa:
4c:7c:61:47:01:c8:4d:99:0d:e2:0e:60:29:bd:0a:
d7:19:eb:5f:63:74:d2:c6:46:dd:ba:45:fb:bd:9b:
da:60:86:4d:a6:a3:7b:0f:67:cb:42:67:ad:c1:5f:
37:08:24:d7:2b:4f:29:a8:c2:40:a7:1c:8e:e2:8b:
99:41:a1:63:59:ab:22:cc:2a:3d:f2:ae:66:9b:34:
ab:87:50:32:c0:9d:59:a1:98:36:53:f3:60:61:dd:
4a:3e:fd:27:7b:b5:f2:56:b8:0f:78:13:c8:c2:c1:
e2:b7:89:13:d4:db:a3:7d:cb:fc:4f:26:35:a2:e0:
92:5e:4b:3f:47:41:34:83:04:10:e6:74:64:2f:2a:
fc:0d:48:dc:89:99:e4:90:94:f0:62:8d:2a:10:3e:
dd:77:0b:1f:20:c1:92:9b:71:78:4f:66:90:5a:f9:
87:a2:8b:b8:97:d8:f3:9b:44:a6:fe:d3:ea:24:55:
03:20:eb:be:a0:2d:1c:7e:a2:5a:42:0f:b5:c3:e1:
6f:39:1e:a0:17:56:81:b6:e1:4f:6d:68:f5:25:75:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:A9:D7:96:50:80:62:0A:72:5D:6B:DA:5A:F0:07:6B:E8:F4:DC
X509v3 Authority Key Identifier:
keyid:D2:3F:8C:D4:C2:7C:FD:DA:81:3F:FC:5B:D4:02:1B:A6:E3:B9:4F:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B51D6/2A01AF88C7C811F1BC9EAD965211F970/0j-M1MJ8_dqBP_xb1AIbpuO5T04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0j-M1MJ8_dqBP_xb1AIbpuO5T04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B51D6/2A01AF88C7C811F1BC9EAD965211F970/2E3FBE9AC7C911F182F172A35311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.137.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2e:b3:cd:00:1f:88:9a:c6:3a:ec:af:e5:4a:76:27:19:49:
8e:f6:c9:92:fe:48:c8:db:57:ac:0e:60:97:fc:b6:dd:01:d2:
e0:a3:7a:07:3c:f3:80:a8:10:bf:0c:8e:7e:5d:5e:02:92:08:
b3:d0:8b:c6:ec:52:32:5b:42:06:60:ef:cd:67:9f:74:b4:af:
a7:aa:26:a1:34:b6:32:56:69:e5:17:87:6a:41:73:23:7f:74:
90:44:c1:09:37:f5:26:7a:d4:b4:91:6e:27:af:05:72:f6:05:
07:78:aa:3e:5b:0e:cc:9d:e1:f4:d7:b8:10:c2:b1:37:c8:40:
ad:5c:79:37:a9:33:cb:9c:46:28:02:a2:5f:20:ae:c8:f2:1e:
7f:a3:80:bc:43:cf:19:fe:6a:15:d1:d0:0c:8d:19:aa:47:4b:
92:23:66:4d:41:5e:73:6b:7c:6e:c7:a5:e2:5b:4f:2a:5e:85:
84:53:46:3e:b4:3c:f9:fd:e3:ed:b5:a1:ac:12:c9:a7:ee:66:
cd:b0:1f:54:3c:b3:80:00:30:31:58:19:5b:65:9b:ec:d8:68:
7b:13:f6:11:ef:10:5c:33:e6:74:28:d6:64:5e:4e:6b:1e:4c:
26:b5:c4:e5:18:50:a3:c7:fd:f6:42:ab:3b:04:4e:64:39:54:
d7:65:b7:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:32 2026 by rpki-client