
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/D0F5F16EBFB811F0B09C3E14C4F9AE02.roa
File: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (raw, json)
Hash identifier: b4+csE685B8vXmBeYhE1afbxpZz6mNZMcg0Inl+/Jyw=
Subject key identifier: D2:7A:48:8F:E0:8D:00:B0:AC:6D:6C:85:6A:3E:D9:71:D6:82:F5:B2
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: 01E7
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/D0F5F16EBFB811F0B09C3E14C4F9AE02.roa
Signing time: Thu 13 Aug 2026 03:53:31 +0000
ROA not before: Thu 13 Aug 2026 03:53:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134186
IP address blocks: 103.40.166.0/24 maxlen: 24
103.40.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Validity
Not Before: Aug 13 03:53:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a7d3fbb-50d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:32:b1:2d:cb:d0:a4:57:a3:dc:e2:b3:5e:
66:57:11:44:c1:6e:6e:95:40:15:57:5b:ae:d8:a3:
30:15:9a:d1:19:f3:92:ce:a0:4e:e3:17:cb:9e:03:
06:5e:a3:0f:c0:b4:84:3c:c2:1a:6e:44:b7:fb:72:
ed:fb:9b:40:23:0f:0a:5f:06:f4:79:49:f3:b5:9e:
46:66:4d:ec:fa:5e:9a:cc:7a:29:ec:9d:18:0c:77:
08:72:8c:df:6f:6b:06:5c:4d:26:b5:b8:f2:47:a2:
d4:b6:b6:22:cf:f9:91:07:c1:6d:d6:7c:77:0b:97:
59:21:a9:cf:10:30:09:67:50:2a:98:73:3b:48:08:
bb:c2:c6:36:10:08:25:eb:e9:57:e8:62:45:04:42:
ca:e2:cc:1d:8a:a1:ed:77:a7:33:fa:e3:0b:b1:02:
92:f1:90:09:2b:5f:94:15:b8:ea:2d:a2:f7:f1:53:
b6:86:12:71:fe:03:ee:04:65:1e:49:ee:33:38:16:
21:4d:91:7b:01:4f:4f:03:91:0e:35:9e:07:23:d4:
9a:90:37:8c:b1:f3:f2:5c:79:e6:30:cb:9c:70:46:
d4:9f:f7:e4:6b:57:77:76:85:2b:a3:21:34:a5:8f:
96:04:98:4c:9d:47:90:c5:7c:85:97:da:e0:88:4a:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:48:8F:E0:8D:00:B0:AC:6D:6C:85:6A:3E:D9:71:D6:82:F5:B2
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/D0F5F16EBFB811F0B09C3E14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.40.166.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:98:06:96:f6:8e:aa:ff:be:00:d2:97:ad:ca:4a:cf:01:43:
74:78:6f:15:33:45:6e:0b:d8:8c:4f:52:1c:23:5b:f0:b2:6d:
a1:21:fc:b6:35:9c:b3:b2:49:eb:d8:ad:d8:66:50:8d:3c:15:
26:19:cb:d1:15:bf:8e:49:70:11:13:bc:59:82:b7:f8:5d:03:
01:48:75:94:f5:bc:ce:28:a2:92:ea:c6:31:c8:ea:33:02:b4:
e4:f7:a0:8e:8c:04:63:43:af:6b:fb:19:2e:68:cf:71:18:8e:
5e:5c:f9:cf:90:13:f5:e8:a6:a5:d3:2f:44:e9:98:12:fb:c5:
ff:90:ef:35:a2:d1:d0:ea:4b:38:3f:c1:bd:cf:8a:eb:c7:1c:
43:cb:48:44:6a:95:60:a7:d0:b6:a8:8d:15:8a:64:1c:b4:bf:
3a:e7:cd:2e:98:29:c0:f1:64:5c:f8:f4:54:93:48:e1:cd:a1:
e1:91:1e:a2:05:fa:26:fd:46:84:77:58:50:dd:e1:60:be:be:
64:17:33:7f:7d:f0:c6:39:54:51:a4:d0:43:f8:58:f7:b3:e8:
78:af:cf:41:f0:2a:68:2f:60:58:ea:a6:80:e8:4b:af:15:ac:
02:5b:67:3c:d5:ee:fd:8d:ee:5c:5d:41:db:7d:70:fd:a6:4a:
0b:bb:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:06 2026 by rpki-client