
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7DAEB1F0A5CF11F19A324F273411F970.roa
File: 7DAEB1F0A5CF11F19A324F273411F970.roa (raw, json)
Hash identifier: 5YqLlzK1YHp4em5Ro0CYRt/wM0OwKS9iYZOWAN6s4xY=
Subject key identifier: 52:B4:18:6B:4B:0B:49:0B:63:35:7D:BD:54:E4:79:5A:6B:E9:BA:2D
Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial: 0C3E
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7DAEB1F0A5CF11F19A324F273411F970.roa
Signing time: Tue 01 Sep 2026 06:36:41 +0000
ROA not before: Tue 01 Sep 2026 06:36:41 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 6939
IP address blocks: 103.231.38.0/24 maxlen: 24
103.231.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 18:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3134 (0xc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Validity
Not Before: Sep 1 06:36:41 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a967279-c6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:04:6a:f9:67:64:c8:fa:7f:8b:70:16:3a:
ef:a9:5d:9a:de:a8:71:00:db:e8:1d:98:a9:ff:a2:
3e:81:67:64:33:0c:31:54:a9:d4:e6:ad:3e:29:40:
83:e5:36:ff:a5:c6:2d:db:cd:de:50:52:4d:50:41:
17:c2:4c:cb:86:f1:6a:15:db:7a:35:5d:cc:b1:b3:
ab:31:d5:ac:17:ac:01:2b:9f:d5:10:01:d4:98:ab:
32:e7:5b:8d:46:ff:f8:4d:74:86:1c:55:0f:f8:17:
a0:57:19:b0:e0:5d:a1:7b:00:17:fa:77:7d:5a:b5:
4f:5a:dc:6a:20:1a:5e:57:9e:00:50:84:3f:43:ec:
20:87:ae:4c:18:d8:71:93:58:41:59:4c:d3:c2:e5:
2e:98:37:e9:96:c3:da:9d:7c:3d:0c:ca:1c:92:d2:
52:6d:c0:b3:dd:f2:eb:04:6d:f6:bc:a1:61:2a:41:
2f:1b:ca:48:b0:72:0d:40:01:06:3f:2e:1a:9e:f7:
b8:4d:db:75:20:8b:0f:22:63:7e:92:af:8d:be:df:
6d:e3:21:e1:ba:74:fc:f0:5c:11:ea:dc:a6:35:fc:
38:6a:cf:b9:85:6c:9e:ed:61:37:e4:f2:45:39:fe:
32:65:00:24:8b:00:4e:83:db:ea:ca:9b:3b:6b:a6:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:18:6B:4B:0B:49:0B:63:35:7D:BD:54:E4:79:5A:6B:E9:BA:2D
X509v3 Authority Key Identifier:
keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7DAEB1F0A5CF11F19A324F273411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.231.38.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:ae:38:f6:a0:85:3f:a6:35:37:4a:4d:ef:94:38:33:42:78:
51:0b:a4:d3:32:59:e7:ff:6f:14:95:14:e2:1d:ca:9b:be:ab:
b0:ba:14:6f:43:1d:a0:4c:9c:e4:0c:4b:62:7e:02:c6:98:c6:
e3:4e:1f:1e:35:4d:50:ca:78:88:ec:a1:0e:00:f7:36:c5:72:
63:50:1a:54:ae:19:ea:ec:96:14:74:d2:78:3f:ea:8f:78:a2:
df:1e:fa:1d:03:58:32:c4:c1:35:f2:1d:46:c9:83:fc:c4:e8:
9d:ce:49:7a:c8:4f:79:b0:31:76:ea:c7:e0:37:9f:21:1e:cf:
90:07:52:c0:fb:31:68:b5:e5:6b:98:3d:5a:9c:ec:0c:09:09:
07:14:0b:aa:fc:22:56:35:e2:91:ca:27:7c:c1:7e:92:67:f3:
75:42:0a:8f:d2:2b:e0:c5:6a:95:47:1b:07:fb:d7:70:72:e8:
0d:4e:d5:26:f3:98:63:08:bf:10:c6:c4:bc:63:63:78:67:fa:
58:6b:99:b0:95:60:f9:cd:d5:e6:0e:23:e6:c5:5d:80:e1:54:
9d:fa:77:ce:97:a9:69:fa:0b:b3:d9:2c:ab:60:cc:49:45:5b:
ab:3b:20:58:c9:99:e9:23:f8:b0:f4:8c:ec:64:fa:ee:3e:69:
dc:23:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:56:53 2026 by rpki-client