
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/3A4918D41DED11F18280100E163D8C67.roa
File: 3A4918D41DED11F18280100E163D8C67.roa (raw, json)
Hash identifier: uBhMZC0iLLV6DLGdu7CIjfThpqfIINH0g+r6R069pHs=
Subject key identifier: 11:07:A2:14:0F:5B:97:0D:09:7D:F3:90:0F:A1:03:E8:63:0A:4B:80
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 091F
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/3A4918D41DED11F18280100E163D8C67.roa
Signing time: Fri 28 Aug 2026 20:40:23 +0000
ROA not before: Fri 28 Aug 2026 20:40:23 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140980
IP address blocks: 103.154.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Aug 28 20:40:23 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a91f237-7147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:12:01:a2:57:a3:3a:b6:aa:ab:ee:e8:32:
c3:59:c1:65:17:35:50:ad:20:aa:cb:bb:78:5b:7c:
14:60:af:21:94:d3:ba:70:aa:be:5b:81:ce:ef:e2:
da:45:10:e5:c6:c0:36:c0:ea:d6:45:60:37:14:da:
65:20:a8:d8:6d:a4:52:a4:86:6d:9f:eb:f5:18:01:
10:fd:fd:39:34:fd:fa:12:46:82:05:37:0d:66:fa:
c4:57:d4:92:ec:cb:7e:d7:9e:95:0f:2c:4f:01:b5:
9b:cc:ee:7f:61:48:bd:08:15:2a:4d:59:b0:aa:23:
95:41:a5:a7:a0:9e:85:b8:f2:cb:0c:7d:a2:f5:cc:
e7:9b:ba:0a:f7:2f:a6:0b:55:36:0a:e1:4b:0d:64:
86:a6:5c:bc:3c:49:99:15:f7:77:9e:ae:24:91:9a:
f3:d2:ff:8c:63:90:96:cc:16:47:23:ea:df:bf:1a:
aa:ab:8d:e2:21:48:78:dd:2b:b6:c5:52:0b:7c:e2:
e1:ba:b8:3d:cc:61:3c:ce:83:5c:ad:77:da:f7:29:
5e:f6:0a:a9:0a:1c:03:8d:6f:83:04:50:2e:eb:69:
90:03:9b:a6:61:fa:7c:b5:64:c8:69:14:2f:92:90:
d8:56:0f:7f:46:d1:aa:cf:b4:89:c9:9d:ab:d3:86:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:A2:14:0F:5B:97:0D:09:7D:F3:90:0F:A1:03:E8:63:0A:4B:80
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/3A4918D41DED11F18280100E163D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.16.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3e:61:42:8e:07:3d:af:13:6c:82:6c:c8:4b:5d:db:fb:d7:
c3:34:c2:a0:a0:24:2f:08:4f:b4:21:14:54:59:9e:33:d2:8c:
77:31:3d:ad:70:3f:13:13:6d:3e:81:fb:6e:df:c8:a5:35:4c:
20:17:29:a5:d8:ea:f6:cb:ba:81:40:ec:0a:8d:70:58:60:0b:
14:79:5c:a1:b8:00:a4:e6:5a:74:18:6b:24:9d:1b:36:36:cd:
ed:f1:5f:c9:37:dd:e7:ab:48:7c:0f:ea:cd:14:75:0f:8d:1d:
34:41:d2:36:51:30:df:80:01:89:fb:31:8e:e2:29:70:e0:a9:
be:2d:1a:b5:3c:94:8d:d7:2a:26:8f:ec:15:b7:70:57:a3:5a:
e0:6a:f8:60:c1:4b:ce:28:ef:a7:89:d0:b7:a0:94:fe:dd:a2:
2e:99:35:5e:a7:3e:b2:c5:12:cb:0b:6e:c1:0e:17:28:bb:2e:
aa:25:b9:12:cd:a4:97:f0:fd:d5:3f:07:b7:e6:1a:bc:bb:2b:
f0:a7:e3:2a:df:ac:dc:1b:0e:7d:28:11:ba:07:19:c9:ba:47:
3a:e1:c2:7c:5f:68:63:99:ae:6b:b4:a4:88:62:9d:4e:97:f2:
f0:d8:b8:77:7b:c2:d2:18:bf:f0:7f:72:58:3d:28:30:69:19:
43:d1:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:04:53 2026 by rpki-client