
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/2DA3F18A7AF911F18AE672997DA30FBC.roa
File: 2DA3F18A7AF911F18AE672997DA30FBC.roa (raw, json)
Hash identifier: AgwFvLtZoYWdmQU4R/em0WdJptUJUnWElCr04Q2ck8Y=
Subject key identifier: 37:AE:07:AE:2A:53:BF:CB:9B:16:53:28:82:4F:EB:15:E4:1B:88:84
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 044B
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/2DA3F18A7AF911F18AE672997DA30FBC.roa
Signing time: Wed 08 Jul 2026 18:16:46 +0000
ROA not before: Wed 08 Jul 2026 18:16:46 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 136787
IP address blocks: 103.110.144.0/24 maxlen: 24
103.114.57.0/24 maxlen: 24
139.5.88.0/24 maxlen: 24
160.20.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 02:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Jul 8 18:16:46 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a4e940e-26e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:d6:98:36:42:d1:c5:23:48:3b:99:79:85:
c8:cd:7b:2a:b9:24:fd:b3:7c:a9:4c:df:53:df:72:
e6:b3:ef:36:a4:50:c0:a9:f1:33:01:66:60:7d:4f:
97:58:ea:91:00:0e:36:5f:59:0f:c3:28:87:f2:37:
f1:e0:4b:73:6e:5e:5c:6b:e6:1a:ae:6c:8d:15:0d:
bb:62:fd:9a:4a:1e:69:cf:fb:f4:6d:2a:66:71:7a:
d2:89:68:f4:18:46:23:b9:1d:97:05:b5:a0:eb:3a:
75:8f:c5:24:a6:74:5a:03:29:b4:44:df:d6:fa:32:
2b:70:d2:4a:83:91:24:87:d5:17:b7:a9:78:9a:21:
33:1e:19:2e:59:dd:ba:f6:29:71:80:9c:4d:0b:2b:
ed:b1:1d:71:be:9f:01:f9:54:af:1e:e3:9e:2f:02:
ff:01:50:55:b1:78:db:1e:54:46:e2:03:09:2d:8d:
09:d1:b0:34:48:d1:2d:a8:f7:e5:ed:e9:78:04:40:
60:8f:65:3d:08:b5:3b:5b:8a:68:78:cf:0e:b4:10:
5f:7f:9e:ab:2b:f3:e6:b5:a4:38:f2:4f:8e:7a:59:
90:ad:73:f0:2e:67:f3:50:59:fd:26:35:23:6b:44:
8f:3e:8e:30:82:54:c4:38:08:03:f7:63:45:20:10:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AE:07:AE:2A:53:BF:CB:9B:16:53:28:82:4F:EB:15:E4:1B:88:84
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/2DA3F18A7AF911F18AE672997DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.144.0/24
103.114.57.0/24
139.5.88.0/24
160.20.10.0/24
Signature Algorithm: sha256WithRSAEncryption
59:01:63:db:6d:02:92:11:c1:74:5a:13:56:04:4c:f7:af:0a:
b0:d6:f5:25:15:48:b3:9c:af:cd:91:fe:c3:9e:7f:a6:8a:59:
b8:5f:0b:e2:c1:45:80:0f:25:85:56:e1:b6:3b:94:bf:41:48:
34:78:ec:7d:3b:3d:b9:65:93:9a:7d:ca:2b:ac:52:18:20:e1:
4a:00:b3:54:ba:97:18:e0:02:48:a0:f9:10:a3:cb:c5:3d:25:
5b:18:66:be:6d:bb:e1:83:d1:e5:c9:d9:90:d2:3b:57:7d:93:
ea:4a:cf:6e:c9:68:66:9d:a9:3e:8b:35:df:ff:83:d1:b9:54:
fa:34:39:ba:82:94:6f:a1:2a:2b:64:a8:f0:b2:99:4f:ff:9a:
52:48:75:12:ee:16:eb:b2:93:40:3d:b6:2c:a2:1a:29:e4:d7:
43:c4:0c:a4:83:d5:a1:1f:60:44:2a:82:04:c0:cf:e6:cf:56:
7f:d7:4d:d7:45:20:b3:74:cd:8d:75:ad:11:f3:c7:fe:5b:5f:
d8:9c:5c:76:cb:7d:37:fa:06:87:3f:c2:c7:d9:58:b4:49:d0:
8b:6c:9f:13:f3:7a:65:94:27:93:bf:41:63:76:eb:54:35:d4:
a1:fb:fd:bc:3f:0f:c6:3e:74:bc:9b:85:50:9c:b6:b1:3d:1b:
97:e8:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:42 2026 by rpki-client