
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa
File: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (raw, json)
Hash identifier: LDiFdNaZoZIrEKZ4J2tu1FR/lQxHX7nyvF7xLwKiOpI=
Subject key identifier: 13:93:BF:9E:55:AD:01:D1:BB:3B:02:51:09:C1:5D:71:2D:1B:23:CE
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0C4F
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa
Signing time: Tue 18 Aug 2026 19:38:03 +0000
ROA not before: Tue 18 Aug 2026 19:38:03 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137884
IP address blocks: 103.116.116.0/23 maxlen: 23
103.116.116.0/24 maxlen: 24
103.116.117.0/24 maxlen: 24
103.116.118.0/24 maxlen: 24
2402:f940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3151 (0xc4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: Aug 18 19:38:03 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a84b49b-8f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:85:8b:ab:5b:e6:6a:06:c5:38:98:17:e4:
9b:7d:31:c8:eb:3f:5e:14:23:ce:d7:87:65:47:91:
c4:23:60:b7:74:72:44:06:9c:98:c5:8d:9f:a6:6f:
d8:0a:f7:ce:7d:b2:41:f5:e7:cb:cc:1e:52:be:b6:
1b:44:d0:87:f0:b1:56:ec:57:e6:7a:6f:68:78:43:
9f:e0:c5:be:45:cb:83:de:85:fb:62:83:41:f8:86:
41:f7:53:71:c8:9a:d7:f0:da:82:0b:1f:1a:63:d1:
68:0e:1f:fd:59:2a:c8:f0:f5:fe:28:e8:f1:dc:bb:
1e:49:b8:64:fa:d0:7b:94:e8:e7:ab:d3:da:d7:f8:
63:d8:2e:41:5a:ca:15:61:df:ff:1c:15:62:06:c4:
2c:dc:6c:0a:d4:14:95:81:c3:6e:73:9e:23:ad:a2:
66:e5:4b:63:ac:47:cd:e8:a7:dd:c5:c4:b3:eb:1e:
43:ba:8b:46:fb:50:72:ef:8a:e4:63:23:f9:52:54:
54:ab:92:38:4b:4a:b0:05:cc:8a:14:ed:cd:f2:99:
55:33:b6:0f:f8:c1:a8:49:d1:5a:45:be:87:10:01:
4f:c2:ed:df:c2:4a:e6:56:4c:01:6a:e6:08:69:b9:
d8:c3:c0:62:66:a2:f7:7a:99:eb:e8:4d:54:3c:ff:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:BF:9E:55:AD:01:D1:BB:3B:02:51:09:C1:5D:71:2D:1B:23:CE
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.116.0-103.116.118.255
IPv6:
2402:f940::/32
Signature Algorithm: sha256WithRSAEncryption
0c:e2:04:22:12:bd:38:9b:3d:ea:1e:ab:89:ec:7a:81:69:5b:
77:e1:81:9d:75:69:7d:2b:8b:43:48:e1:3e:04:a4:f8:61:63:
0c:43:bb:84:5a:d2:5b:bf:e9:a4:23:2d:2c:fd:6e:55:0d:01:
6d:70:ce:db:af:7e:6a:7c:c4:77:3f:32:72:c1:39:bd:5f:b3:
53:b6:be:87:65:6a:c5:e3:e3:0d:d6:14:61:7f:8e:b7:85:95:
71:13:a2:5e:62:61:70:09:ca:1b:84:72:f4:e9:e0:4b:7e:d4:
5a:25:d2:66:7f:67:2e:0f:24:87:3e:45:ee:d7:03:d0:87:d4:
6e:6a:99:5b:8e:bc:84:23:ca:c8:b2:36:47:df:76:05:e7:96:
99:7c:bc:51:ea:f6:37:db:2b:53:b1:99:89:48:68:7e:02:57:
1a:42:15:21:98:15:be:f0:67:93:76:b0:a2:9f:71:fe:dd:e6:
19:0a:e9:b2:36:b8:20:41:84:a0:4c:3c:42:da:44:f8:95:ce:
68:05:26:70:2d:95:4a:92:a8:7e:89:1a:e5:73:b1:05:e0:2a:
23:7c:2b:a1:e7:a6:7d:98:1b:07:03:85:a8:fc:09:6b:6c:01:
e3:8e:6b:45:d7:78:c8:43:c5:65:e4:21:11:94:da:e7:67:5c:
20:dd:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:58 2026 by rpki-client