
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa
File: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (raw, json)
Hash identifier: QgqF58PL/WHxb7P9Tdfn5N/aixzF4pZA2mT5EsxMJlc=
Subject key identifier: A8:CA:6E:F8:D9:18:8F:92:42:6B:00:5A:BE:9B:E5:82:16:48:F8:DD
Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial: 12F0
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa
Signing time: Fri 24 Jul 2026 17:33:24 +0000
ROA not before: Fri 24 Jul 2026 17:33:24 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137947
IP address blocks: 103.118.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4848 (0x12f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Validity
Not Before: Jul 24 17:33:24 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a63a1e4-c93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:24:99:c0:0d:b4:cb:d7:62:71:08:6b:ab:
bc:3d:05:39:7d:35:e8:da:31:63:d1:8c:9f:2c:1f:
d5:1c:f1:33:a8:6a:8a:be:59:d5:fa:62:c1:b9:a4:
c8:ce:ce:7e:9e:22:08:57:18:8a:60:65:76:72:55:
74:ce:b2:7d:97:83:b7:3c:a7:52:78:77:10:af:28:
77:90:3a:00:82:74:81:8c:2e:66:38:0d:91:8f:b3:
a9:bf:f0:0d:43:6e:4e:c0:bc:c7:09:95:d2:43:d9:
5f:b4:21:c6:10:43:6e:70:aa:3a:ac:c5:87:55:aa:
a4:8c:55:31:a8:9c:24:12:39:59:de:31:36:07:48:
c2:fc:8e:cb:ca:6c:ea:0e:d4:5a:41:5e:07:f2:d3:
14:9e:54:1c:2c:ca:dd:4b:d8:15:ee:45:e6:36:7f:
73:1f:da:9b:1c:97:79:5b:05:33:c9:62:0a:03:1d:
39:a1:45:2d:89:ae:41:71:65:04:33:65:9a:c1:72:
78:a5:ca:32:8b:23:55:58:d3:73:e2:d5:4f:3a:4d:
42:54:a7:29:77:7b:ef:67:d6:1d:cf:90:e0:13:8e:
34:cc:82:39:42:59:e1:95:6a:08:01:ed:3a:ac:38:
34:13:4c:8c:a1:ab:b5:14:0a:ab:cc:a7:a9:3c:e2:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CA:6E:F8:D9:18:8F:92:42:6B:00:5A:BE:9B:E5:82:16:48:F8:DD
X509v3 Authority Key Identifier:
keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.0.0/23
Signature Algorithm: sha256WithRSAEncryption
51:6a:e9:b5:30:93:3b:21:20:4b:d0:46:ee:01:ad:56:2a:a5:
40:74:89:3f:19:cb:16:ab:6a:d7:84:1e:18:bd:40:ea:af:24:
e1:5c:ee:dc:13:05:25:ff:d8:e8:96:e5:f6:1f:e0:30:0c:c1:
a7:a4:02:8a:17:72:95:37:47:0c:e4:61:2b:b2:28:6f:53:91:
35:9a:40:11:c8:ed:6f:04:18:06:c6:12:af:4d:4c:c3:51:94:
db:b4:bc:69:e1:72:98:b9:a6:4a:85:14:83:67:0c:6e:ed:cc:
4c:d6:60:44:e7:d4:a3:7d:12:ad:c2:d4:e5:99:b8:c4:ce:42:
4c:4b:f9:13:59:0d:34:3c:16:6e:1e:58:b7:ae:27:26:24:33:
d9:9d:d4:ca:8f:52:67:bf:a2:cc:66:1b:c4:dc:73:fd:84:45:
bd:8a:e1:39:70:19:f7:98:da:fa:a1:a1:d4:91:30:3f:8e:8e:
36:25:c6:de:2d:5a:2e:19:2b:de:b2:81:5c:2f:20:d9:70:76:
45:9f:18:d6:e0:c6:06:60:05:3f:37:60:45:4c:b1:99:1e:b4:
ee:5e:ca:fc:d2:43:dc:75:26:c8:f9:3c:35:2d:ef:ad:ad:69:
2c:f4:90:52:a8:3d:21:4c:e8:97:db:c5:14:3e:03:0d:eb:23:
15:45:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:46 2026 by rpki-client