
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6243075E653411EB98060C17C4F9AE02.roa
File: 6243075E653411EB98060C17C4F9AE02.roa (raw, json)
Hash identifier: LpBzJHcOe8to9ruZ/AT7bdeYjixQxowfNGhMZFW6tgE=
Subject key identifier: B4:D0:26:C3:2D:FC:4F:2F:46:A4:41:F7:FE:74:E2:6F:86:F0:22:85
Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial: 0819
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6243075E653411EB98060C17C4F9AE02.roa
Signing time: Fri 30 Oct 2026 19:38:54 +0000
ROA not before: Fri 30 Oct 2026 19:38:54 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 135130
IP address blocks: 103.122.249.0/24 maxlen: 24
103.122.250.0/23 maxlen: 23
103.122.250.0/24 maxlen: 24
103.122.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 19:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Validity
Not Before: Oct 30 19:38:54 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ae4f24e-5e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4b:de:10:65:6f:02:78:c7:82:0e:8c:88:67:
b0:e4:53:04:d4:22:2a:44:e4:e5:c9:42:66:58:0d:
f7:4f:58:4f:d9:51:89:f0:e3:cc:9c:68:3f:9d:42:
7f:33:2d:3e:29:6a:de:81:f7:0d:76:21:77:59:9b:
91:91:6d:01:7b:58:bb:7b:33:a2:a0:95:e8:56:40:
46:9a:90:1b:1d:e3:95:be:b9:b8:bb:7d:64:fd:6c:
19:ba:73:a5:f1:e2:df:92:82:8f:fe:6e:6d:ed:a3:
2d:b0:16:29:0e:ac:b1:61:76:7e:c0:df:fe:fa:8d:
16:5c:65:c2:f3:58:fe:cb:1b:e0:1b:a9:a8:27:43:
ce:89:fe:36:89:f1:c5:a9:2b:d9:db:04:4d:ab:9f:
68:c8:7d:44:03:03:ad:6b:f9:2d:9e:89:96:48:d6:
b4:ae:b5:ee:dd:31:64:37:60:35:99:40:9d:46:57:
7c:ed:f0:da:7b:15:39:3a:a8:dd:28:89:9e:8d:5e:
a0:a9:1f:e2:36:38:f5:a5:5e:26:5c:43:b3:75:b7:
d2:0c:1c:0b:c5:60:82:9e:b6:03:36:7c:e8:54:d3:
6a:b0:c2:9d:e1:83:55:e1:19:05:75:47:60:4b:cf:
33:24:93:51:06:27:e5:90:ac:ef:0c:5b:04:8d:3b:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:26:C3:2D:FC:4F:2F:46:A4:41:F7:FE:74:E2:6F:86:F0:22:85
X509v3 Authority Key Identifier:
keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6243075E653411EB98060C17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.122.249.0-103.122.251.255
Signature Algorithm: sha256WithRSAEncryption
57:4e:26:d5:94:16:6a:8e:96:41:e1:a2:81:5f:79:68:42:c6:
ff:8a:32:a0:e0:17:ad:76:24:63:16:b0:46:8e:c5:68:cd:ce:
9b:76:11:4f:78:90:36:12:96:25:7c:80:0d:59:27:c1:1c:8e:
06:96:c3:b2:f4:f1:c4:d7:1f:fd:50:06:c2:90:e5:87:a8:9f:
ea:d5:9f:83:ac:10:e3:9d:ae:ec:c3:bc:20:d4:36:2d:d4:c5:
6b:4e:13:ad:ca:74:7a:75:94:03:01:43:ea:72:f6:6e:38:26:
1e:b2:b1:fd:99:a1:4d:41:45:52:46:51:bf:04:d3:27:9a:e2:
55:be:bf:99:31:03:c4:e3:fe:7a:7f:c6:31:7a:de:a0:77:db:
5d:47:1a:af:d9:b5:87:4e:f0:b8:be:28:cb:04:2f:b4:03:bf:
20:07:92:89:e8:00:fc:a2:0f:49:e5:4a:1f:c4:83:be:6f:56:
d0:95:42:75:94:40:f4:90:c0:a1:6b:0e:e1:0a:0f:db:9d:a0:
97:0d:83:4a:77:9c:e2:e3:21:53:c9:7c:4f:04:fd:5a:c2:35:
23:2a:68:7d:bb:cd:2a:5c:0f:44:ec:79:1d:0b:d6:4a:3c:b5:
ff:0d:67:97:af:26:2b:09:19:ad:3e:23:32:ac:61:fa:f3:18:
f9:32:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:33 2026 by rpki-client