
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
File: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (raw, json)
Hash identifier: zm1MqNXGifHHQw7D7+UZg2rP++jcV8vgRKdJt+1OETM=
Subject key identifier: C7:60:E7:0A:B6:48:12:B6:34:BB:A2:F8:6E:10:BC:E3:91:32:A7:54
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 1522
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
Signing time: Fri 16 Oct 2026 17:32:46 +0000
ROA not before: Fri 16 Oct 2026 17:32:46 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 23876
IP address blocks: 103.110.212.0/23 maxlen: 24
123.49.43.0/24 maxlen: 24
218.100.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 16:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5410 (0x1522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Oct 16 17:32:46 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ad25fbe-1cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:6d:cc:ed:6d:78:13:dc:42:9a:ef:2c:0f:
5f:3e:a6:12:fb:d3:86:9c:02:3a:a2:38:e7:89:4b:
67:74:13:31:0d:67:58:98:c1:ad:15:3d:50:a7:11:
63:c3:47:3d:48:da:f3:1c:9a:1c:33:ee:8f:0f:7d:
cd:77:10:41:82:8e:bf:e3:b8:76:2d:1c:49:9d:6a:
5e:ca:26:c2:25:b9:38:c7:d6:af:53:e7:42:70:8d:
6c:90:4c:17:9d:02:e7:85:ef:3d:cc:8b:eb:1f:5a:
54:2a:93:57:86:f6:82:7d:1b:ab:9c:0e:5c:3d:80:
c8:01:07:09:4f:88:1e:fb:e6:bb:ec:aa:96:9e:d4:
79:7d:e5:53:a1:26:66:62:1d:65:25:b6:38:8f:fd:
88:a6:b0:3a:0a:d1:5d:56:d3:0d:b3:59:57:c5:e3:
b2:7b:85:81:b3:1d:aa:9e:57:6e:9e:1b:38:51:58:
80:20:14:f3:1d:6d:dd:26:a8:ff:a2:b1:3b:bd:85:
f4:5e:5a:34:3f:25:11:0a:0f:12:e8:73:49:d4:48:
f3:f9:64:9d:83:96:10:67:6d:05:64:c9:26:f3:9e:
83:36:b5:c8:1a:65:ea:9c:42:4e:ff:2b:78:2e:ce:
95:1b:4d:05:34:b2:75:2e:be:9b:a3:18:3e:f6:b3:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:60:E7:0A:B6:48:12:B6:34:BB:A2:F8:6E:10:BC:E3:91:32:A7:54
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.212.0/23
123.49.43.0/24
218.100.37.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:9c:d5:fa:31:8f:0c:ec:5e:7f:94:0c:30:07:b3:23:49:c1:
6a:0b:ed:d3:12:93:35:19:ce:f1:6a:ce:4f:9a:3a:f6:14:12:
a3:1f:10:dc:3d:ff:44:0f:4f:2f:d0:aa:f5:e9:27:ca:af:a3:
22:34:29:fd:e4:4b:bc:5d:76:44:70:d0:99:ad:87:6a:0c:aa:
fb:ae:f4:15:47:f9:a5:5a:bb:86:39:82:7a:b8:83:9a:2b:0a:
f3:4b:78:33:0c:a4:bc:db:26:89:8f:54:1d:4f:c1:f2:72:02:
f7:49:e1:94:1c:33:dd:70:b4:1e:d9:f1:0c:07:67:46:1b:63:
8a:02:b3:76:09:ad:81:ca:4c:21:45:12:06:05:21:6d:2d:ea:
80:ac:14:1b:60:cb:87:4f:8b:37:53:55:ee:bd:e7:60:26:86:
8f:8a:98:cc:f5:9d:e6:77:36:d4:1d:b2:77:6c:9d:a6:35:59:
7c:e6:9d:22:35:e6:ec:76:8a:22:d0:ce:8c:fd:ce:0c:10:dd:
78:a4:6f:4a:56:80:50:2b:35:45:4f:13:ea:b9:f2:14:13:cd:
ed:db:a1:3e:3b:6a:9c:d5:ca:34:3c:6f:f6:e3:8b:b6:60:90:
4c:1a:3d:b4:18:29:3a:3e:49:84:84:5a:3a:e9:b8:0e:22:42:
96:ea:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:22 2026 by rpki-client