
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/97871B1E759A11EBB06FC386C4F9AE02.roa
File: 97871B1E759A11EBB06FC386C4F9AE02.roa (raw, json)
Hash identifier: ueoiSX5M1HmW1DCfbC9sAI6bcJIcYqIr1H63oluuRyc=
Subject key identifier: C8:27:EE:B2:4E:4C:60:8A:5A:23:B4:4A:8E:78:80:65:0D:A5:F4:3C
Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Certificate serial: 0733
Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/97871B1E759A11EBB06FC386C4F9AE02.roa
Signing time: Tue 28 Apr 2026 22:28:48 +0000
ROA not before: Tue 28 Apr 2026 22:28:48 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 141740
IP address blocks: 103.163.50.0/23 maxlen: 23
103.163.50.0/24 maxlen: 24
103.163.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Validity
Not Before: Apr 28 22:28:48 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f1349f-e246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:d1:86:e1:6d:3c:dc:6d:e0:e0:df:51:e4:
a8:5f:52:e1:3f:ef:a0:d2:ab:66:57:8d:be:04:14:
63:c9:55:16:db:47:e3:96:ac:b0:2d:ac:1c:2a:06:
c4:79:ac:c1:6a:6e:22:05:d9:1a:bb:f2:1b:e5:8a:
1f:39:24:54:ec:fd:77:66:13:bc:96:f3:59:7c:17:
73:99:7d:d6:7b:bb:6c:2c:fe:cc:db:98:86:67:23:
5e:45:27:40:9e:33:bc:38:92:df:e4:e8:b8:21:30:
bd:dd:4f:4d:07:53:ec:e0:06:a5:1d:d5:37:9b:cb:
72:d5:c3:9c:56:48:a5:ce:98:04:d3:af:6d:2b:c1:
4c:53:24:0d:27:4e:bf:fe:b7:07:af:3d:f7:7c:a4:
c1:4a:04:de:1b:19:86:4d:f3:2e:e8:91:5b:83:8b:
45:61:89:af:bf:bf:1e:3f:44:5f:7b:f2:96:e9:f5:
ed:0d:81:11:57:d4:5c:d4:55:a5:e8:df:0b:6d:a5:
2e:77:7b:bb:0b:8c:86:1c:f4:98:1c:42:5a:2c:eb:
83:83:a9:5a:16:30:60:6d:34:cf:ce:3d:39:c3:73:
7d:69:6c:98:89:d8:da:04:c7:5b:c4:bd:41:27:d1:
52:bf:aa:2a:b7:d4:f7:99:94:24:09:d2:b5:46:eb:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:27:EE:B2:4E:4C:60:8A:5A:23:B4:4A:8E:78:80:65:0D:A5:F4:3C
X509v3 Authority Key Identifier:
keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/97871B1E759A11EBB06FC386C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.50.0/23
Signature Algorithm: sha256WithRSAEncryption
46:57:d7:80:3c:c4:80:a0:d4:53:cc:4c:60:cb:ee:bb:97:c4:
33:4e:dc:70:96:7d:76:f9:19:b7:3b:e7:22:02:0f:fb:ae:c2:
3b:c7:e7:ff:12:11:dc:64:f7:e8:39:65:12:cc:bd:f8:15:c2:
0d:a6:73:0a:ba:9f:20:18:f1:ad:8e:c9:15:f9:7a:28:eb:97:
74:92:ae:ad:ce:2c:2f:83:ee:36:25:c6:6f:ec:e3:e9:f5:dd:
ef:98:7b:7e:ce:19:f0:51:59:e4:aa:3c:a2:74:22:98:34:44:
6c:ec:40:84:dd:09:25:85:ca:bb:af:8a:d5:8c:9c:0b:47:51:
dc:66:21:32:74:e6:37:58:f8:2b:b2:65:1b:ab:c5:3e:49:30:
52:fe:e7:42:ea:e7:86:33:65:b3:3b:19:71:97:0b:ce:ef:ec:
83:52:72:bb:5d:e5:f1:76:f1:d4:b0:35:3d:a7:10:cc:b5:5b:
7c:e4:5a:c6:54:f9:69:62:99:fa:3a:fa:f0:2b:07:a1:79:de:
43:c6:08:fa:f2:3e:0c:05:75:75:c6:75:64:1f:82:7e:4a:c5:
8a:4b:71:a4:94:c0:11:51:9f:1e:82:f9:8f:e1:68:50:2a:ec:
17:03:b7:e9:28:4d:51:8d:92:1b:25:19:89:9e:0e:b3:fb:b0:
b7:87:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:48 2026 by rpki-client