
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
File: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (raw, json)
Hash identifier: 94199H0m5snDXg4yX+SaoXi5ZwK9BEgICeRAS4T9VnI=
Subject key identifier: 6F:3D:4F:86:4B:E0:1C:ED:AA:3E:E9:D5:4B:21:90:56:76:C2:57:49
Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Certificate serial: BA
Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
Signing time: Fri 02 Oct 2026 20:39:51 +0000
ROA not before: Fri 02 Oct 2026 20:39:51 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 140896
IP address blocks: 103.153.30.0/24 maxlen: 24
2001:df4:2c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Validity
Not Before: Oct 2 20:39:51 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ac01696-42dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:72:80:61:cf:6e:55:b7:56:80:8f:de:11:
0e:75:5f:9e:72:be:77:12:76:26:10:69:87:8d:dc:
54:a1:f3:22:0f:d0:83:35:83:ae:12:c4:27:1c:fc:
4b:1a:41:ea:66:49:bc:26:e3:25:b4:57:75:cf:d1:
1f:bb:a0:b8:a3:20:1e:ef:eb:e8:a9:29:af:34:3b:
c3:9c:64:ae:6a:a4:27:a5:ca:1b:a2:af:95:98:b4:
38:43:76:9f:b8:f7:ea:dc:54:d6:07:c2:e6:00:28:
f9:56:e3:82:c8:b1:03:33:c7:38:e2:80:a0:9d:ec:
2a:55:90:06:b8:79:d6:0e:c9:2a:7b:24:13:63:bb:
19:3c:25:c1:c0:d5:1a:12:4c:1c:5b:d4:49:b6:95:
26:d2:49:72:cc:80:4c:32:bf:0d:d7:2d:aa:85:e6:
2c:6f:65:74:d8:5b:1f:db:f9:26:2f:1b:01:2d:32:
72:de:98:54:ca:11:a4:c5:bb:08:60:6e:17:ca:71:
23:9c:0f:8d:3b:ff:52:75:cc:19:24:0f:de:4b:05:
5d:09:ea:39:4f:96:80:f2:a2:0c:58:5c:8a:ef:00:
4b:1c:d9:f0:63:a5:3d:6c:31:8e:c2:77:4d:78:ad:
37:97:95:b3:b7:ef:b7:84:75:89:4f:42:c3:0a:58:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:4F:86:4B:E0:1C:ED:AA:3E:E9:D5:4B:21:90:56:76:C2:57:49
X509v3 Authority Key Identifier:
keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.30.0/24
IPv6:
2001:df4:2c80::/48
Signature Algorithm: sha256WithRSAEncryption
b5:5b:00:f8:fd:b2:d2:0c:71:ac:4c:46:8b:bb:26:0a:c5:e1:
4f:7e:f6:72:f9:93:65:4c:54:6c:a5:fc:e9:97:e5:72:a3:47:
45:7d:30:fc:26:d7:df:29:28:09:a9:93:11:1e:60:a9:b0:39:
b7:0b:75:03:59:04:e2:45:82:dd:c7:d9:f1:1e:e5:1e:46:e4:
50:92:8a:24:41:c6:d1:34:77:23:11:21:f2:62:5b:2e:d9:36:
45:ec:d6:de:83:7b:10:e9:41:86:69:3d:1e:1f:63:21:d8:e0:
c9:06:4d:e9:52:0a:43:f8:73:96:6e:4b:fe:c5:ed:04:bc:b5:
59:d0:2b:16:53:5b:84:b9:d2:1e:54:16:42:d6:f6:51:30:e7:
15:55:0b:6b:a4:3e:0a:f8:a3:5a:56:e8:01:b2:8f:0b:4d:7b:
03:4f:c0:d1:75:bf:b2:07:fd:22:28:08:ba:52:fd:fb:20:fa:
1a:a0:52:c1:93:f2:d7:25:1c:d8:8b:0c:ab:4b:89:8e:d3:e8:
ef:49:e0:0e:6d:83:c2:33:ab:72:74:cc:97:59:96:1d:d6:16:
3b:dd:19:1d:60:37:4a:f5:6d:22:8e:b7:d4:ae:43:6b:3d:08:
b8:4d:11:98:db:c7:f3:30:77:a7:cb:23:4a:57:79:c9:57:93:
da:9d:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:51:55 2026 by rpki-client