
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa
File: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (raw, json)
Hash identifier: ke0toGO035Z69Inr4Sq8z7Q3Xv7wkzEpWL2lK40GimM=
Subject key identifier: 3C:7B:04:08:1A:5F:3A:CE:8A:21:F5:E9:92:75:BB:ED:7B:4C:1E:91
Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Certificate serial: 0DDF
Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa
Signing time: Fri 04 Sep 2026 18:35:12 +0000
ROA not before: Fri 04 Sep 2026 18:35:11 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 212238
IP address blocks: 103.99.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 17:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3551 (0xddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Validity
Not Before: Sep 4 18:35:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9b0f5f-cbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:55:c3:18:65:5c:bb:18:82:fb:86:d5:ed:
06:71:93:7b:7c:2c:d0:ac:51:cf:54:21:d8:6c:11:
c9:22:57:a1:1c:92:c9:4e:93:55:0e:9f:42:99:67:
d3:4b:39:f9:cb:e6:b4:bc:ae:cd:e8:43:15:18:44:
cd:0e:11:24:0f:7c:b1:7a:b1:6e:ac:f1:b2:d1:65:
c0:00:77:51:89:f2:d8:a6:e1:3d:fe:63:3f:bb:42:
68:c5:af:b6:f3:e7:35:24:26:c3:8d:4b:59:f4:d4:
78:73:ad:55:12:77:e2:22:05:62:14:0d:d5:be:41:
49:0d:6d:2e:6c:26:d8:a0:38:49:5a:1f:d0:a4:44:
db:5c:44:f0:0b:00:a6:43:16:21:ff:cf:04:c8:1c:
fd:c6:2c:06:22:eb:c1:36:7a:6b:78:21:b5:b5:54:
3e:cd:16:f3:be:80:e2:57:f0:d2:43:f9:4b:60:bf:
56:84:0d:cc:e7:41:9a:18:ea:18:e8:7f:59:2b:ed:
7e:ed:88:28:c6:5f:5e:23:40:5e:cb:bb:21:72:68:
43:b6:36:1c:67:5e:43:3c:40:9d:18:31:7c:40:59:
5c:94:21:a5:a3:c1:9e:13:02:7c:33:c3:30:89:45:
26:07:5b:9d:56:26:d7:f1:a7:88:40:6f:62:1d:87:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7B:04:08:1A:5F:3A:CE:8A:21:F5:E9:92:75:BB:ED:7B:4C:1E:91
X509v3 Authority Key Identifier:
keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.87.0/24
Signature Algorithm: sha256WithRSAEncryption
21:aa:c4:5c:e6:4d:62:3f:05:92:e5:6e:6c:0c:29:2c:84:e7:
ef:7d:5e:f1:3f:75:9f:48:a7:e3:a2:e5:1c:93:43:6e:ee:0f:
12:d0:85:6d:d7:c7:fe:13:55:c8:09:54:96:df:4a:03:4f:e3:
41:7d:ab:98:d2:40:dd:e3:b5:10:72:f2:ee:c5:5c:83:ed:1a:
c6:87:bc:d0:a9:af:ac:6d:aa:68:80:68:10:65:d0:d7:5b:eb:
52:55:b3:86:a5:ea:62:22:7c:bc:97:52:b5:41:5c:d7:a6:ee:
02:95:6a:43:1b:6a:8f:15:56:49:47:fc:85:3f:92:26:08:62:
42:8f:cb:6c:97:6c:f0:1f:55:6a:bb:50:de:95:a2:32:7a:2d:
93:ba:4b:cc:5b:a9:ce:17:24:2c:3a:dd:49:9d:94:9b:72:d3:
87:74:a6:95:9b:56:ef:f2:53:13:bf:64:2e:87:be:99:f3:02:
15:d9:8c:6a:68:54:48:2e:ed:64:27:06:85:45:8c:ea:32:eb:
11:f9:16:b2:a4:72:8d:76:ce:0f:b1:ca:cf:b2:3d:41:c7:dd:
b7:fa:8b:9a:eb:aa:d6:e6:fc:9e:28:c8:c5:6b:43:71:29:5c:
ab:a0:ad:d5:f7:fd:59:f5:01:3f:58:40:4a:06:25:33:01:c8:
e5:6e:64:8e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0
MTg5QUYxOTgwHhcNMjYwOTA0MTgzNTExWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTliMGY1Zi1jYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx79VwxhlXLsYgvuG1e0GcZN7fCzQrFHPVCHYbBHJIlehHJLJTpNVDp9CmWfT
Szn5y+a0vK7N6EMVGETNDhEkD3yxerFurPGy0WXAAHdRifLYpuE9/mM/u0Joxa+2
8+c1JCbDjUtZ9NR4c61VEnfiIgViFA3VvkFJDW0ubCbYoDhJWh/QpETbXETwCwCm
QxYh/88EyBz9xiwGIuvBNnpreCG1tVQ+zRbzvoDiV/DSQ/lLYL9WhA3M50GaGOoY
6H9ZK+1+7Ygoxl9eI0Bey7shcmhDtjYcZ15DPECdGDF8QFlclCGlo8GeEwJ8M8Mw
iUUmB1udVibX8aeIQG9iHYdpeQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDx7BAga
XzrOiiH16ZJ1u+17TB6RMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy
RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI1NTEvREJGNkUxRDRFMkU0MTFFOTlDRDBBOTY5QzRGOUFFMDIvM0Y2QUM1OUVC
MjdBMTFGMDk1QjlDNjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ2NXMA0GCSqGSIb3DQEBCwUAA4IBAQAhqsRc5k1iPwWS5W5sDCks
hOfvfV7xP3WfSKfjouUck0Nu7g8S0IVt18f+E1XICVSW30oDT+NBfauY0kDd47UQ
cvLuxVyD7RrGh7zQqa+sbapogGgQZdDXW+tSVbOGpepiIny8l1K1QVzXpu4ClWpD
G2qPFVZJR/yFP5ImCGJCj8tsl2zwH1Vqu1DelaIyei2TukvMW6nOFyQsOt1JnZSb
ctOHdKaVm1bv8lMTv2Quh76Z8wIV2YxqaFRILu1kJwaFRYzqMusR+RaypHKNds4P
scrPsj1Bx923+oua66rW5vyeKMjFa0NxKVyroK3V9/1Z9QE/WEBKBiUzAcjlbmSO
-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:01 2026 by rpki-client