
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/97DFFA2AD39E11EF9395C676C4F9AE02.roa
File: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (raw, json)
Hash identifier: 4sfSjlJ2338pd3IKA3ujmaO9lpQIQCBumwl1qSm+kFM=
Subject key identifier: 87:E5:FE:78:0E:1B:FF:38:69:95:5D:E2:29:31:FE:BA:58:93:25:1C
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3762
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/97DFFA2AD39E11EF9395C676C4F9AE02.roa
Signing time: Sun 04 Oct 2026 15:18:37 +0000
ROA not before: Sun 04 Oct 2026 15:18:37 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 61317
IP address blocks: 103.230.68.0/23 maxlen: 23
103.230.70.0/24 maxlen: 24
117.121.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14178 (0x3762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 4 15:18:37 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac26e4d-ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:6d:5d:75:2e:67:28:7a:28:0f:79:a0:ea:
1b:e5:f0:7d:1f:79:ec:6b:c0:c2:73:7f:d9:64:ad:
b9:89:7b:2e:57:87:fe:64:02:b8:b4:7d:36:c1:c2:
13:8b:ec:17:0c:dc:53:36:3e:af:94:e4:a0:13:c4:
30:93:75:bc:1c:74:2d:55:0c:79:f0:74:c5:e3:c4:
e8:ec:60:07:99:d0:d5:55:c4:af:59:8e:d8:86:a3:
38:76:dc:5e:da:35:f0:84:94:f6:06:d3:cf:8b:d8:
b9:90:6e:a9:75:1f:fc:48:fc:5e:63:23:0f:78:40:
49:03:5c:17:16:fb:c8:02:06:f9:81:de:f0:cc:80:
31:ee:b3:94:95:3e:6c:42:da:90:c2:1f:90:a7:dc:
e9:40:bb:76:c6:d3:e1:70:5c:ab:26:37:47:cd:56:
69:04:db:eb:bd:ae:f2:56:ab:37:c4:b4:f2:d7:59:
ac:33:04:32:e6:ff:6f:4d:1b:bd:1e:e9:59:ec:87:
56:5e:20:dc:90:52:7c:84:31:6f:d6:90:38:2e:06:
cc:af:17:69:ed:0e:8c:ac:4f:c9:92:32:31:c3:25:
a1:bb:73:a8:dd:18:89:98:11:c4:85:b9:01:80:97:
35:08:1c:00:fa:2a:d3:8a:bd:93:15:db:a9:68:db:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E5:FE:78:0E:1B:FF:38:69:95:5D:E2:29:31:FE:BA:58:93:25:1C
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/97DFFA2AD39E11EF9395C676C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.230.68.0-103.230.70.255
117.121.247.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1e:f9:60:f7:3d:a2:00:ad:38:6f:a4:6e:30:fb:c4:ac:91:
5b:d4:ea:1d:12:62:55:b3:5d:4d:42:4d:9f:de:bf:cd:48:80:
58:d5:54:6b:7a:ca:c2:5f:94:84:8f:67:a1:84:bc:c7:bf:e9:
95:27:dd:b2:43:dd:23:2b:e9:d0:96:33:f2:48:48:d0:ee:e4:
25:af:bf:74:34:6c:aa:67:f5:02:89:6b:2b:c0:04:a8:a8:94:
07:68:b7:43:d7:b9:16:21:d4:6d:99:fe:c7:74:d6:60:65:40:
ee:89:ee:e5:82:38:8b:40:a2:19:f3:c4:11:3e:a4:4f:da:1f:
ef:84:04:17:51:74:60:95:63:2c:91:c3:59:2c:f7:1f:60:28:
9b:d2:a5:aa:a4:df:ae:e4:eb:04:23:49:e4:6d:68:c7:87:39:
de:f4:42:3b:d0:e2:c3:60:9b:a8:87:fa:54:3c:eb:53:6e:f1:
45:89:50:c7:be:31:8b:5c:30:cf:d1:54:46:3b:55:7a:09:b5:
63:65:55:a5:76:24:ea:d5:cd:22:2e:0e:72:2b:43:c3:a5:24:
fb:60:8f:df:f5:ec:77:eb:25:84:6d:fa:9b:0b:b0:5f:80:c2:
7c:de:11:2c:93:f7:c8:2d:1a:ad:d0:72:f0:dd:01:18:22:ed:
c5:ff:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:34:30 2026 by rpki-client