
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/D902277E8EA711F19DEFB3165011F970.roa
File: D902277E8EA711F19DEFB3165011F970.roa (raw, json)
Hash identifier: makP1nCQSr7msWQWb7v+jKtBFmxktQvlRg6b5kvtgUc=
Subject key identifier: 4A:B0:37:13:51:1D:CB:B9:7A:AE:28:50:79:01:A2:E6:CA:3F:6D:67
Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial: 05BD
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/D902277E8EA711F19DEFB3165011F970.roa
Signing time: Sun 02 Aug 2026 19:24:58 +0000
ROA not before: Sun 02 Aug 2026 19:24:58 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9288
IP address blocks: 103.174.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Validity
Not Before: Aug 2 19:24:58 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a6f998a-0c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:5e:40:b1:04:4d:af:9c:25:14:2c:7f:ae:
b9:7a:b7:dd:de:1d:08:36:c6:99:c5:f0:38:9f:df:
9e:a0:74:8b:35:d3:64:63:fd:53:d8:f7:48:6d:c7:
e6:a0:ca:f4:e7:f3:fe:8c:30:4b:ca:8b:83:ba:d2:
84:40:9e:f8:19:39:db:ff:00:d6:60:f6:56:70:b5:
e6:fe:63:af:06:4e:eb:1c:ff:fa:57:34:06:19:cb:
bb:87:e9:2e:e3:ba:ad:6e:16:af:32:f3:10:57:bb:
ae:89:98:55:c6:57:f9:73:06:7a:19:e7:2f:ad:f7:
f3:4a:41:03:b6:14:55:14:a0:69:f7:26:01:85:cf:
b2:20:0f:13:67:c6:c4:66:ca:14:5f:fe:dd:3b:e0:
e3:0e:3f:7f:57:ef:b0:c7:96:36:f8:7d:d4:99:32:
99:08:5b:db:7b:55:56:16:e6:fb:4c:c5:07:7c:e1:
97:21:f3:5d:36:64:1f:6c:c2:ab:29:fc:7d:04:d8:
de:31:62:8e:0f:65:a8:70:e3:ed:18:a9:d6:cd:d8:
04:eb:07:76:ed:92:ca:29:2e:f5:c1:86:55:c1:cf:
d5:28:dc:a8:76:d2:a5:a3:6d:dc:db:44:e6:3a:74:
cd:25:5e:59:50:0d:a7:4c:21:41:af:33:75:a0:69:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:37:13:51:1D:CB:B9:7A:AE:28:50:79:01:A2:E6:CA:3F:6D:67
X509v3 Authority Key Identifier:
keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/D902277E8EA711F19DEFB3165011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.44.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fa:da:89:19:d1:d5:97:0c:a2:1f:e4:4b:27:f0:8b:d5:ff:
13:32:91:fc:88:41:93:f0:18:1c:5e:e4:8f:74:7d:1b:a1:a2:
a0:b5:62:11:b7:66:5b:38:a3:2f:63:73:4e:39:2a:bf:f6:0a:
e8:90:16:89:46:61:66:19:6d:c5:fc:60:53:c8:05:8e:32:1f:
4e:e3:cc:34:9e:53:23:ad:dd:b3:e5:bf:72:e9:b9:d4:9b:8f:
20:c1:cb:79:a2:ea:45:cd:2e:76:ef:8e:f8:14:a6:73:aa:cc:
a2:fe:57:bb:1e:9a:33:0a:e6:2c:21:bb:3e:94:18:00:b2:91:
e1:70:00:d7:d6:51:4a:19:e7:26:0a:b2:cc:75:ac:3c:61:6d:
9d:6b:d3:e0:d8:69:e0:3a:c6:b9:e2:98:58:12:20:05:08:51:
57:66:17:5e:9f:f8:7c:e4:e1:69:0c:dc:68:d9:4f:91:a3:73:
8c:da:69:81:4d:91:90:df:3f:d4:46:92:1f:1f:84:ce:e5:6e:
64:a9:61:6c:fe:a7:27:85:f7:e6:02:f5:a9:6f:92:4b:e2:b8:
1b:e0:21:aa:a4:83:3a:5d:ab:6c:a1:bf:af:ff:e1:1f:55:c2:
12:2b:22:94:4d:82:b2:f8:4b:06:fb:ad:6d:5d:eb:c1:17:54:
15:f4:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:07:01 2026 by rpki-client