
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa
File: 71014290D87411EE97234F5CC4F9AE02.roa (raw, json)
Hash identifier: s/cEOGRFX0DoGdQEqZyPvpLQpf664Lfa0cHYTU7MBgM=
Subject key identifier: 88:A3:3C:35:8C:A7:BC:0E:5B:33:B4:D4:CD:76:6A:AA:AB:57:F2:71
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 0226
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa
Signing time: Mon 03 Aug 2026 04:52:29 +0000
ROA not before: Mon 03 Aug 2026 04:52:29 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.14.230.0/24 maxlen: 24
2001:df2:b740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Aug 3 04:52:29 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a701e8d-ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:01:0d:56:41:a1:6b:85:0c:45:5c:0d:60:
0c:0a:9a:b3:68:9e:d4:31:2d:67:e1:0f:06:56:c1:
ee:73:58:54:2e:4b:a5:45:b2:9c:59:b6:15:93:a1:
ca:63:97:06:57:85:5e:81:64:e4:95:c4:60:5e:c8:
d4:ba:4a:85:56:01:a6:b9:c6:6a:ae:50:43:ab:94:
4c:29:93:0e:93:d6:2c:07:1f:a7:79:bf:57:87:d6:
bb:25:37:6b:fe:98:3c:24:ad:d1:d1:23:d3:9f:0b:
4e:be:bc:40:b8:58:53:ba:e0:5a:8d:bc:3a:32:89:
e7:2d:2c:18:f0:b2:5a:11:4a:63:66:12:9c:94:61:
78:08:f5:ee:d1:48:9c:6d:a2:cd:75:fb:cc:ad:e3:
25:62:5b:0d:9b:42:0c:bc:a4:52:b6:d4:52:a6:6f:
8a:aa:48:ca:db:1e:8c:3a:52:d3:ce:bd:84:e5:f3:
24:7c:1c:b6:05:d8:b0:9e:cb:07:d0:af:7b:59:0e:
9b:75:fb:1b:5a:70:59:b1:cb:20:b1:84:5a:1e:c0:
c6:d8:b4:29:6b:75:e6:09:1b:b6:d3:62:44:0c:12:
6b:09:7d:5c:e7:95:c6:8b:3e:12:60:2d:e5:c8:42:
e6:bd:06:57:85:55:79:b1:64:11:99:5b:7d:01:94:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A3:3C:35:8C:A7:BC:0E:5B:33:B4:D4:CD:76:6A:AA:AB:57:F2:71
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.230.0/24
IPv6:
2001:df2:b740::/48
Signature Algorithm: sha256WithRSAEncryption
1e:a5:7f:89:db:50:0e:f7:44:2f:82:90:56:6f:33:23:73:86:
bc:0d:6f:18:c9:39:a2:66:4b:a3:70:01:ed:8b:28:93:c4:79:
ae:38:70:c0:b3:e0:6c:0d:69:32:71:57:65:da:61:8f:45:05:
56:3d:3d:cc:97:00:1a:ea:d4:4e:3d:4f:6c:a3:49:09:06:32:
43:fd:5a:16:ef:b9:03:b9:84:80:5b:63:2e:af:15:17:c2:dc:
c7:05:31:83:d8:9a:3d:dd:44:3d:6a:dc:3e:1e:2b:c8:e6:b9:
d5:4e:8b:7d:24:f6:9c:d2:b3:f8:02:3c:aa:ba:a7:30:00:4a:
d0:c3:ea:03:af:8c:16:17:c9:23:0d:0d:74:be:2e:f5:b2:35:
11:57:cd:b0:af:ec:43:e2:90:c1:27:e7:97:48:a2:ce:fd:c0:
64:b4:52:ab:7a:f6:2e:45:6c:40:e2:0d:7c:9e:be:0f:44:bb:
4f:fe:4e:85:7a:85:84:02:5f:ac:97:91:e1:0e:6e:f9:8e:45:
c9:99:4a:f3:99:ac:ff:76:12:c9:83:25:99:53:99:b4:02:9c:
7c:34:a0:ad:1c:19:95:26:43:ce:72:4e:ee:26:17:d4:69:2a:
7f:78:2f:d2:f1:91:c6:e7:27:6b:51:05:61:f6:fb:66:83:04:
c7:59:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:13 2026 by rpki-client