
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/AB4610AA7EAF11F1B80EBCC267A30FBC.roa
File: AB4610AA7EAF11F1B80EBCC267A30FBC.roa (raw, json)
Hash identifier: wQRLxoA9qZV0BONebLWf0R8evOJ58ij5lZ6xgC17bUU=
Subject key identifier: B1:DF:C8:ED:4C:5F:77:E4:50:12:A6:BB:88:22:33:28:CB:CE:0A:49
Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial: 098A
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/AB4610AA7EAF11F1B80EBCC267A30FBC.roa
Signing time: Thu 08 Oct 2026 20:40:42 +0000
ROA not before: Thu 08 Oct 2026 20:40:42 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 147003
IP address blocks: 103.70.224.0/23 maxlen: 24
182.255.60.0/23 maxlen: 24
182.255.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2442 (0x98a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Validity
Not Before: Oct 8 20:40:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ac7ffca-50f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:24:88:2b:34:76:fe:bd:43:8b:2b:04:91:
aa:2b:2b:22:92:92:3d:ce:9c:c9:eb:d9:be:66:f8:
0b:b9:a8:77:d9:45:86:08:bb:5d:62:15:85:97:54:
61:3d:8c:4a:e3:9b:f1:66:35:92:51:86:b3:27:78:
c8:41:9e:ab:b1:bb:b4:5d:ee:b7:83:b2:59:ef:de:
95:72:8f:0d:93:35:f4:c1:ca:1b:8c:de:96:fb:45:
78:1f:91:13:00:a9:5e:76:35:3d:05:b3:88:b2:d4:
a2:7b:16:49:ba:eb:1b:16:43:1d:c9:94:7e:74:2a:
7d:37:c0:3b:4b:6b:58:2b:b5:94:0d:56:a7:64:96:
a8:c7:eb:a0:4d:d0:d6:0b:49:b3:6c:0c:01:c0:34:
83:10:e3:96:6c:1d:af:8d:dc:3a:1f:b2:5a:9e:ff:
b9:82:0e:25:95:0b:82:5e:55:9b:5c:f4:15:26:ea:
ff:6f:f2:b0:a6:c7:da:1b:a9:ae:03:c4:23:b9:d9:
d5:a9:6d:fb:ba:ca:42:bb:00:04:a4:63:ea:dd:a9:
aa:9f:ef:70:75:d7:f4:05:45:17:53:47:3b:00:7d:
8a:7e:22:81:4c:4d:06:d7:30:07:4d:94:3e:19:e0:
57:40:68:ce:f5:df:53:54:55:3b:67:db:62:9e:bc:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DF:C8:ED:4C:5F:77:E4:50:12:A6:BB:88:22:33:28:CB:CE:0A:49
X509v3 Authority Key Identifier:
keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/AB4610AA7EAF11F1B80EBCC267A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.224.0/23
182.255.60.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:1d:ea:67:21:ae:0b:51:61:73:10:65:2d:67:cf:ca:07:59:
f9:57:6f:c2:62:0b:ba:50:94:c3:3e:a4:e3:23:55:24:77:bf:
a2:13:d9:eb:51:27:ea:71:16:05:67:39:55:d0:8e:af:de:9b:
ab:0f:bc:1d:9e:10:05:f6:33:39:d8:03:27:11:2c:b4:9b:a8:
f9:49:23:fe:fb:81:4c:a1:fd:50:5c:e2:cb:af:70:92:79:51:
7f:a3:49:bb:14:97:6b:61:13:8a:1e:6d:7f:52:40:bf:a6:b3:
15:22:cd:20:90:64:d6:54:10:64:6b:ce:77:91:d2:38:43:09:
78:c3:30:eb:b5:9f:c1:1b:0f:28:a2:e4:5f:d8:e5:9c:36:e5:
3e:08:94:1d:71:4f:41:86:6a:2b:70:5f:f4:6e:e7:ad:54:da:
fc:3f:75:7c:76:92:04:04:41:c0:1b:3c:56:86:ed:91:68:0b:
97:fc:b6:82:09:aa:29:53:b9:da:e0:22:b4:24:b4:f0:14:ab:
a8:e4:5f:2b:d9:8d:d5:a6:d5:85:74:e2:a5:c5:aa:86:2f:e4:
4d:85:97:b3:92:b0:15:b1:51:4b:86:98:d8:29:a7:68:84:49:
50:71:4f:40:00:e9:bb:df:e0:79:4a:de:27:fa:ef:3b:7f:ca:
d2:fa:bb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:58:17 2026 by rpki-client