
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/653C22F441C311F0999A9935C4F9AE02.roa
File: 653C22F441C311F0999A9935C4F9AE02.roa (raw, json)
Hash identifier: vuLTolWemdL5ORncoMtpAT6VkMI3KntLr0DnhKdEBCE=
Subject key identifier: 00:56:7A:24:73:25:AE:DB:BE:E3:39:ED:CD:E8:F3:3E:C1:6E:C0:9D
Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Certificate serial: 0100
Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/653C22F441C311F0999A9935C4F9AE02.roa
Signing time: Sat 03 Oct 2026 07:54:47 +0000
ROA not before: Sat 03 Oct 2026 07:54:47 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 63126
IP address blocks: 103.60.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Validity
Not Before: Oct 3 07:54:47 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac0b4c6-2ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:70:5f:1b:83:7f:58:47:2a:85:3d:38:38:
8f:f2:c4:f0:98:03:16:9a:d1:c1:ac:a6:52:4c:49:
07:c0:a4:ed:39:bc:a2:15:c3:92:97:31:0b:c5:9b:
38:11:a6:76:3a:64:d0:45:b0:55:eb:d8:c0:0b:8b:
11:9b:ae:b7:1b:1c:fc:1b:08:7f:df:60:eb:11:27:
b7:57:53:31:46:07:8d:15:3d:ea:ce:42:4c:03:29:
ad:27:d1:88:39:0e:18:1b:79:fb:8b:ad:ae:44:e4:
d4:a8:c7:05:86:f3:87:43:69:fb:8a:5f:ce:5d:89:
0e:ae:8f:7d:54:f9:bf:ae:b7:45:52:2f:ac:66:12:
05:a7:3f:42:70:ae:49:5d:e0:4b:ed:20:fe:ac:f9:
ce:4f:9b:20:99:fd:80:aa:19:b5:38:6a:a6:4e:76:
a9:a0:63:dd:5c:05:77:91:34:6b:4a:3b:04:87:51:
80:2f:6c:24:22:c3:36:86:de:5b:46:63:a1:4e:67:
01:33:cd:84:95:97:08:48:70:4a:2e:8a:ab:3a:42:
25:ff:bd:f0:f7:40:fe:1c:fc:23:44:db:15:00:88:
c6:9d:83:af:12:81:c1:df:2a:dd:77:dc:46:47:9e:
70:94:b4:a0:71:f9:b9:8e:ae:7f:72:e4:e9:ae:95:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:56:7A:24:73:25:AE:DB:BE:E3:39:ED:CD:E8:F3:3E:C1:6E:C0:9D
X509v3 Authority Key Identifier:
keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/653C22F441C311F0999A9935C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.60.91.0/24
Signature Algorithm: sha256WithRSAEncryption
62:32:8b:5d:ad:e4:0f:f5:8a:88:d3:c8:ae:44:fe:1c:36:22:
65:54:67:15:f3:b5:cc:91:70:57:14:25:92:d1:e3:27:56:e3:
10:92:8c:70:99:b1:bd:6a:50:c2:fd:a8:47:88:87:52:90:22:
26:a5:5d:e9:9c:57:e2:f5:da:fe:08:ff:81:06:cd:31:a3:ba:
7c:86:eb:3f:25:11:e1:4a:38:b3:b7:f3:0a:27:40:90:3c:e1:
21:1d:8c:89:81:cf:85:5f:ca:d8:f4:e7:e7:a0:08:0c:89:01:
12:d9:c1:f5:a2:33:c0:9a:c5:8c:f4:6c:56:99:65:af:0e:0a:
50:22:65:56:69:fd:de:ab:98:60:c1:ad:99:f3:99:e5:80:13:
d7:d5:4d:34:cf:c0:06:4b:6d:c5:85:cf:61:66:72:59:93:9a:
30:f4:b4:a5:e6:41:3d:11:b9:7d:10:ae:27:b0:51:38:00:3c:
8c:bb:54:6f:a1:61:5c:b0:e6:ea:17:5f:e9:0e:82:1c:c6:3f:
36:b7:2a:a4:4d:75:01:8b:1d:40:c4:a8:c5:10:69:b4:72:3f:
eb:1e:88:2b:d1:bb:c3:5b:28:6f:30:85:c4:cc:92:92:30:a8:
e3:0f:e8:27:ac:30:91:7d:33:10:1e:91:95:9c:fa:10:93:7b:
8b:82:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:19:10 2026 by rpki-client