
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/E40A00021F9311ECAF64925DC4F9AE02.roa
File: E40A00021F9311ECAF64925DC4F9AE02.roa (raw, json)
Hash identifier: vT/2jqg82VKFXPx9G6QNiwE6CjNhFzBQ9eCUGZswU+s=
Subject key identifier: 9A:C5:11:08:0A:21:B0:60:1C:CA:E6:80:D4:52:7B:EC:91:C3:D2:09
Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Certificate serial: 0C95
Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/E40A00021F9311ECAF64925DC4F9AE02.roa
Signing time: Sun 04 Oct 2026 19:35:42 +0000
ROA not before: Sun 04 Oct 2026 19:35:42 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 139605
IP address blocks: 103.142.54.0/23 maxlen: 23
103.142.54.0/24 maxlen: 24
103.142.55.0/24 maxlen: 24
2001:df7:a980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3221 (0xc95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Validity
Not Before: Oct 4 19:35:42 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2aa8e-4d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:01:a2:4b:b4:33:a5:b3:36:14:b7:89:eb:
3f:30:a5:e9:d9:22:55:46:bf:dd:6d:c6:75:29:fe:
66:26:f5:80:ef:12:21:c7:95:39:5d:f8:84:9c:f4:
69:d3:73:2a:76:0e:f3:35:be:7e:f8:e9:86:5b:b5:
93:5c:ff:67:1e:dc:6d:50:64:a0:b6:25:b9:a5:d0:
5f:c9:77:36:a6:f5:a9:b1:61:99:3e:79:8f:24:f1:
a3:2b:c1:dd:c6:eb:61:bb:4c:31:42:1d:b8:2c:2a:
64:9f:a8:69:95:6f:6e:4e:d1:f5:a3:41:03:cb:31:
5e:5d:65:9a:1f:fa:64:67:e7:b1:61:06:0c:a6:f7:
f9:8e:ae:48:03:3f:81:1d:57:2b:97:52:5e:79:1c:
a5:6c:7f:82:34:7a:9f:bc:4b:9f:65:67:16:bb:06:
d0:55:7e:fb:a2:85:b2:0f:86:c7:d1:c5:be:1f:43:
36:e4:02:8e:89:b4:d4:d5:0f:6c:8c:51:ca:22:0d:
0a:3f:70:45:eb:29:7e:bb:7a:36:1a:d8:45:be:21:
82:1b:0b:bb:e4:32:0a:f7:0d:25:9f:f9:0c:54:cb:
6b:6b:76:3a:fe:12:5b:69:9b:24:35:63:91:48:2e:
29:cb:2a:62:4f:ed:eb:4b:37:99:a0:6e:66:fa:11:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:11:08:0A:21:B0:60:1C:CA:E6:80:D4:52:7B:EC:91:C3:D2:09
X509v3 Authority Key Identifier:
keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/E40A00021F9311ECAF64925DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.54.0/23
IPv6:
2001:df7:a980::/48
Signature Algorithm: sha256WithRSAEncryption
4a:84:05:f7:1e:b2:f5:71:f6:61:be:b4:a1:06:28:dd:e6:4a:
76:86:f6:05:c8:ae:ba:da:44:6e:7d:41:4a:76:4c:4e:c8:c2:
02:42:6e:43:88:e7:c9:92:c6:9f:99:b7:82:db:5e:ee:f1:b4:
c6:61:d6:9b:24:95:26:97:06:a0:06:86:23:ba:f6:73:62:1b:
67:be:ee:77:12:9a:8c:83:2b:44:cd:d6:c3:72:f9:f5:a7:3e:
73:85:d5:b3:72:59:39:19:b3:cc:cb:52:f7:c9:9b:1e:94:47:
26:1e:2e:b5:35:6b:c8:e5:8e:06:de:8e:cc:4c:5e:8d:c3:8c:
a4:7d:fc:35:58:a5:1e:b4:b0:bc:b4:76:4f:e5:5d:d8:b6:a3:
0b:7e:61:24:5f:f5:6f:b6:98:eb:4c:58:29:52:59:ca:99:c5:
89:fb:d2:56:45:51:a6:01:8d:21:a4:1b:67:15:c8:2b:4d:c8:
e5:52:7d:d0:7f:ed:fd:b6:a6:39:bd:df:50:5a:b1:a2:46:fb:
26:bb:57:03:d2:84:79:02:6b:6d:01:93:34:c0:de:a8:c4:75:
20:15:be:4b:2e:e9:52:f6:c5:89:80:58:67:12:c1:04:c9:b5:
93:68:46:6a:92:60:59:c1:cd:11:08:a0:dc:47:da:3b:b1:07:
ab:03:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:57:27 2026 by rpki-client