
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/581F68DAD48A11EEB7A00557C4F9AE02.roa
File: 581F68DAD48A11EEB7A00557C4F9AE02.roa (raw, json)
Hash identifier: Gz+GeHfA60L7+QKUKQDlh8huWYF/SncPBIlNy4m7Y7E=
Subject key identifier: 34:53:39:1A:DB:EA:5F:DC:19:9F:26:5B:31:4C:A7:92:BF:3D:8C:16
Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Certificate serial: 06AD
Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/581F68DAD48A11EEB7A00557C4F9AE02.roa
Signing time: Mon 10 Aug 2026 22:43:57 +0000
ROA not before: Mon 10 Aug 2026 22:43:57 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 132869
IP address blocks: 103.97.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Validity
Not Before: Aug 10 22:43:57 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7a542d-ea9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:c2:5e:fb:c9:1a:ce:5b:c2:c6:0c:c6:05:
d7:4c:00:9f:05:7a:e0:29:24:e2:4f:05:4b:94:0d:
ab:72:78:fb:a1:2b:f8:ad:99:54:2f:d8:00:8a:76:
5a:17:46:16:f1:b9:49:17:24:6e:61:6e:80:9b:d8:
26:59:da:52:4a:55:0a:93:9e:4d:51:09:8e:29:7a:
02:94:6f:0e:ae:22:2e:24:80:ee:df:ba:9d:05:40:
09:19:6b:11:27:e0:01:9c:cb:42:88:c9:68:9b:d9:
31:cb:9c:9b:96:22:78:6d:bb:6a:aa:2a:65:63:01:
d2:31:34:92:de:50:d2:a7:e2:1f:12:ae:0a:0a:b6:
e4:08:b5:54:74:1f:99:5c:a4:5d:a4:cd:6c:5f:4b:
89:99:8c:6f:f2:1f:6c:24:22:2e:9a:5b:6c:f3:30:
50:1f:58:66:66:01:3c:9d:a0:6e:14:3d:30:18:90:
3b:f9:6a:f6:29:46:1d:73:ae:d1:ce:77:8e:dd:22:
d4:f1:c8:9a:48:7a:39:f9:a7:cc:a5:99:57:0c:95:
83:8f:fd:3a:b2:d6:fc:bc:ca:65:0a:61:03:8f:4d:
21:66:ae:47:48:73:53:d1:05:51:5b:0e:b4:a2:3a:
c3:f0:02:69:b1:d0:8c:a2:aa:41:0e:91:1f:83:f3:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:53:39:1A:DB:EA:5F:DC:19:9F:26:5B:31:4C:A7:92:BF:3D:8C:16
X509v3 Authority Key Identifier:
keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/581F68DAD48A11EEB7A00557C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.204.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:52:19:9b:84:96:ed:e3:ff:cc:27:a6:d5:06:1a:c3:59:53:
b6:a4:d1:fe:eb:6a:f5:f5:43:d0:e6:7a:ec:28:ce:fd:0b:f2:
48:b4:87:df:46:05:a6:a8:81:98:4e:8f:d6:c3:e7:a6:3b:70:
c0:c5:59:4a:2a:66:87:34:b6:e3:dd:7c:d3:ff:88:22:2e:9d:
af:2c:8a:a1:f3:43:02:09:10:15:2a:38:63:02:90:a0:bf:21:
28:7f:e0:51:9c:87:1c:bd:4f:1d:cc:70:7e:36:89:ca:31:bb:
70:58:2b:99:f5:ed:12:0b:eb:8c:63:84:b6:90:bb:b3:e1:0f:
c7:c8:15:64:9c:87:42:b4:31:f4:d1:61:0a:27:8d:fb:56:46:
3e:32:fa:79:00:85:fb:b2:db:f0:60:78:af:14:8e:cf:14:ba:
fc:3b:1b:2f:e2:92:51:12:6c:c0:2d:98:ca:80:4f:24:1f:15:
cf:bd:14:af:e1:13:6f:6f:f5:96:26:29:d2:40:e4:5d:66:92:
23:61:24:95:70:08:a2:cf:87:33:ce:27:bb:0c:3a:fa:fa:14:
10:00:90:f6:c0:37:81:f3:65:a0:03:2d:cc:c2:44:0a:49:ad:
da:aa:38:ea:18:93:57:18:d1:e3:ee:b4:a7:84:14:11:aa:e3:
32:ec:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:59 2026 by rpki-client