
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/E2ADA1E4AE8311F196A6E2687011F970.roa
File: E2ADA1E4AE8311F196A6E2687011F970.roa (raw, json)
Hash identifier: pV7LACnAOovbk4kGz4yeqcGr1OmaV64Doq2AzSoU9ng=
Subject key identifier: 68:68:E6:A8:60:16:DA:C1:60:2D:D5:5D:89:49:CA:C7:A9:FA:4F:DD
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 04ED
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/E2ADA1E4AE8311F196A6E2687011F970.roa
Signing time: Sat 12 Sep 2026 08:28:46 +0000
ROA not before: Sat 12 Sep 2026 08:28:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.151.4.0/23 maxlen: 24
103.178.56.0/23 maxlen: 23
103.178.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Validity
Not Before: Sep 12 08:28:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6aa50d3e-b209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:b7:75:80:b1:74:b7:68:3b:65:c4:7b:49:
ed:e7:c4:83:4e:71:6e:ce:53:f7:ac:d0:e1:50:7d:
4c:66:0b:31:2d:20:55:a7:5f:d4:c0:01:2b:5d:f2:
76:ed:86:75:5a:50:53:d5:55:ac:89:59:e3:d1:ff:
43:a4:46:66:41:54:3b:22:e9:d7:51:d7:32:68:fe:
1d:a8:c6:9a:32:23:3d:eb:0a:50:c0:f7:ce:f4:04:
70:47:0f:a1:b7:5d:2c:fe:a9:a8:58:9a:fa:3c:ad:
81:28:dc:a4:44:9f:bf:3a:f2:22:88:40:8b:23:3b:
f5:1b:74:de:11:14:a6:75:36:cf:9b:cd:48:f8:65:
ef:59:76:b5:de:8e:99:2b:4d:10:11:c8:08:aa:c1:
12:45:3d:25:ab:82:09:8a:f5:2a:b0:bd:0f:97:e0:
5f:8c:ba:2e:0e:7b:32:04:78:86:cc:ee:35:c6:fe:
fa:86:f5:c2:e0:6d:c3:ba:31:6b:52:9d:a8:30:1c:
49:be:7b:d1:a7:d3:dd:71:79:92:76:39:f9:9c:83:
96:b9:da:ca:05:25:fc:40:3d:a5:87:05:5a:2a:46:
32:5f:92:81:2a:7c:72:2e:13:4c:bc:ef:c1:7d:05:
d3:a7:fc:5a:70:a3:0d:8f:dd:11:ac:2e:1a:5e:de:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:E6:A8:60:16:DA:C1:60:2D:D5:5D:89:49:CA:C7:A9:FA:4F:DD
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/E2ADA1E4AE8311F196A6E2687011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.4.0/23
103.178.56.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:16:73:d0:63:3c:53:37:36:64:9d:e7:a3:4b:ba:c7:8b:f7:
b0:53:dd:a8:e4:c2:8c:82:d9:9f:ae:50:5e:24:fb:ef:9d:e6:
88:cb:85:34:69:c6:35:ca:27:c8:b2:99:77:f1:0b:9b:64:4a:
08:d8:ec:2a:1e:95:1b:12:73:5b:61:df:b2:9d:75:f3:46:8c:
95:c2:53:15:81:f7:be:cb:3a:35:1a:4f:b1:96:0b:d3:bc:e4:
c9:2b:de:d6:10:d7:47:0e:14:24:f3:52:c4:02:fc:5f:5e:c1:
77:7d:5e:4f:a9:4c:36:22:c1:ea:fb:46:a0:08:a7:7e:48:b0:
4f:e4:af:91:9b:7d:59:a8:fd:44:a7:51:eb:76:4c:07:dc:48:
f2:a1:90:8a:cd:c2:88:12:7f:ec:72:7f:df:c5:61:8c:d7:d0:
42:d3:7f:05:28:1d:0f:d6:73:60:be:32:68:2c:1d:cb:ab:ca:
6c:b4:f6:91:a2:d2:b6:c0:cc:fc:d9:cc:79:12:6e:ef:ed:b3:
e2:d7:1c:d5:0f:00:cd:61:b6:e5:a7:e8:64:c5:f8:a7:b0:1e:
36:c1:01:8f:9e:df:37:7f:62:d3:d4:8e:51:32:d5:00:f1:80:
70:09:7a:5f:23:49:de:f4:9c:4c:6e:32:2c:e2:e0:b3:f3:25:
8c:1b:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:08:05 2026 by rpki-client