
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/DC83478EEB0311ED875DD72EC4F9AE02.roa
File: DC83478EEB0311ED875DD72EC4F9AE02.roa (raw, json)
Hash identifier: NK1hqtZdCO6WmHvrmwdW3dn10uFeaY5J8E6tA43KEZ0=
Subject key identifier: 42:17:F6:9E:3F:B8:45:92:ED:83:54:10:A3:0E:CE:23:24:7B:28:E6
Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
Certificate serial: 1155
Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/DC83478EEB0311ED875DD72EC4F9AE02.roa
Signing time: Tue 16 Jun 2026 17:20:24 +0000
ROA not before: Tue 16 Jun 2026 17:20:24 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137271
IP address blocks: 103.209.4.0/23 maxlen: 23
103.209.4.0/24 maxlen: 24
103.209.5.0/24 maxlen: 24
2406:bf00:1::/48 maxlen: 48
2406:bf00:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl
rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4437 (0x1155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
Validity
Not Before: Jun 16 17:20:24 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3185d8-eb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:99:7b:5c:37:c7:2b:c3:cf:02:8d:8b:e8:
f0:47:66:38:50:45:6b:6a:1a:ce:88:70:eb:8e:4b:
fd:18:3b:07:64:ce:2e:40:dc:24:ce:7f:9d:a0:0d:
fc:cf:3a:6e:22:ed:d0:85:1b:3c:6c:7a:d7:7d:2e:
8b:55:b0:35:e3:65:b1:21:56:0d:d0:1d:8a:ce:71:
62:80:47:74:e7:e6:2e:9c:11:32:1f:ba:97:75:60:
ea:d3:6e:2f:12:97:f1:c6:e9:af:eb:08:b8:db:4a:
30:4c:57:3c:07:8e:79:f3:5b:e1:71:08:90:cc:e6:
b3:e0:6e:b1:3d:9a:f8:08:a8:93:0f:7a:57:da:e5:
79:6f:c2:cd:fa:01:e1:97:ea:3f:e2:e3:7c:1f:31:
4b:2f:c2:29:d3:2d:3c:86:d3:21:27:7f:66:12:ad:
5a:79:6b:08:6e:e3:6d:b5:87:5b:7e:5d:f3:1c:4b:
97:25:f9:42:b7:53:f9:aa:d1:05:e1:ed:b6:59:60:
72:54:52:e7:49:2e:e9:15:3c:b4:0f:2a:b8:69:aa:
83:ec:69:15:f7:70:55:d7:f7:45:42:79:6d:c2:36:
17:d8:c5:26:df:68:25:2f:7e:3c:ec:02:10:ed:53:
55:dd:11:54:c2:5a:33:36:50:46:c4:aa:a6:1a:e2:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:F6:9E:3F:B8:45:92:ED:83:54:10:A3:0E:CE:23:24:7B:28:E6
X509v3 Authority Key Identifier:
keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/DC83478EEB0311ED875DD72EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.4.0/23
IPv6:
2406:bf00:1::-2406:bf00:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
aa:36:66:14:88:fe:58:bb:ef:da:32:f7:77:97:2e:54:c5:2c:
c1:f0:41:19:ef:dd:4b:24:71:27:79:c8:ac:65:f7:28:40:13:
01:5f:52:86:79:b6:da:d8:75:2c:86:ef:35:6d:13:c8:c2:80:
41:3f:d9:d0:86:c0:d8:4b:05:ca:d8:5b:d9:15:c0:50:ad:7e:
b4:6c:c3:88:a2:f1:c6:55:9b:1e:80:8c:44:96:43:4a:2c:37:
9c:e3:13:ea:48:87:e0:46:21:47:c6:46:c3:57:04:2f:f4:24:
ac:d5:bf:2c:a5:10:c1:cc:ee:60:43:5d:7a:17:d0:44:d2:7e:
a5:6c:ae:e9:53:94:68:b3:1c:ae:cc:33:00:15:49:16:27:7d:
a3:dd:8f:d8:bd:84:1f:55:07:d7:a2:af:1f:26:6f:a4:07:4a:
90:77:95:a6:a4:a5:76:42:f6:7d:57:00:17:66:0f:23:54:a3:
db:09:1c:aa:08:0c:d9:bf:8e:20:bf:35:2e:3e:5f:76:94:00:
e1:4b:d3:8a:5b:6e:96:b9:7b:78:c9:ae:54:15:01:74:7e:62:
47:71:45:eb:f6:ae:08:ef:6f:ce:77:3a:f6:47:3a:65:49:56:
42:79:4a:35:d9:54:4f:01:f9:4c:a1:41:46:63:ad:53:ef:96:
d0:58:1b:5a
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgICEVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE
REVFMTJEQUIwHhcNMjYwNjE2MTcyMDI0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMxODVkOC1lYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4JOZe1w3xyvDzwKNi+jwR2Y4UEVrahrOiHDrjkv9GDsHZM4uQNwkzn+doA38
zzpuIu3QhRs8bHrXfS6LVbA142WxIVYN0B2KznFigEd05+YunBEyH7qXdWDq024v
Epfxxumv6wi420owTFc8B45581vhcQiQzOaz4G6xPZr4CKiTD3pX2uV5b8LN+gHh
l+o/4uN8HzFLL8Ip0y08htMhJ39mEq1aeWsIbuNttYdbfl3zHEuXJflCt1P5qtEF
4e22WWByVFLnSS7pFTy0Dyq4aaqD7GkV93BV1/dFQnltwjYX2MUm32glL3487AIQ
7VNV3RFUwlozNlBGxKqmGuJ8AwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFEIX9p4/
uEWS7YNUEKMOziMkeyjmMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0
MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0YyODUvRkQ2NEYwQjgzNDBDMTFFOTk2NkM1QTc2QzRGOUFFMDIvREM4MzQ3OEVF
QjAzMTFFRDg3NURENzJFQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAM
BAIAATAGAwQBZ9EEMBoEAgACMBQwEgMHACQGvwAAAQMHACQGvwAAAjANBgkqhkiG
9w0BAQsFAAOCAQEAqjZmFIj+WLvv2jL3d5cuVMUswfBBGe/dSyRxJ3nIrGX3KEAT
AV9Shnm22th1LIbvNW0TyMKAQT/Z0IbA2EsFythb2RXAUK1+tGzDiKLxxlWbHoCM
RJZDSiw3nOMT6kiH4EYhR8ZGw1cEL/QkrNW/LKUQwczuYENdehfQRNJ+pWyu6VOU
aLMcrswzABVJFid9o92P2L2EH1UH16KvHyZvpAdKkHeVpqSldkL2fVcAF2YPI1Sj
2wkcqggM2b+OIL81Lj5fdpQA4UvTiltulrl7eMmuVBUBdH5iR3FF6/auCO9vznc6
9kc6ZUlWQnlKNdlUTwH5TKFBRmOtU++W0FgbWg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 12:21:48 2026 by rpki-client