
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
File: 827329BE232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier: grKrD3DF9eLFVxmrk87U8DF5YwJ9box6akwxpNoX3+w=
Subject key identifier: EE:F5:B9:1D:55:15:FB:5A:B8:47:10:81:0A:C9:43:44:E9:E6:02:39
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 086E
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
Signing time: Mon 24 Aug 2026 21:40:57 +0000
ROA not before: Mon 24 Aug 2026 21:40:57 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137969
IP address blocks: 103.153.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 21:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Aug 24 21:40:57 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8cba69-b5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:6c:e2:ee:02:32:fb:e2:42:b1:14:ad:11:
31:43:e3:23:87:f7:e3:b1:f5:51:ca:9e:cb:91:f7:
f0:65:d8:1b:15:be:16:37:33:e1:6a:f3:f6:a6:77:
5b:2c:dc:9a:d6:2d:db:e3:f6:5b:51:0e:1c:20:62:
9f:45:dd:f1:65:06:1d:36:20:93:25:b1:a6:9b:2a:
5d:f3:f3:75:4c:5a:14:a9:84:fe:02:e6:62:e3:90:
3e:02:32:54:9a:2f:6e:96:a3:52:70:27:7d:ee:49:
ac:d3:dd:db:87:84:b5:c1:a4:93:55:8d:e3:46:75:
2a:c0:6d:d2:b2:b4:84:49:c5:1b:c5:49:1b:71:a4:
33:c9:ec:c4:6c:89:24:e5:c0:e7:ca:71:a2:bc:9b:
2b:aa:66:15:d3:1f:f0:8a:b2:a1:d5:a0:c7:86:99:
0a:69:e2:c2:20:ed:86:7c:56:a2:53:ab:2a:10:fe:
33:0e:3b:82:ed:a9:f9:59:7a:ab:12:54:30:6f:de:
c1:a8:c8:bf:2e:d6:9f:a2:2d:d0:df:7f:10:b9:0c:
86:cc:65:3f:a1:0e:f2:c5:b0:e3:94:7d:63:bf:61:
61:c1:55:eb:7a:d7:f0:b8:df:f5:3a:10:1a:8d:79:
c2:e5:d2:07:4e:e1:c7:c1:e9:e1:86:c0:bf:91:6f:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:B9:1D:55:15:FB:5A:B8:47:10:81:0A:C9:43:44:E9:E6:02:39
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.100.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:e3:ec:54:6b:cb:e1:4f:e5:d7:c2:01:8a:6d:6f:69:78:24:
9d:be:4a:4e:a9:c9:43:a3:42:5a:e8:18:14:d7:75:06:46:58:
ff:e9:2b:11:39:02:cf:94:e6:84:3f:dc:b4:9e:91:f3:cb:60:
1f:f9:61:46:ca:aa:4c:3f:df:13:53:e1:3a:9c:d8:eb:05:b3:
68:fb:99:a9:7e:51:43:f4:7f:17:8c:75:7c:2b:4b:65:83:61:
d1:6c:b3:56:cc:55:95:dc:ac:d4:44:e8:79:f0:4e:fb:d2:2d:
39:88:fc:46:ba:e1:5a:e3:9a:c0:11:5b:25:42:47:23:26:6c:
ee:25:4f:78:09:99:1a:ec:30:d7:1b:37:63:10:3d:35:90:ba:
1a:7d:8a:60:5f:42:31:ea:6d:0a:88:9e:74:c8:1d:df:ae:1a:
8b:28:88:4e:55:0c:74:d8:bc:1d:08:a0:d0:f3:19:8e:38:f5:
36:57:c3:9c:7f:1c:30:e2:ff:8d:4f:96:dc:81:3c:71:9a:c9:
fa:15:f8:1d:e5:b9:8d:f9:45:08:7c:51:4b:b0:db:2d:56:ff:
dc:00:41:18:62:f6:8b:13:57:a7:25:69:2b:49:0b:88:ae:70:
b4:cd:0a:0e:3e:62:d1:ed:10:44:28:21:2e:b2:bb:5f:65:65:
a4:a8:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:14:32 2026 by rpki-client