
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/7E55CC0E610C11F1BA3A45B39947A888.roa
File: 7E55CC0E610C11F1BA3A45B39947A888.roa (raw, json)
Hash identifier: E0w9BgdOurSZs3raW0wpmHL4bAQMnen7LkEC4VGqfmg=
Subject key identifier: AB:D4:2F:2F:76:3A:D4:9F:E5:1A:A2:77:01:33:6F:1B:DF:1C:14:A1
Certificate issuer: /CN=A91EAF29/serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883
Certificate serial: 02
Authority key identifier: AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/7E55CC0E610C11F1BA3A45B39947A888.roa
Signing time: Fri 05 Jun 2026 18:29:31 +0000
ROA not before: Fri 05 Jun 2026 18:29:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 33549
IP address blocks: 103.121.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl
rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF29, serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883
Validity
Not Before: Jun 5 18:29:31 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a23158b-15ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:19:7b:b5:32:be:b9:84:d2:cf:4d:2f:1e:
24:c1:98:26:2d:6f:2f:f7:72:73:df:b0:78:d1:02:
39:91:10:31:da:85:ba:5a:15:5f:4a:99:a5:8f:8d:
da:79:cc:8f:92:0d:65:8e:03:4a:3c:19:0e:6a:fa:
d9:99:9b:fd:62:3a:65:c5:d8:03:f6:5b:57:9d:8f:
f1:ac:55:d3:df:ca:91:8b:43:c4:b6:4f:dc:f6:8a:
f8:0a:08:2b:5c:eb:f4:a4:62:43:1e:da:0d:53:b3:
44:0c:d8:db:ff:0d:12:6f:56:10:d4:54:99:e0:44:
91:48:f3:7e:37:31:e1:82:1b:69:b6:65:4b:e3:cd:
46:38:bf:3f:23:fe:82:5d:a1:41:fe:bf:08:63:77:
d2:c0:d7:bd:a5:ce:86:e3:35:4c:db:90:59:0d:4a:
25:7e:9f:78:d0:fb:e7:33:fe:e5:ff:3a:08:fa:1c:
82:c3:0b:be:88:d9:18:6e:7e:f7:ea:ac:80:50:e8:
91:10:cc:74:2f:a2:5f:f7:87:4b:dc:cc:26:18:6d:
d4:b1:83:af:62:1e:f6:95:0f:b4:fc:66:61:ef:8c:
a1:05:1f:2e:09:8c:62:aa:af:07:1e:37:17:b5:68:
92:28:62:1b:9f:f9:f8:41:23:db:89:46:e9:6f:94:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D4:2F:2F:76:3A:D4:9F:E5:1A:A2:77:01:33:6F:1B:DF:1C:14:A1
X509v3 Authority Key Identifier:
keyid:AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/7E55CC0E610C11F1BA3A45B39947A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.32.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:1c:2b:d3:80:7d:33:87:30:36:ad:d7:4a:9c:5b:93:9f:eb:
7a:f0:6c:08:67:dc:2a:95:c8:b1:7c:f5:79:64:e0:f3:8a:c3:
bf:d3:aa:8b:fe:5f:17:f8:70:1f:d7:42:e2:80:5d:db:28:99:
31:e3:d5:d9:27:87:96:62:2f:80:a7:33:9c:cd:fa:0a:ca:ab:
43:cd:f6:8e:24:4e:90:fa:c0:40:ad:26:11:c5:9a:9c:d4:c7:
57:29:39:33:fe:99:07:29:72:74:dc:ba:71:b2:25:a3:b0:8d:
36:63:91:43:3c:d8:91:ac:c5:05:92:29:a5:db:60:32:24:a6:
2b:2f:82:5c:54:7c:0a:74:8c:59:82:f5:2d:27:69:13:15:09:
a7:ac:05:9c:c3:68:ab:cb:66:a4:20:99:df:fb:d2:eb:af:d5:
c8:ae:e7:fd:f6:03:97:09:1b:8f:97:49:aa:26:a1:26:de:55:
7e:e3:4a:43:b7:dd:ae:b2:01:bc:e5:70:a8:60:8a:4e:2d:11:
2e:b8:01:44:76:9a:08:4e:70:d3:ec:0a:6b:47:c0:49:5c:04:
be:9e:6d:72:56:3c:08:36:34:dd:46:7a:35:1d:10:c6:e0:72:
04:9b:6d:01:65:7a:31:0d:3b:9c:54:26:25:b1:69:8e:d8:20:
75:cf:0a:17
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QUYyOTExMC8GA1UEBRMoQUJDMkU0ODRGRUIxRUM3OTM1RTBGMEYzOEYxOTE4QzYz
OTUxODg4MzAeFw0yNjA2MDUxODI5MzFaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMjMxNThiLTE1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCelRl7tTK+uYTSz00vHiTBmCYtby/3cnPfsHjRAjmREDHahbpaFV9KmaWPjdp5
zI+SDWWOA0o8GQ5q+tmZm/1iOmXF2AP2W1edj/GsVdPfypGLQ8S2T9z2ivgKCCtc
6/SkYkMe2g1Ts0QM2Nv/DRJvVhDUVJngRJFI8343MeGCG2m2ZUvjzUY4vz8j/oJd
oUH+vwhjd9LA172lzobjNUzbkFkNSiV+n3jQ++cz/uX/Ogj6HILDC76I2Rhufvfq
rIBQ6JEQzHQvol/3h0vczCYYbdSxg69iHvaVD7T8ZmHvjKEFHy4JjGKqrwceNxe1
aJIoYhuf+fhBI9uJRulvlABTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUq9QvL3Y6
1J/lGqJ3ATNvG98cFKEwHwYDVR0jBBgwFoAUq8LkhP6x7Hk14PDzjxkYxjlRiIMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRjI5LzEwN0FDMzU2NjEw
QzExRjFBQTNERTgxNTk5NDdBODg4L3E4TGtoUDZ4N0hrMTRQRHpqeGtZeGpsUmlJ
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcThMa2hQNng3SGsxNFBEemp4a1l4amxSaUlNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUYyOS8xMDdBQzM1NjYxMEMxMUYxQUEzREU4MTU5OTQ3QTg4OC83RTU1Q0MwRTYx
MEMxMUYxQkEzQTQ1QjM5OTQ3QTg4OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABneSAwDQYJKoZIhvcNAQELBQADggEBAM0cK9OAfTOHMDat10qcW5Of
63rwbAhn3CqVyLF89Xlk4POKw7/Tqov+Xxf4cB/XQuKAXdsomTHj1dknh5ZiL4Cn
M5zN+grKq0PN9o4kTpD6wECtJhHFmpzUx1cpOTP+mQcpcnTcunGyJaOwjTZjkUM8
2JGsxQWSKaXbYDIkpisvglxUfAp0jFmC9S0naRMVCaesBZzDaKvLZqQgmd/70uuv
1ciu5/32A5cJG4+XSaomoSbeVX7jSkO33a6yAbzlcKhgik4tES64AUR2mghOcNPs
CmtHwElcBL6ebXJWPAg2NN1GejUdEMbgcgSbbQFlejENO5xUJiWxaY7YIHXPChc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:03 2026 by rpki-client