
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa
File: F87DB8B440C811EEB681DC40C4F9AE02.roa (raw, json)
Hash identifier: ip48wthcZQj2yzO90ZC3ETY+zndLk/B6YcMLzIWEh4c=
Subject key identifier: 6C:BB:27:2E:37:A7:21:CD:13:0E:6F:0E:2B:D7:35:C7:08:0B:33:76
Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial: 358C
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa
Signing time: Tue 04 Aug 2026 16:17:09 +0000
ROA not before: Tue 04 Aug 2026 16:17:09 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 396904
IP address blocks: 103.14.96.0/24 maxlen: 24
103.14.97.0/24 maxlen: 24
103.14.98.0/24 maxlen: 24
103.14.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13708 (0x358c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Validity
Not Before: Aug 4 16:17:09 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a721085-2432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:2c:c4:d3:1a:50:f3:70:23:85:a5:cd:26:
a9:ce:75:40:0f:ab:bd:ce:63:30:ee:2d:2b:d1:e8:
da:e5:5d:f9:c1:ab:cf:ec:3d:d4:b5:4a:80:a0:1a:
2d:6b:57:5e:46:95:fc:1c:7c:7e:05:ef:74:12:ce:
ab:6f:7b:76:be:95:3c:85:43:dc:96:fd:e4:0a:2a:
13:52:e6:a4:da:f9:88:0d:2a:de:ea:47:da:c6:4e:
b7:e7:7e:ce:ba:99:90:c4:6b:ed:a7:ad:ac:56:22:
d5:3c:4e:84:88:12:f8:c4:46:f4:37:ec:3b:23:bf:
18:5c:76:ab:ad:4c:97:5d:b6:c1:6b:37:fa:33:c5:
d2:7c:21:a1:4e:5a:85:ad:6e:b6:26:3b:a5:a7:dc:
5b:ff:c7:aa:78:e6:9a:be:06:8b:66:6f:a5:d4:c4:
ff:9c:4a:04:50:aa:96:40:ea:9d:8a:9b:3a:1c:15:
1a:66:3b:2f:da:99:c9:3e:d0:26:50:4d:f0:a1:e0:
04:6e:2b:55:40:62:7a:0e:ab:26:e4:2c:6a:4e:26:
11:ca:94:25:f7:22:be:fd:3d:7d:1e:e2:79:30:0a:
4f:b7:24:31:18:51:2d:0c:0b:ed:31:3a:b8:96:c9:
bd:92:c3:4e:49:5e:74:ae:c2:1f:40:2d:ac:ce:0e:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:27:2E:37:A7:21:CD:13:0E:6F:0E:2B:D7:35:C7:08:0B:33:76
X509v3 Authority Key Identifier:
keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:23:9c:3e:dd:c5:8b:8e:b5:e3:bf:a0:ad:5f:c1:24:d2:0e:
9f:87:c6:bb:57:aa:de:23:79:f9:00:32:29:0a:26:ee:e8:02:
d7:fd:5f:ec:27:56:36:f8:99:91:ea:4d:71:0d:da:e7:fc:11:
63:f4:2c:de:73:2c:d9:5e:b9:c1:7c:b9:03:2d:0c:87:9b:00:
2d:d4:44:10:f9:21:de:6b:e8:77:2a:57:2d:fa:e6:f1:e8:b6:
df:a1:c4:7f:8f:b9:df:5b:30:0e:16:5d:46:83:e0:a0:58:ff:
a5:51:f4:df:de:ce:98:c9:d4:d1:d5:09:31:98:67:f4:d5:5b:
51:23:dc:a9:8c:1f:bb:f6:3b:96:7b:a7:19:20:ba:af:84:a9:
a7:97:9b:a9:e7:bf:b0:ac:e9:a3:b2:6c:a7:8f:31:3a:fb:c5:
fd:25:5f:27:f2:bc:c3:b0:f1:96:21:cf:0c:3a:73:3e:7c:37:
3a:5d:9a:83:26:f1:d3:32:4a:69:fa:3f:8e:6f:e3:95:a6:7b:
df:9a:14:ec:82:1f:80:82:8d:66:85:f2:5f:4c:85:3a:d9:d2:
57:d6:e3:80:40:67:77:f7:ab:be:1b:c4:d9:f1:3a:9e:ab:70:
61:2b:b4:7f:f9:8a:d8:ff:73:78:08:c4:42:1b:90:81:79:c3:
c6:09:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:38:55 2026 by rpki-client