
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa
File: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (raw, json)
Hash identifier: 3rz3y2F3aVzj5O9phACfchAMbGqJwRa3oLDOUx3l7LI=
Subject key identifier: 18:A2:58:E0:0F:FB:C7:35:CD:4A:15:B3:DB:E9:B7:96:9D:7E:B6:97
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 03B4
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa
Signing time: Wed 05 Aug 2026 01:49:59 +0000
ROA not before: Wed 05 Aug 2026 01:49:59 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138115
IP address blocks: 103.67.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Aug 5 01:49:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7296c7-3191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:9a:b1:b6:fc:8f:a2:7c:5e:9c:8e:a1:02:
fe:96:b1:05:90:c0:57:9d:8d:d6:bf:be:44:c4:c6:
55:02:c7:78:d8:de:ed:f2:62:f3:a7:10:c8:b3:cd:
99:8c:3e:a8:6d:f7:e7:4d:b4:e8:bf:f2:c2:f5:84:
12:22:e0:4d:f7:f9:af:8a:48:ba:c0:94:ad:4a:c0:
1f:a6:b0:77:6a:26:6c:de:49:6a:9b:54:f2:3e:db:
00:37:1d:1a:66:b4:a4:c2:e3:57:3c:88:74:6f:d4:
e2:bc:18:61:2c:12:c4:6e:10:5b:5f:d6:ed:75:12:
20:98:39:b1:26:ba:92:ba:46:7e:8b:5e:ae:37:31:
44:ff:be:e9:b7:61:8a:d7:cf:4a:92:53:a2:d6:fe:
7c:7a:22:47:99:16:4c:96:85:f3:26:88:65:11:0a:
36:f3:29:c6:dc:5c:9d:5b:bb:e2:0b:4e:ce:fe:fc:
f9:4e:e1:8f:d5:09:2f:4b:2a:e9:d5:1c:6d:45:f8:
f9:99:63:cd:6a:62:54:3c:ae:73:c1:f6:00:6c:2a:
b1:e2:3d:13:29:31:91:47:f6:3d:3d:3a:6c:94:86:
d4:e6:1c:5a:7d:44:58:b1:a7:d1:09:4c:4a:59:7a:
cd:0a:d9:fb:8e:41:16:98:cf:19:8b:db:a5:41:ea:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:58:E0:0F:FB:C7:35:CD:4A:15:B3:DB:E9:B7:96:9D:7E:B6:97
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4a:58:f5:b9:f0:78:fa:49:fc:ad:8b:d1:99:9f:95:64:b4:
31:25:3b:db:68:18:23:e5:76:b7:34:f5:fa:25:f3:2c:32:26:
b3:30:13:fb:4f:d9:29:31:26:09:81:6e:4b:65:03:25:c8:f2:
ba:36:67:3a:1a:f3:9e:3c:39:4f:e8:8a:f0:a1:13:41:65:2f:
3c:2a:e1:8b:94:d6:13:c7:c3:c3:44:ce:e1:c5:ec:e3:81:d7:
53:a5:65:c2:46:3a:8d:ba:66:f6:14:ea:61:cd:ff:39:5f:bc:
28:02:a7:32:a1:e5:fe:d9:c3:a2:43:2f:d4:9a:72:2a:49:26:
51:d8:2a:91:07:ce:03:0a:85:d7:b7:3a:cb:45:fc:79:11:b8:
60:68:51:df:f9:f5:7e:31:6b:81:00:52:ae:d5:22:40:a9:ab:
b3:59:bf:66:ab:21:c8:cc:3f:8a:13:ad:07:b6:49:79:8e:3f:
25:23:fc:f9:57:3f:94:29:68:f8:b5:63:85:fa:27:1b:d2:c4:
4a:18:7d:d6:40:24:c9:e8:60:fc:88:7e:2d:06:34:82:62:ca:
a4:74:b5:65:98:7b:66:70:0b:69:27:b9:e8:a9:2f:78:3a:48:
14:4e:97:dd:8a:25:6f:54:48:23:a4:de:02:42:0c:90:15:91:
ee:cb:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:28:22 2026 by rpki-client