
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/11F818F81F7311EC9027050AC4F9AE02.roa
File: 11F818F81F7311EC9027050AC4F9AE02.roa (raw, json)
Hash identifier: ZX6blC5kRBbotckuxdqdmxU7vPtnpWGly7A4f1X6zkQ=
Subject key identifier: 31:D0:FE:64:39:0E:D3:9A:C9:2D:EC:67:0D:07:74:5D:66:64:3E:FB
Certificate issuer: /CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Certificate serial: 05BB
Authority key identifier: D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/11F818F81F7311EC9027050AC4F9AE02.roa
Signing time: Tue 28 Jul 2026 23:45:29 +0000
ROA not before: Tue 28 Jul 2026 23:45:29 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 140888
IP address blocks: 103.152.236.0/23 maxlen: 23
103.152.236.0/24 maxlen: 24
103.152.237.0/24 maxlen: 24
2406:3740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1467 (0x5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3603, serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Validity
Not Before: Jul 28 23:45:29 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a693f19-e2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:12:ac:1f:32:34:a3:41:9c:7c:af:2b:8c:
8d:68:cb:ba:86:4b:62:e5:37:a9:bf:78:c3:30:48:
a4:37:2b:0d:82:04:0f:9d:31:7b:a2:b3:59:b2:47:
ec:11:07:2a:fb:dd:9d:bb:96:47:74:7e:99:66:3a:
7d:12:c1:46:62:40:16:9f:dd:21:b5:d6:41:f4:e9:
66:89:46:a1:a9:83:a3:55:f9:71:4e:45:6b:90:1d:
d0:10:bc:e3:11:03:95:1f:8b:51:09:d4:c5:b7:a3:
89:32:ad:db:98:a8:0e:2b:f1:9f:64:e1:69:92:7a:
f9:36:1f:d1:6a:dd:75:10:7f:44:0e:d5:20:bc:dd:
f1:01:c1:2b:89:2d:4a:7c:9e:85:95:58:8e:2f:0a:
7f:ef:0f:13:24:54:e9:27:c8:fb:eb:70:91:df:28:
f3:68:25:67:51:23:74:79:4a:5c:ac:60:c0:19:ea:
d5:65:d8:5d:5c:9c:7a:f1:03:1a:0c:0e:37:df:02:
0f:99:9a:d9:b9:d0:c7:34:31:9b:af:2e:98:d8:dd:
76:cf:4f:e8:51:51:35:c4:be:ae:5c:d5:46:a6:5f:
b0:8a:2d:9e:d4:c4:a7:66:38:e0:58:90:c4:4f:fb:
b7:da:9b:cd:9e:b1:2a:0f:d7:ed:6c:af:b9:67:2f:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D0:FE:64:39:0E:D3:9A:C9:2D:EC:67:0D:07:74:5D:66:64:3E:FB
X509v3 Authority Key Identifier:
keyid:D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/11F818F81F7311EC9027050AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.236.0/23
IPv6:
2406:3740::/32
Signature Algorithm: sha256WithRSAEncryption
04:f5:93:ee:97:fc:c5:01:a8:82:9a:da:f3:98:7d:c9:b0:81:
e0:b2:dd:df:49:1e:9e:d4:c7:1b:13:01:33:43:db:5a:61:da:
a7:14:fd:d6:f0:bc:84:62:62:ba:bc:8a:68:65:a0:cc:7d:28:
9f:b2:f5:a2:c4:f2:eb:b5:ea:21:dc:f3:60:21:69:ac:a6:38:
aa:c1:b3:fa:cb:ff:4f:cb:90:09:b7:33:a5:8d:b0:81:e2:05:
e5:98:e4:e3:e5:8d:1e:b5:50:45:87:69:21:59:b5:55:9b:3a:
26:ea:6a:fd:73:7b:36:a0:3c:a8:86:21:7e:7f:86:91:7e:75:
bb:81:f1:60:94:36:a8:da:58:0e:6d:1a:4d:18:28:6c:60:0a:
2f:cf:91:b3:b4:34:a5:99:dc:68:57:45:ca:3d:f4:08:c0:f7:
32:17:6f:f9:d7:16:1a:34:82:1d:b4:07:73:b7:c0:17:01:53:
29:ff:2b:83:f2:cb:ef:bf:e2:de:cb:aa:91:0d:0c:b6:6b:fd:
13:6a:f7:2e:d4:ff:5f:e6:9c:88:3d:45:f6:58:d5:10:25:b4:
6c:13:8d:1f:18:06:c7:16:29:55:14:45:06:21:00:0d:60:0b:
64:67:ac:fd:4c:73:ea:ea:e1:de:8b:b2:90:5a:3d:47:c8:fa:
f8:46:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:59 2026 by rpki-client