
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/3E9A1F9676E411F19BC8C1F77FA30FBC.roa
File: 3E9A1F9676E411F19BC8C1F77FA30FBC.roa (raw, json)
Hash identifier: P5FhHGckeQ3nbQt7Fy7axvxqm5GyAq9CtU+YRkhHbJg=
Subject key identifier: 12:8D:0B:AB:A4:37:F3:FF:B7:B0:7F:DE:87:85:FC:23:1E:6C:F9:CF
Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial: 02D4
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/3E9A1F9676E411F19BC8C1F77FA30FBC.roa
Signing time: Fri 03 Jul 2026 13:36:50 +0000
ROA not before: Fri 03 Jul 2026 13:36:50 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150180
IP address blocks: 103.17.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 01:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Validity
Not Before: Jul 3 13:36:50 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a47baf2-e60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:e3:dc:86:2c:30:46:0e:4b:d2:13:05:1f:
1d:b5:d2:8f:42:d7:de:df:f2:bd:68:ea:c3:a4:25:
9b:08:94:69:4d:ff:9e:de:9a:57:44:06:e5:83:34:
09:20:37:40:48:9c:a1:17:4f:18:c0:b1:0d:f8:97:
0b:8b:b3:7d:40:08:d5:28:df:2d:f7:4f:76:e2:78:
11:11:d6:de:10:57:ed:1d:4c:08:6e:20:c8:88:1f:
b5:af:6d:09:78:36:34:95:95:3f:1b:cd:1f:0d:9b:
81:6e:f6:47:2a:de:55:2a:4c:18:39:24:03:de:36:
23:39:6c:e1:e7:cd:d7:c6:cb:49:0b:65:e0:8b:ba:
92:2b:35:c0:98:2c:64:bf:6f:7e:64:43:8e:85:88:
bd:95:03:93:0d:dc:b1:f5:13:30:39:c5:71:32:fa:
2f:d9:35:ba:91:b6:3a:dd:b5:fe:8f:eb:b1:10:84:
3f:51:da:cb:9d:e8:2b:db:95:a2:7b:05:e2:c4:c4:
54:f8:aa:bc:58:5e:a5:7f:3e:4e:a9:88:3c:b2:ce:
9a:73:13:14:7b:0b:cf:69:c6:89:cb:db:29:39:6d:
24:87:14:ea:7e:9d:d2:4b:e7:6f:95:80:74:da:cd:
92:f7:85:91:e7:05:56:a2:f3:a9:1d:ca:fd:08:27:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:0B:AB:A4:37:F3:FF:B7:B0:7F:DE:87:85:FC:23:1E:6C:F9:CF
X509v3 Authority Key Identifier:
keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/3E9A1F9676E411F19BC8C1F77FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:46:e7:f0:2c:22:dd:31:ad:e8:64:71:7b:9f:2f:35:1d:ad:
b0:a9:1a:7b:97:60:91:b9:73:9e:5e:ec:ac:d8:2f:47:67:47:
18:45:b8:e0:30:88:57:89:4c:f4:45:ef:79:fb:3e:50:30:1a:
f5:b2:f0:b0:fa:0a:9f:78:67:c9:52:1d:90:97:d6:16:ae:b1:
98:aa:6d:2c:42:f9:d9:e9:15:65:0c:e7:e9:48:c0:3a:7b:10:
fd:43:ca:ef:90:ad:97:f5:fd:3c:0c:b2:77:93:f5:fa:50:22:
d7:f1:28:b7:eb:47:36:60:c8:1b:07:6d:cb:1a:03:78:a9:7a:
15:b8:aa:98:6c:d7:8b:c0:89:0e:f0:16:9c:3a:1f:fc:9d:5b:
dd:75:fc:91:0c:86:47:e6:71:d8:a1:d8:11:b0:d1:0f:a8:1a:
f7:bc:b5:dd:57:b5:fe:b9:0b:95:8f:9a:7e:8e:6a:f9:e5:8b:
06:58:b4:3d:6c:9a:17:6c:5a:31:85:16:8a:f3:18:0a:44:bc:
56:1a:e2:38:2c:ae:90:5b:44:48:cd:8c:52:c1:04:8d:42:2d:
fc:ae:b1:c1:a5:d2:17:d3:ce:fe:9a:44:7f:b7:3f:3f:9e:a3:
43:f3:7b:a0:43:90:d6:91:35:61:c9:04:d7:b5:e6:d0:df:9d:
3e:ba:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 11:34:07 2026 by rpki-client