
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/0CA8CFDC905711F1B15AA74E5811F970.roa
File: 0CA8CFDC905711F1B15AA74E5811F970.roa (raw, json)
Hash identifier: XphOGJ9BdTHMwnBS3Q/8nyu3NmU9TeX660CUrNYCvTk=
Subject key identifier: 0B:F8:4C:3A:0F:D7:44:7B:B2:5C:A3:1B:ED:5C:D0:E5:8A:16:EC:52
Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial: 0989
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/0CA8CFDC905711F1B15AA74E5811F970.roa
Signing time: Thu 08 Oct 2026 20:40:41 +0000
ROA not before: Thu 08 Oct 2026 20:40:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137818
IP address blocks: 103.70.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Validity
Not Before: Oct 8 20:40:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ac7ffc9-1e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:80:8d:bd:98:30:05:9e:c6:f0:c3:ba:56:
52:61:c3:60:df:e4:b5:e7:1d:c2:08:5e:e4:ec:f9:
53:c0:8f:3b:4e:fe:c6:10:fd:7f:00:a6:1c:1a:8a:
b6:96:5e:c8:c9:b4:7c:c6:62:b8:50:aa:06:ea:2d:
e6:9f:04:e4:21:00:2b:8d:df:8b:cf:fe:f1:d0:e0:
0c:3f:f2:ee:39:62:12:42:15:85:58:10:9e:77:c5:
b0:28:3f:6b:84:a1:3e:58:d3:32:94:fc:d0:d1:a6:
f9:35:41:53:a1:a3:c7:19:81:82:50:9a:3b:f6:9b:
a5:9e:a6:f1:01:7c:61:93:83:6c:db:b9:7e:1f:26:
6a:3d:fe:66:1f:98:b5:88:98:48:6b:9f:5b:45:b2:
7c:d3:af:4a:85:b3:7b:29:95:cf:74:59:3e:e8:44:
5b:98:78:e1:57:1e:e1:74:af:06:d7:4f:7f:e7:62:
0e:47:8b:05:4c:c2:d3:4f:cb:0c:7a:ad:c1:d1:af:
52:ec:00:5f:d4:e7:16:ea:ec:65:87:56:70:3a:04:
40:ed:b7:e0:a9:80:33:3b:13:80:d9:1b:19:b9:2c:
e4:c5:64:42:9e:90:29:0f:6f:43:26:85:e5:14:64:
86:dc:19:d4:ab:c5:5f:bc:99:52:e3:62:f8:3d:a8:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F8:4C:3A:0F:D7:44:7B:B2:5C:A3:1B:ED:5C:D0:E5:8A:16:EC:52
X509v3 Authority Key Identifier:
keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/0CA8CFDC905711F1B15AA74E5811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.226.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:50:68:06:14:b5:90:7a:f8:98:50:5e:a0:d6:00:68:2d:68:
7e:89:24:30:52:77:68:7c:d4:01:41:8a:be:d0:96:49:b2:2c:
f8:d8:99:5e:79:a1:85:71:d1:58:65:fc:05:a0:be:78:ae:3f:
e1:26:b3:4d:9b:90:d6:24:b5:f5:70:46:10:63:e7:e1:c8:46:
ad:be:01:bc:26:f6:8e:e6:ec:3a:6c:dc:ad:f8:da:c7:ba:c8:
d8:c6:cb:b8:78:a6:d0:d2:b5:0f:1a:e7:c8:f8:4b:30:f4:9e:
7b:9c:c8:af:3e:6c:2c:7f:8f:6c:a5:a5:b4:13:66:d9:ae:cc:
75:11:2c:57:f9:71:6e:d0:c5:2d:ef:db:f3:b1:ea:3f:5a:2d:
ec:66:fc:2c:a3:d1:1e:23:6c:51:c7:0e:a8:9a:aa:4f:1f:c0:
0a:46:41:79:59:41:4b:98:0b:9a:2d:08:e1:61:62:df:e1:57:
94:04:52:f8:2e:3b:17:e2:76:22:05:7e:91:4e:4f:01:60:88:
38:e3:4a:51:a8:17:15:1e:98:11:ad:a1:2b:ec:b7:15:e1:69:
47:47:fe:c8:34:8b:1f:f8:02:3a:02:db:6d:c9:87:90:e4:4f:
d4:9a:12:0d:eb:1d:19:53:84:0e:a2:e6:59:36:3e:63:e3:ee:
84:fe:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:23:05 2026 by rpki-client