
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/91A463F68EF211F1955665D66611F970.roa
File: 91A463F68EF211F1955665D66611F970.roa (raw, json)
Hash identifier: 3Zu4wSnQBBq3lkzK9F3PC+ZEn2jGSzlYHJFjGae8M2g=
Subject key identifier: 52:94:5A:64:4C:93:B2:C1:06:CC:81:7E:5B:64:EF:1E:70:B4:44:2E
Certificate issuer: /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248
Certificate serial: 026F
Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/91A463F68EF211F1955665D66611F970.roa
Signing time: Mon 03 Aug 2026 04:19:50 +0000
ROA not before: Mon 03 Aug 2026 04:19:50 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 8075
IP address blocks: 103.120.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl
rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248
Validity
Not Before: Aug 3 04:19:50 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a7016e6-bf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:00:76:4a:08:33:b2:51:5b:4c:cf:24:26:
64:9e:5f:ec:30:94:c5:20:c9:42:d8:79:8e:07:52:
39:85:03:7a:c8:15:81:ac:46:4e:c4:7f:48:f0:31:
3e:81:9e:b1:f5:32:40:51:7c:f3:6c:4a:78:25:88:
63:79:4f:fe:ff:20:c9:9d:82:cf:b2:62:05:0d:15:
ee:e6:6d:ca:e9:4e:d8:42:85:7c:e5:8e:34:d6:04:
9a:aa:d8:4c:fe:59:8d:27:1e:f2:1d:7b:7b:4a:5a:
c3:a8:30:e2:e2:92:aa:2e:9c:cc:88:9f:8e:97:30:
1e:d2:c9:20:76:1b:e9:29:35:25:a4:b9:c0:eb:da:
71:c4:61:81:43:11:c7:75:88:98:4a:1b:23:bf:a7:
35:c4:fa:43:6d:f3:38:d2:0c:9c:52:a4:66:11:7c:
29:a9:c4:5f:50:a2:09:f4:4e:e4:e3:b5:fe:1a:ad:
b3:cd:38:a9:d5:fe:42:0e:a1:1a:80:d9:a3:a5:d8:
a4:cf:44:fa:67:8d:e3:c8:aa:c7:38:e8:44:a7:20:
8e:b4:06:dc:cf:e3:58:e1:06:94:63:83:81:c5:1a:
38:ce:08:13:5a:8b:ed:8d:a6:61:a3:d1:74:e2:c6:
44:67:ea:6b:72:bd:05:07:81:ab:9f:e4:13:2a:df:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:5A:64:4C:93:B2:C1:06:CC:81:7E:5B:64:EF:1E:70:B4:44:2E
X509v3 Authority Key Identifier:
keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/91A463F68EF211F1955665D66611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.219.0/24
Signature Algorithm: sha256WithRSAEncryption
90:88:e3:b3:c0:e0:4b:ff:7e:d1:44:75:92:53:c3:b2:44:82:
d4:d3:b9:64:e2:20:e4:67:15:0e:87:c9:82:89:c8:2e:de:bf:
51:b5:b5:86:07:3d:33:23:d4:f5:95:f7:1d:51:82:90:8c:da:
94:e2:92:e1:2e:e9:b3:5e:3f:e9:65:d9:03:86:c2:b9:df:5f:
c2:5c:b1:32:6a:92:75:a1:db:88:d1:0b:b1:7e:94:e2:0a:57:
ea:43:eb:35:ed:26:af:1f:64:ec:a9:9e:29:06:37:34:b8:04:
76:f1:14:23:b4:bd:52:27:90:6a:75:31:63:03:0d:57:50:5f:
9b:98:7c:11:ec:0b:82:20:4c:bf:ac:9d:c1:a2:c6:b9:dc:78:
7f:00:02:7b:42:47:11:01:16:72:ce:1c:21:ca:43:f6:73:1b:
31:bb:a6:b2:c7:f7:0c:53:83:7e:ed:61:a5:09:e0:58:f6:95:
85:be:31:18:b5:c2:5d:95:cf:f3:81:81:98:82:19:b3:f5:01:
de:b0:8c:6e:14:be:49:9a:22:09:0c:44:cc:f7:98:1a:25:2a:
7e:49:93:de:64:68:c6:97:30:cf:48:e2:29:f2:ab:0d:ce:22:
9c:1e:71:a3:23:77:cd:af:3c:24:e9:36:f5:bf:69:e2:e5:2e:
10:38:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:10:59 2026 by rpki-client