
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa
File: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (raw, json)
Hash identifier: aU5xrCVr0rx2dJrESHwVd+dJg3AOWpB3NnDDFJyaC0g=
Subject key identifier: 74:A5:FC:73:0A:B4:41:A8:BD:CE:21:79:16:16:48:34:06:92:D7:C6
Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535
Certificate serial: 0660
Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa
Signing time: Sun 30 Aug 2026 23:43:46 +0000
ROA not before: Sun 30 Aug 2026 23:43:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 142541
IP address blocks: 103.87.88.0/24 maxlen: 24
103.168.193.0/24 maxlen: 24
103.254.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1632 (0x660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535
Validity
Not Before: Aug 30 23:43:46 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94c032-6523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:b4:a3:19:54:f7:bd:bc:ce:49:3b:40:46:
62:7f:b3:f6:ac:24:6e:2d:bc:48:bf:d3:6a:69:e9:
8e:ac:e7:4e:41:84:88:db:40:49:80:de:09:66:3d:
c6:11:04:72:89:9e:ed:84:3a:2c:9c:9c:97:b2:78:
63:ff:45:06:81:d1:55:e1:ef:89:c2:57:20:55:7d:
51:11:a0:f5:21:ee:8e:c9:0b:3c:1f:b4:a0:57:d8:
90:49:95:d3:b8:e7:02:c4:f2:26:5f:f0:00:27:79:
70:a2:d1:9e:9b:a1:dc:68:28:53:4a:2c:4b:57:a4:
66:cb:04:46:81:da:de:48:8f:2a:20:c4:08:db:fd:
7c:c2:e1:0f:3a:fc:3c:a0:d2:d6:c2:0c:44:9d:11:
3d:3b:4d:dd:5c:f1:16:05:c1:9d:a9:99:e3:1d:7d:
12:99:86:2b:6f:50:22:34:d7:73:10:03:6d:79:e8:
66:af:7e:3b:ce:2a:af:7a:24:99:f8:a3:cf:8f:56:
25:0c:f3:b0:d6:15:d5:0e:ee:73:af:90:16:67:af:
b2:a1:1d:0d:fc:59:b9:65:c4:fd:01:d4:3d:84:12:
2e:00:62:cc:38:41:db:13:e8:5c:8b:f5:42:9e:2f:
99:77:18:a4:7f:5c:fc:78:6a:ab:89:28:9e:57:ee:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:FC:73:0A:B4:41:A8:BD:CE:21:79:16:16:48:34:06:92:D7:C6
X509v3 Authority Key Identifier:
keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.88.0/24
103.168.193.0/24
103.254.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:8d:da:8a:5f:09:02:92:aa:43:84:14:fc:16:52:a5:ea:cb:
32:01:fb:49:0a:85:ce:a7:8d:f4:a9:20:d2:77:4c:c4:d4:45:
c0:f8:4c:04:82:ae:3a:d0:85:6c:04:05:c8:1d:8a:8b:82:61:
c0:a9:56:a1:6c:0c:60:35:74:9c:e3:01:f0:a6:e6:81:e2:48:
84:3b:f9:6d:1a:24:f0:fb:a5:f4:fd:7b:bd:be:5f:9b:7e:4f:
e8:b5:91:2c:d3:b3:f2:2d:04:4f:9e:16:04:0f:31:d9:6f:d2:
2a:6f:d7:9d:f2:e1:25:72:3d:94:0d:9f:e9:26:95:9f:0a:18:
1b:aa:3f:21:c8:b4:25:1e:7f:f8:9d:91:c1:b7:27:39:61:0a:
e3:a5:55:80:c1:33:8d:7b:40:21:6a:e9:f7:78:d3:da:8e:9a:
1a:97:31:91:d1:02:18:77:17:53:97:bd:b1:99:b6:7f:f7:a4:
ea:7c:2e:e4:8f:ea:45:c6:d7:9a:20:1d:aa:8b:07:fe:d0:f8:
c3:d4:2c:a6:e9:90:ee:61:b6:e9:f9:c7:65:30:4f:35:3c:7a:
47:65:15:1a:8a:6c:7d:7d:20:33:a5:c9:7e:83:29:d7:97:d9:
ce:e0:e0:3e:b6:ef:71:bd:ec:d2:4c:e4:6d:93:dc:b3:ef:52:
0e:80:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:40:39 2026 by rpki-client