
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa
File: 975A513293B011EF9203EA6BC4F9AE02.roa (raw, json)
Hash identifier: PsUZYEFQ3YDAk7SEhruCNoeg40A0hC1loDNctnkPink=
Subject key identifier: 11:26:B4:9D:94:5E:AE:D9:08:7E:09:C8:A6:0B:FE:1B:68:8B:5C:94
Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Certificate serial: 0269
Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa
Signing time: Sun 11 Oct 2026 03:51:44 +0000
ROA not before: Sun 11 Oct 2026 03:51:44 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 140632
IP address blocks: 103.203.236.0/24 maxlen: 24
2001:df4:4cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Validity
Not Before: Oct 11 03:51:44 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acb07cf-1c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:7e:e8:f7:84:67:ae:44:2a:e8:95:e6:3c:
eb:1a:51:d1:1b:34:c7:90:62:ef:d7:3e:66:06:54:
d8:c8:9f:18:c1:7c:5c:61:63:62:ce:f0:22:72:b9:
2a:3e:75:97:db:22:f7:90:ef:2f:98:a8:a0:0b:1f:
e0:72:b2:0e:a0:67:df:e3:e8:0e:48:12:21:f0:80:
dc:df:42:d9:ff:0b:44:c9:6c:75:ba:9d:3e:5a:51:
bc:57:3c:5b:c2:01:dd:11:54:58:20:a1:9c:64:07:
3f:db:52:7f:2c:98:76:5f:5d:2d:c3:8b:6a:ca:d7:
e1:3d:e0:4f:01:05:4f:5a:db:b3:ea:b1:b9:a2:76:
3d:45:e0:94:a3:b2:28:bb:93:1b:91:26:e7:4f:45:
ef:39:c0:85:01:18:59:fe:82:6f:b9:4e:45:a0:e4:
12:96:d7:9f:7f:4e:c5:af:fc:8a:d6:7d:27:31:d5:
c0:b3:4c:b0:c4:28:fa:a2:09:0a:63:f9:e1:39:38:
37:f0:20:7a:d9:00:5a:94:b0:36:a5:3f:2b:9f:b8:
ec:c4:b3:51:dd:c1:9b:ce:62:5d:9f:d1:cd:36:b9:
e3:ab:48:09:3d:6f:21:28:e5:da:e2:2b:59:67:63:
35:60:47:f7:30:b4:6a:50:02:95:43:80:92:8d:94:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:26:B4:9D:94:5E:AE:D9:08:7E:09:C8:A6:0B:FE:1B:68:8B:5C:94
X509v3 Authority Key Identifier:
keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.203.236.0/24
IPv6:
2001:df4:4cc0::/48
Signature Algorithm: sha256WithRSAEncryption
34:50:07:be:17:f2:f3:5f:5d:9e:1b:b8:82:bd:bb:d4:6c:e1:
e5:58:18:e4:cc:bc:8d:b7:a1:23:b0:67:27:1d:17:b8:dc:c1:
c5:87:86:06:86:e2:16:e4:3c:75:99:60:f6:1e:38:a3:1b:0d:
93:97:7d:0f:9c:02:ff:ac:cf:ed:d8:a5:39:e1:5f:4c:13:94:
01:e5:48:f6:22:65:f7:7d:5a:5d:6b:72:74:b6:9a:a6:b2:d0:
c7:61:f3:60:c0:08:5c:50:f2:8b:12:3f:9f:a3:ee:ae:dc:13:
59:88:8e:ea:51:3c:7d:6e:0a:57:bd:8c:51:9c:f1:c1:06:2e:
5c:26:ae:9f:d4:a4:5c:50:de:63:c4:ff:bf:43:15:f4:a1:9b:
c1:14:8b:de:ad:23:f8:38:0e:1c:e5:02:ba:18:e6:16:c2:6e:
93:25:06:91:91:ae:36:c8:9f:0b:f9:59:2f:c3:9f:1e:de:52:
fe:42:4a:5b:1e:f7:ac:9b:00:5a:ff:06:5b:8c:8b:7b:de:2a:
27:48:9c:d7:11:b7:c6:66:7d:a3:dc:e3:fc:af:42:24:24:40:
06:ff:44:f3:7d:f3:ee:38:5f:d9:94:2d:35:7f:3d:08:71:6d:
84:02:b2:f6:15:a6:41:3b:e4:33:69:f4:4d:7d:98:d1:9b:ef:
f6:8b:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:48:15 2026 by rpki-client