
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa
File: 623705DA339111ED9249064BC4F9AE02.roa (raw, json)
Hash identifier: roernNB+OJNNt1UVzBh6SQSSqUE+e0U1ZxC3K0oXdnw=
Subject key identifier: 25:9B:47:D7:A6:36:BB:6F:8E:CA:75:92:8D:2D:A7:F8:C8:19:D7:D3
Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial: 02D3
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa
Signing time: Tue 19 May 2026 01:32:35 +0000
ROA not before: Tue 19 May 2026 01:32:35 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 133209
IP address blocks: 103.186.102.0/23 maxlen: 23
103.186.102.0/24 maxlen: 24
103.186.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Validity
Not Before: May 19 01:32:35 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a0bbdb3-a053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:38:91:61:ed:c0:54:7e:31:fd:6e:17:c3:
6b:d4:6e:93:fa:e6:80:47:d7:3e:dc:93:98:04:63:
20:93:29:fa:ac:c5:66:fc:08:be:84:45:72:ed:b8:
0d:ad:c3:bc:66:3f:89:59:99:43:3e:9a:6e:fd:cb:
0c:57:cd:91:82:cc:92:ea:9d:a0:16:cf:cc:1e:a9:
7d:df:0d:0c:0b:6d:eb:f3:c8:9c:29:c2:a9:4d:14:
94:0c:08:2f:36:17:80:7a:f3:5d:a8:43:d5:f1:23:
84:de:dd:6b:9d:9e:13:04:ee:04:5a:07:ed:04:de:
5e:38:21:10:3c:15:7e:77:01:f9:63:f8:d0:4f:e2:
d6:44:5e:67:00:a1:e9:88:54:64:8c:21:2f:ae:a9:
b7:dd:ba:d0:7d:e8:78:d2:b1:45:d2:97:a5:3b:58:
04:82:55:d5:48:8b:69:bb:ed:53:82:c2:05:fa:2f:
30:3a:53:7a:1f:af:19:ae:e1:38:73:25:09:c5:da:
51:dd:2f:62:61:f6:7c:13:d8:d9:0f:61:04:69:2e:
ab:58:c5:db:86:9b:ec:0e:dc:6d:46:23:5b:95:42:
ba:02:b4:6d:25:bc:eb:67:3a:ee:a3:3b:83:59:71:
e6:0c:7a:f9:af:a5:12:16:65:24:05:06:16:3c:90:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:47:D7:A6:36:BB:6F:8E:CA:75:92:8D:2D:A7:F8:C8:19:D7:D3
X509v3 Authority Key Identifier:
keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.102.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:74:ff:fc:4e:da:ce:8f:12:60:2b:3b:de:8e:aa:bc:70:eb:
6e:cb:74:cb:16:72:61:98:e3:9a:80:df:b9:9b:e4:75:33:87:
53:3d:50:b2:5d:5e:be:95:f0:87:03:66:24:d4:61:da:e2:d9:
5f:4a:aa:62:cd:b7:b7:43:78:ec:0c:a1:33:56:ab:91:00:66:
13:af:d3:eb:a9:09:54:0f:29:d4:ad:8b:ab:85:d4:55:70:99:
56:4f:87:87:18:90:e5:53:ad:6a:9e:9f:3c:2c:cb:b6:87:7b:
69:3e:b4:34:fc:a4:96:6b:f1:86:78:38:4f:e7:b4:c5:d5:c2:
ff:51:ad:1f:7a:0a:49:8b:f2:4a:fe:66:05:83:e5:db:f8:d0:
8b:fd:62:07:7d:e6:92:23:20:56:02:d8:37:e8:6e:6f:43:d7:
41:fa:02:a2:f2:bd:b9:7a:e5:de:2c:c3:d0:5b:81:2e:99:9a:
ea:de:f3:90:7e:7b:08:2c:08:df:e7:c8:4a:bc:65:99:ab:d1:
80:93:25:26:3b:2b:c8:21:58:8a:7e:ef:2d:11:2c:c2:26:93:
49:e3:ff:b4:a1:c1:b3:45:75:02:b3:c3:67:b9:3a:be:25:18:
10:b1:62:57:47:5f:11:2c:b1:a8:d0:cb:e7:35:ed:15:e8:a2:
00:79:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:33:52 2026 by rpki-client