
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/953DE998C7CC11F1ACF34C4A5511F970.roa
File: 953DE998C7CC11F1ACF34C4A5511F970.roa (raw, json)
Hash identifier: vp/ToHx9FzLbu7+lt1CfsmjwptDZTbZfXhs+z4b1FZQ=
Subject key identifier: 2C:C8:9E:3F:95:52:CF:C1:96:E2:7E:3C:89:F3:94:3A:1D:40:80:4C
Certificate issuer: /CN=A91E3813/serialNumber=F4F9F02866EE562777276EE88E01CE48AF1F6C0E
Certificate serial: 03
Authority key identifier: F4:F9:F0:28:66:EE:56:27:77:27:6E:E8:8E:01:CE:48:AF:1F:6C:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/953DE998C7CC11F1ACF34C4A5511F970.roa
Signing time: Wed 14 Oct 2026 12:41:32 +0000
ROA not before: Wed 14 Oct 2026 12:41:32 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136222
IP address blocks: 103.84.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.crl
rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3813, serialNumber=F4F9F02866EE562777276EE88E01CE48AF1F6C0E
Validity
Not Before: Oct 14 12:41:32 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6acf787b-d479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:5f:35:d7:51:8d:b7:7b:e9:f0:fc:34:eb:
3d:27:a7:6e:fa:b2:bf:43:d5:73:6f:08:c9:7d:09:
1f:92:f6:63:29:88:d2:17:97:c6:0c:83:65:70:79:
a4:24:29:f4:5b:6e:bc:d0:65:db:cf:f6:db:1e:77:
15:c1:57:54:a3:c8:76:31:de:b1:0e:bd:31:1c:94:
4a:fc:86:a9:03:55:e4:01:ba:5e:f3:6f:c4:71:05:
c3:3b:79:53:63:f4:56:5e:b4:c7:1e:61:56:20:09:
5e:f0:88:84:6f:f8:56:ac:f4:1b:16:b0:2b:c6:5b:
98:ff:92:d6:b3:98:45:e4:83:0b:9a:3b:35:81:ff:
cc:f1:ac:30:16:59:31:f7:1f:86:e0:79:bb:9f:1d:
ff:9e:15:da:a8:80:e3:b2:bd:70:22:77:48:58:c7:
79:73:78:d6:e3:9f:8e:a5:79:6d:86:85:5b:7a:b8:
01:13:e6:a6:2b:70:0d:55:91:83:cd:d7:b6:08:79:
76:63:9c:92:84:05:5a:d0:d9:75:ea:0a:47:f2:ae:
82:da:68:43:ab:6c:d4:23:6c:31:bb:fc:db:9d:38:
27:cc:3c:64:ef:cc:fb:1a:eb:26:29:b7:d0:a2:2c:
77:3e:0e:16:d7:72:c3:52:54:b9:ee:67:9c:a6:87:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C8:9E:3F:95:52:CF:C1:96:E2:7E:3C:89:F3:94:3A:1D:40:80:4C
X509v3 Authority Key Identifier:
keyid:F4:F9:F0:28:66:EE:56:27:77:27:6E:E8:8E:01:CE:48:AF:1F:6C:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/9PnwKGbuVid3J27ojgHOSK8fbA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PnwKGbuVid3J27ojgHOSK8fbA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3813/4477AEEAC7CC11F1AD0EAB3F5511F970/953DE998C7CC11F1ACF34C4A5511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.88.0/22
Signature Algorithm: sha256WithRSAEncryption
73:8d:03:9e:34:ba:ac:ff:cc:8a:43:77:79:fb:6e:26:cf:de:
23:30:f9:43:e7:4f:7f:1c:21:16:82:12:73:7b:29:18:4c:27:
d9:c1:73:39:4f:36:57:f1:fa:b5:91:b1:28:4c:f3:1c:73:15:
db:f6:3a:22:cc:8d:d3:40:59:2a:67:ee:43:0f:26:bc:63:52:
10:d4:ae:1f:30:9a:e0:70:9d:2d:1b:39:9a:25:fc:3e:02:f5:
b2:8d:c5:d5:09:d9:2d:29:bf:f0:19:68:06:ed:3b:87:22:a6:
77:cb:f0:2a:a5:6d:4f:3c:b5:14:dc:ed:ab:03:32:0a:d5:1a:
0b:e2:7c:0d:3d:48:e1:c4:6b:fd:b9:ad:1e:be:79:ed:16:85:
e1:0f:d2:ad:9e:14:d5:71:2e:03:60:22:14:a4:11:6b:84:10:
48:3c:b0:f2:21:ce:ba:5e:d0:fa:6f:8c:fd:97:a5:f7:3b:c7:
46:2b:da:31:84:30:6f:1b:79:5d:09:59:12:09:a7:9b:24:a1:
c6:04:e7:ec:f2:8d:08:07:8f:a1:e7:51:bc:be:f4:37:bc:5e:
42:43:a4:ac:10:20:25:65:71:0d:20:e3:7a:55:e1:27:40:26:
27:d0:6b:57:bc:c0:2e:12:f4:40:c6:97:0c:3f:03:98:57:8d:
36:52:b3:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:11 2026 by rpki-client