
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa
File: 8126464A232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier: 8aFNCW7bv8WDFcSYRJzRhcsYSlLn29H4vfS7MxdtY2s=
Subject key identifier: 2E:FF:D8:65:68:5A:27:88:14:79:CD:77:24:3E:54:4D:D7:3A:76:93
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 086C
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa
Signing time: Mon 24 Aug 2026 21:40:53 +0000
ROA not before: Mon 24 Aug 2026 21:40:53 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135386
IP address blocks: 103.153.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 21:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Aug 24 21:40:53 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8cba65-abc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:73:22:ab:95:24:92:1f:ad:f1:b8:e4:cc:
47:a9:25:8b:d4:7e:c4:7f:3f:d1:5c:46:9f:6f:36:
dc:e1:20:96:04:2e:26:50:02:e3:44:07:6b:23:d1:
b9:ec:e4:c2:37:75:a7:f8:5b:93:09:29:3b:b8:c8:
88:63:36:0a:90:a1:38:a3:c1:f6:a1:24:c4:05:cf:
6f:92:c9:b0:8c:5f:ab:03:f0:72:78:2e:07:68:c4:
f8:f8:8b:c4:40:99:9c:40:85:d6:72:c7:b5:27:bd:
51:af:0b:ea:e5:31:56:ad:c5:52:40:8f:d9:cc:d3:
38:dd:bf:fa:7d:d3:2d:50:47:41:60:72:60:89:d3:
b3:91:d7:bd:67:a5:01:4d:bf:cc:1d:1c:d6:db:83:
43:5b:5c:bd:b5:4b:64:3f:20:87:f2:02:54:64:72:
fa:09:78:d0:4d:be:8c:9d:05:0f:10:47:cc:c9:23:
5e:73:f2:f3:d4:5c:5b:c3:93:00:69:d7:76:d3:25:
63:50:07:85:90:54:c0:c8:6c:34:7f:65:b2:c9:b1:
99:4d:5f:e1:f1:18:f5:25:29:44:95:5c:2b:00:4f:
ad:b9:08:82:3b:10:d4:33:a6:fe:1e:01:93:6a:f2:
fb:4f:32:1f:f3:e9:5b:67:89:0a:1e:7c:e3:76:49:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:D8:65:68:5A:27:88:14:79:CD:77:24:3E:54:4D:D7:3A:76:93
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.100.0/23
Signature Algorithm: sha256WithRSAEncryption
89:b6:83:90:b0:1a:e2:87:a0:8d:bc:b0:14:7a:31:54:6a:a8:
8e:59:7c:50:44:91:90:54:e6:1d:0c:72:f8:be:d4:8f:7d:8c:
00:93:49:a1:9e:f3:a9:0a:a9:dd:41:21:84:91:10:e4:f9:c3:
3c:8b:d9:ee:9f:ca:66:ef:d3:ed:a8:92:93:16:e5:ee:91:29:
ed:1b:cd:39:49:9d:70:09:91:01:71:71:ee:12:1b:fc:c4:77:
1b:50:1f:cc:b3:26:99:24:06:f4:a7:1c:4b:f5:cd:e3:1c:38:
06:fc:65:09:ce:2e:8c:92:41:38:ef:77:46:54:71:04:8c:80:
47:1d:a5:76:ff:db:cd:74:75:f4:1e:41:85:21:ac:1c:bc:9f:
33:d4:55:51:1f:aa:da:ec:62:d8:f0:27:09:3a:2a:e5:65:25:
95:e5:4b:db:81:b5:2e:24:20:ae:ac:b6:e1:2a:76:b5:1e:b4:
be:5d:f9:50:05:10:1f:61:b3:db:0d:dd:91:a4:70:05:02:c4:
ca:61:a2:2f:3d:b1:04:10:8d:ea:c9:81:f1:b8:83:74:35:77:
7a:95:04:15:83:7e:18:a9:dd:35:44:5e:29:d6:d1:08:8c:f1:
27:46:cc:56:a1:d5:a4:2b:dc:8a:a5:a7:22:2c:11:6a:7d:c7:
ef:ea:16:e6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjYwODI0MjE0MDUzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThjYmE2NS1hYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjyFzIquVJJIfrfG45MxHqSWL1H7Efz/RXEafbzbc4SCWBC4mUALjRAdrI9G5
7OTCN3Wn+FuTCSk7uMiIYzYKkKE4o8H2oSTEBc9vksmwjF+rA/ByeC4HaMT4+IvE
QJmcQIXWcse1J71Rrwvq5TFWrcVSQI/ZzNM43b/6fdMtUEdBYHJgidOzkde9Z6UB
Tb/MHRzW24NDW1y9tUtkPyCH8gJUZHL6CXjQTb6MnQUPEEfMySNec/Lz1Fxbw5MA
add20yVjUAeFkFTAyGw0f2WyybGZTV/h8Rj1JSlElVwrAE+tuQiCOxDUM6b+HgGT
avL7TzIf8+lbZ4kKHnzjdkkZAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC7/2GVo
WieIFHnNdyQ+VE3XOnaTMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvODEyNjQ2NEEy
MzJCMTFFQkIyMzQ4QjIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5lkMA0GCSqGSIb3DQEBCwUAA4IBAQCJtoOQsBrih6CNvLAUejFU
aqiOWXxQRJGQVOYdDHL4vtSPfYwAk0mhnvOpCqndQSGEkRDk+cM8i9nun8pm79Pt
qJKTFuXukSntG805SZ1wCZEBcXHuEhv8xHcbUB/MsyaZJAb0pxxL9c3jHDgG/GUJ
zi6MkkE473dGVHEEjIBHHaV2/9vNdHX0HkGFIawcvJ8z1FVRH6ra7GLY8CcJOirl
ZSWV5UvbgbUuJCCurLbhKna1HrS+XflQBRAfYbPbDd2RpHAFAsTKYaIvPbEEEI3q
yYHxuIN0NXd6lQQVg34Yqd01RF4p1tEIjPEnRsxWodWkK9yKpaciLBFqfcfv6hbm
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:11:32 2026 by rpki-client