
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/462E4490A79911F1A1CAE2784811F970.roa
File: 462E4490A79911F1A1CAE2784811F970.roa (raw, json)
Hash identifier: 6RfqX8GIXHK1V8oY4WkTIG0AWJauXU9k9igM9Uvncx0=
Subject key identifier: 3E:3E:3C:01:AB:95:AB:BF:C1:EA:08:DF:3D:6C:D1:59:38:B6:7E:B9
Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial: 0C41
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/462E4490A79911F1A1CAE2784811F970.roa
Signing time: Thu 03 Sep 2026 13:13:38 +0000
ROA not before: Thu 03 Sep 2026 13:13:37 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 2497
IP address blocks: 103.231.38.0/24 maxlen: 24
103.231.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 18:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3137 (0xc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Validity
Not Before: Sep 3 13:13:37 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a997281-3dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:df:2f:39:e1:4c:1b:1e:7f:bd:f8:ce:8e:
70:df:fa:09:78:fc:05:d1:de:6c:f1:c1:89:de:42:
7b:1f:e5:5b:50:7d:a9:4e:b2:a4:05:42:b8:8f:ac:
40:00:60:02:23:73:8a:af:17:9c:83:e8:93:6b:d5:
58:90:6e:61:59:12:09:23:38:bc:a0:4f:c8:8d:1a:
d7:b6:7d:d3:f0:a4:d5:a6:5a:df:a1:96:59:ad:1e:
dc:f8:d4:bd:60:a0:42:2b:a5:e9:e4:a7:96:41:0f:
23:da:4a:84:23:aa:c3:2b:91:be:0d:05:a9:d4:eb:
8f:20:8d:64:ce:be:19:32:7d:ed:af:8c:2d:10:9b:
3b:6a:ab:29:de:21:1a:17:c5:82:fe:ca:30:50:90:
5f:f8:2b:27:83:01:0e:22:f4:cf:58:2d:08:7b:34:
f5:9c:9f:fe:eb:af:4a:c5:f3:ca:bc:ce:04:10:66:
33:c3:a3:26:fe:25:5b:20:ac:39:5b:26:3e:10:cd:
14:c9:97:89:fe:47:fc:15:58:5b:b2:e9:af:e1:e7:
73:b6:5d:8c:ab:21:e8:a4:d5:28:d6:a5:db:d5:86:
4c:98:6a:0c:35:25:47:26:c9:3a:96:76:ec:2e:a5:
b2:4e:67:88:78:9b:9f:07:3f:a1:cc:cd:76:df:ff:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3E:3C:01:AB:95:AB:BF:C1:EA:08:DF:3D:6C:D1:59:38:B6:7E:B9
X509v3 Authority Key Identifier:
keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/462E4490A79911F1A1CAE2784811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.231.38.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:b5:38:e6:9b:9a:ce:08:77:fe:57:a5:6a:03:a0:0c:40:99:
fc:59:b0:22:15:15:73:e8:40:70:01:7a:40:40:e6:bb:05:76:
a9:83:b2:54:eb:13:88:ee:9b:fe:81:de:66:c0:86:04:14:87:
fc:d2:4f:cc:fb:db:59:2f:eb:0a:8e:c3:c2:1a:74:9b:3f:ed:
b9:ff:f3:7b:66:ac:77:f2:ed:4d:d5:4d:38:8f:38:65:91:df:
8a:f0:bf:fe:da:12:fc:14:f8:79:98:89:95:95:53:9f:a7:d8:
ba:65:44:0f:f5:33:93:54:8f:7d:8b:d2:4f:c8:84:2b:f8:13:
eb:d9:ff:d3:b7:66:55:d2:ee:5b:86:cc:83:b5:80:1e:e3:94:
d2:2d:81:9a:ff:c7:b8:6f:1f:30:b7:3c:20:05:a3:d6:07:cd:
24:c0:37:12:89:6a:cc:3c:86:8e:31:84:0d:24:7b:3a:90:16:
1c:de:66:76:3f:0e:32:ce:a9:2b:75:0e:1e:1f:0a:62:bb:e5:
7b:39:0b:c0:7a:f5:9f:50:9d:96:11:5f:22:e0:6b:63:84:8f:
11:23:46:dd:34:57:de:e8:ac:c1:36:80:7f:5d:2c:1d:ce:b9:
41:b2:93:a2:4b:84:c1:de:0d:9d:74:fc:15:0c:d4:1d:07:97:
ad:fd:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:56:59 2026 by rpki-client