
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa
File: 5334D20CDA5E11EBA323F462C4F9AE02.roa (raw, json)
Hash identifier: wpTOnbFzHuZykJ8pDXVXmzxxqZkD4nI9a0iplVk0s2M=
Subject key identifier: 45:D1:F4:FE:C4:FE:44:06:93:B6:A9:0A:17:43:72:D1:0D:6B:FC:33
Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Certificate serial: 0659
Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa
Signing time: Fri 26 Jun 2026 23:27:52 +0000
ROA not before: Fri 26 Jun 2026 23:27:52 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 14618
IP address blocks: 103.168.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 22:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1625 (0x659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Validity
Not Before: Jun 26 23:27:52 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3f0af7-2ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:d2:a0:e3:9a:a2:a2:33:28:79:84:c7:07:
ac:14:3d:76:a8:2f:62:1d:49:d8:62:7e:00:cd:ed:
cd:95:7e:6a:33:b5:44:4d:cb:a6:52:39:d9:79:dc:
63:ec:ef:8d:71:37:65:cd:39:48:4b:67:9a:9c:56:
e7:f2:da:8a:19:c9:f1:04:cf:57:3f:65:97:10:2b:
ae:4a:68:4b:db:4c:99:3d:f8:bb:79:2b:5d:cf:8c:
5c:e6:a5:fa:0e:b8:b4:de:8f:ff:df:56:43:bd:f5:
ce:2b:b3:30:fc:06:f1:5e:a5:ac:ba:42:f0:14:15:
a4:0d:03:c3:f0:b1:58:a4:8d:be:58:dd:60:3e:68:
45:7e:98:79:7f:e2:68:b7:1e:02:3a:eb:1a:46:51:
7a:f3:cc:c1:12:d8:a4:22:0a:ca:33:41:c7:7a:db:
b2:b1:73:0c:e7:28:d1:d8:98:6c:de:07:f3:37:d1:
bc:78:23:93:6a:35:ad:91:10:0a:43:b8:fd:91:19:
8c:90:cd:d0:dd:f7:ad:7b:38:56:78:0b:09:8a:73:
bd:e1:11:52:ab:a9:fb:c7:c5:7a:61:9d:ab:3d:ba:
86:6c:bb:39:ad:f4:dd:de:ab:a6:ca:82:14:3c:b8:
27:00:e3:73:95:35:6a:7b:63:fc:a9:42:ac:ae:2e:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D1:F4:FE:C4:FE:44:06:93:B6:A9:0A:17:43:72:D1:0D:6B:FC:33
X509v3 Authority Key Identifier:
keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.209.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:10:4c:c2:19:66:f8:22:2a:7b:5b:fe:09:a4:cc:4e:1b:1f:
96:d4:9e:76:eb:31:d1:ca:1a:7d:35:dc:42:61:a7:08:8b:5b:
bb:d7:b1:4b:7f:6c:0f:a5:b9:f8:dd:c3:96:6a:67:76:f7:0c:
7f:f3:d6:2d:8d:cc:33:96:2f:bf:41:00:46:97:c1:e5:20:f8:
9c:31:be:4f:66:61:48:6b:bd:6e:4e:ef:b4:fd:cb:34:41:9b:
e0:34:1e:e4:a6:1e:32:35:c5:2b:32:af:88:03:b8:64:b1:ab:
df:0b:ea:02:63:f0:e3:1b:b4:e0:7e:7f:e3:bb:ad:38:5d:dd:
4b:82:f6:ea:5c:a9:c5:98:77:81:57:a7:53:d5:46:b3:f3:69:
46:d2:31:77:80:07:3c:ba:32:85:a0:d3:aa:8d:ac:f2:b4:36:
5e:3b:82:ae:b8:e9:2c:49:4d:a9:03:f6:52:a8:6d:83:90:bb:
11:14:cd:be:bf:5f:db:73:8a:97:25:7f:81:ea:59:60:49:28:
6f:c3:78:f5:5b:6a:c4:7e:9d:a9:a6:b1:55:99:cb:84:9f:06:
7d:b6:a2:20:6a:c0:a1:fa:e9:8a:e6:36:16:64:c4:d3:e1:c1:
14:fa:a2:3b:6e:3a:d4:45:f3:f7:c3:30:b2:95:68:43:03:c6:
7e:6c:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:16:47 2026 by rpki-client