
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa
File: 8320FBE8232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier: yT4BJ95e6qnBoDFs5229dTzBYzYWGck8U6xqWbQJ7BU=
Subject key identifier: 64:12:3C:15:42:77:84:D0:52:E7:67:C8:75:2B:C5:FB:FE:D9:2A:80
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 086F
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa
Signing time: Mon 24 Aug 2026 21:40:59 +0000
ROA not before: Mon 24 Aug 2026 21:40:59 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 138538
IP address blocks: 103.153.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 21:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Aug 24 21:40:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8cba6b-aea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:d7:79:37:e1:cf:93:62:cf:22:f3:b4:08:
54:c1:2a:78:ea:39:00:1f:8d:6f:3f:b9:f8:a4:33:
ae:6f:75:cd:82:ff:67:79:ac:58:5d:0b:ef:83:df:
e3:02:08:ef:d0:17:47:58:ec:d3:e5:63:1d:bf:0a:
a9:29:8d:07:1f:33:14:4f:7e:79:33:0e:3b:a2:f8:
44:17:e9:54:fd:5f:63:e3:43:f1:a8:41:dd:83:e0:
9b:f5:fc:81:30:37:7e:83:3a:a2:47:5f:76:8b:2d:
fd:89:30:15:fb:39:8f:c5:71:8e:be:f1:d8:df:6a:
2b:7f:8e:4f:f7:8e:ae:db:33:52:4f:7a:40:ec:1b:
f5:d2:c6:17:09:a7:b9:d2:30:a5:1a:3e:2e:b9:ca:
b2:8f:a5:1f:b6:18:30:f8:dc:8c:56:5d:fe:41:f4:
d3:96:61:99:df:e9:fa:1b:99:5a:4b:24:c8:bc:18:
64:f4:b2:72:fb:3b:48:32:b3:c0:dd:c4:75:f9:a9:
fa:54:7b:d9:a5:72:e4:36:a3:f2:76:61:e0:ab:66:
76:7c:ba:4b:ff:41:5e:65:6a:66:50:0e:a9:b5:0a:
c0:59:07:9e:23:4f:2d:0d:ae:2b:33:dd:e3:1c:e9:
0c:69:62:61:58:77:06:4f:db:64:af:d8:9a:4b:40:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:3C:15:42:77:84:D0:52:E7:67:C8:75:2B:C5:FB:FE:D9:2A:80
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.100.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:08:fe:f1:2c:a8:16:90:c8:26:f2:c0:17:20:82:76:db:92:
71:0f:f3:de:a2:5c:25:52:cd:de:49:0d:8d:f3:95:79:12:96:
0c:2d:37:75:05:ad:4c:1e:85:d4:4a:af:f1:13:21:70:22:1a:
ff:68:5b:c0:07:f0:c1:ba:8c:14:bf:0a:ee:1c:f1:dd:48:e7:
8b:e6:d3:b4:00:72:c4:35:72:61:e9:35:36:6a:e3:a3:79:68:
8f:99:d1:b3:ca:cc:8a:8f:20:59:ad:60:4b:58:49:d8:41:3f:
b1:92:ba:2e:3b:22:e7:fa:29:94:7b:ec:a5:70:cb:2d:78:ce:
d6:e8:55:86:c7:aa:50:d7:e2:bd:4b:ad:0c:3b:fe:f5:c0:81:
a3:7a:83:51:e7:a6:fd:c5:e9:c9:0b:62:75:34:4a:c3:63:39:
5c:9f:05:9f:e6:11:f3:da:4b:a9:a9:ac:14:1a:d8:bf:cb:7c:
0a:44:eb:47:75:78:80:75:d5:b8:a5:f2:e6:ea:9a:46:21:48:
14:49:93:5d:15:fa:77:a1:94:77:8c:93:14:7c:a3:17:37:dc:
76:4f:e1:7b:ca:63:9e:6d:11:4b:f0:b2:2a:98:7d:44:ec:01:
b4:7f:ed:02:57:ba:68:3d:fe:c7:c3:a8:0b:d3:fb:55:c7:c8:
04:93:d8:7e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjYwODI0MjE0MDU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThjYmE2Yi1hZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjLDXeTfhz5NizyLztAhUwSp46jkAH41vP7n4pDOub3XNgv9neaxYXQvvg9/j
Agjv0BdHWOzT5WMdvwqpKY0HHzMUT355Mw47ovhEF+lU/V9j40PxqEHdg+Cb9fyB
MDd+gzqiR192iy39iTAV+zmPxXGOvvHY32orf45P946u2zNST3pA7Bv10sYXCae5
0jClGj4uucqyj6Ufthgw+NyMVl3+QfTTlmGZ3+n6G5laSyTIvBhk9LJy+ztIMrPA
3cR1+an6VHvZpXLkNqPydmHgq2Z2fLpL/0FeZWpmUA6ptQrAWQeeI08tDa4rM93j
HOkMaWJhWHcGT9tkr9iaS0ARTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGQSPBVC
d4TQUudnyHUrxfv+2SqAMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvODMyMEZCRTgy
MzJCMTFFQkIyMzQ4QjIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5lkMA0GCSqGSIb3DQEBCwUAA4IBAQCbCP7xLKgWkMgm8sAXIIJ2
25JxD/PeolwlUs3eSQ2N85V5EpYMLTd1Ba1MHoXUSq/xEyFwIhr/aFvAB/DBuowU
vwruHPHdSOeL5tO0AHLENXJh6TU2auOjeWiPmdGzysyKjyBZrWBLWEnYQT+xkrou
OyLn+imUe+ylcMsteM7W6FWGx6pQ1+K9S60MO/71wIGjeoNR56b9xenJC2J1NErD
YzlcnwWf5hHz2kupqawUGti/y3wKROtHdXiAddW4pfLm6ppGIUgUSZNdFfp3oZR3
jJMUfKMXN9x2T+F7ymOebRFL8LIqmH1E7AG0f+0CV7poPf7Hw6gL0/tVx8gEk9h+
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:28:09 2026 by rpki-client