
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa
File: C673BB1AD0EB11F088F8F063C4F9AE02.roa (raw, json)
Hash identifier: C6n4CKTLus0le6GvOuMAOqp7CZSB754RPW+BsJBKvDo=
Subject key identifier: D0:DC:5A:58:22:5D:78:2C:90:17:F3:0E:A0:4F:61:16:38:35:F0:B9
Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial: 7D
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa
Signing time: Wed 01 Jul 2026 10:34:45 +0000
ROA not before: Wed 01 Jul 2026 10:34:45 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 150706
IP address blocks: 103.99.23.0/24 maxlen: 24
103.108.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 09:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Validity
Not Before: Jul 1 10:34:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a44ed45-b666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:a2:d8:e2:0e:8a:6d:22:38:34:d3:1f:eb:
6d:4b:a9:dd:9d:03:77:ef:b5:03:f1:46:93:7d:e2:
24:24:db:36:5d:17:8a:16:3b:ea:64:0f:79:98:08:
b8:93:56:72:b1:cc:12:41:00:a0:57:ac:4f:78:b9:
1a:c6:09:4d:a0:d0:63:57:97:81:21:d8:20:1f:62:
15:1b:80:74:3c:8d:d0:79:c3:ff:b1:f7:a1:d3:b4:
93:39:f1:c3:4c:c8:48:4c:f2:81:ab:9c:3a:52:79:
4b:2c:30:6b:8a:2c:e0:ce:e7:2c:a7:86:bf:df:69:
32:c5:81:4d:22:ca:fc:85:56:aa:c8:29:e0:4d:3e:
0b:f5:98:e3:47:0c:3b:1d:35:55:06:ba:f4:ca:42:
76:5c:71:60:3d:58:d9:b9:13:d3:d5:f8:48:a2:15:
21:ad:3c:99:b7:65:75:d0:93:77:37:99:7c:91:82:
e8:8b:12:39:06:ba:9d:89:5e:fc:32:83:fb:92:8d:
d4:2a:d4:10:ce:6e:aa:79:e4:44:d5:71:e8:c5:32:
11:e2:96:07:f7:5c:de:a1:27:c5:e0:b1:b5:6c:cc:
8f:d2:a1:a1:14:3a:31:3f:3d:83:d3:da:4a:18:16:
49:9c:d7:a4:d9:ce:3c:dc:d3:22:8e:6d:1d:3f:93:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:5A:58:22:5D:78:2C:90:17:F3:0E:A0:4F:61:16:38:35:F0:B9
X509v3 Authority Key Identifier:
keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.23.0/24
103.108.2.0/23
Signature Algorithm: sha256WithRSAEncryption
14:f8:85:13:0f:d0:0b:7c:e4:b7:3d:d6:20:a7:be:1d:74:f4:
2d:f8:64:b2:c7:6d:fb:09:b6:cf:69:8b:3b:75:46:98:d8:c3:
a4:5a:43:40:92:41:53:e6:35:42:4b:fa:e2:c4:4c:ed:80:7b:
a4:5f:67:a2:06:4e:4c:5e:0f:14:d3:0c:40:fd:61:4a:38:fe:
9b:e9:8d:f9:ef:61:76:d0:94:2a:78:f4:ae:60:db:8c:4a:5b:
75:54:cd:62:4a:24:69:8e:e0:62:13:84:a4:e8:c8:c7:13:bb:
ab:6b:ca:9d:00:96:8a:96:6c:2c:16:33:a3:0b:9e:7b:38:54:
3a:2a:1c:e3:49:be:01:4d:c0:88:b7:73:14:17:21:aa:81:c9:
dc:7f:72:39:99:c4:21:e0:75:ac:8a:71:4f:65:4a:8d:e1:3f:
c9:7b:7e:26:28:2a:54:56:a0:15:0e:38:ad:75:22:a3:5a:3a:
96:fe:f4:04:38:15:bb:be:0e:cd:02:49:12:e2:ef:c6:98:f2:
3e:73:b2:c9:42:46:80:45:6a:e4:86:1e:98:f6:c0:d7:b2:fb:
9a:85:ac:a1:a4:6b:f3:3f:5a:48:50:1a:68:21:aa:31:26:2b:
ca:33:67:ea:e7:05:27:f7:f3:f7:f1:2a:6a:0d:0d:0f:11:75:
77:81:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:30 2026 by rpki-client