
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa
File: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (raw, json)
Hash identifier: bVKHxia6aHQtaaNVyyZWVecYBGynbvbR+1XTYbf4Q38=
Subject key identifier: 97:43:F8:63:A8:0C:CF:4D:0B:9E:EB:76:8A:00:AA:C0:E3:60:66:E2
Certificate issuer: /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096
Certificate serial: 0D0C
Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa
Signing time: Mon 10 Aug 2026 18:36:16 +0000
ROA not before: Mon 10 Aug 2026 18:36:16 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 58695
IP address blocks: 103.15.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl
rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3806, serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096
Validity
Not Before: Aug 10 18:36:16 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7a1a20-de58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:65:b7:24:fc:37:d0:4c:2c:4b:57:2f:9f:
24:22:94:8d:a7:d4:22:c3:40:25:06:f7:1a:22:a1:
86:13:1b:77:b6:ca:dd:71:cf:4d:ef:35:7e:40:e9:
5d:29:3c:fa:01:b1:64:e6:1f:f1:74:24:cc:ce:a1:
0e:18:77:f5:04:1f:8c:67:d1:52:b6:84:55:0b:fc:
6a:f7:9b:cc:09:30:8a:50:ac:b2:45:39:a6:3f:92:
c0:df:90:74:1b:8a:16:fa:bf:be:27:27:17:d7:53:
e6:ab:dd:ce:76:b8:cc:02:e8:7d:31:1c:6f:c7:b2:
94:25:b6:5b:c6:72:c9:e3:54:3a:64:f0:b1:a2:40:
58:6f:24:0d:ed:12:80:a1:2e:df:61:ed:db:4b:d0:
69:96:16:7f:0e:14:ba:29:03:cf:12:45:7d:27:77:
14:fa:42:83:c2:56:47:fb:22:54:2e:5a:79:21:ec:
c1:45:fc:87:77:4e:f7:2a:69:81:2f:40:7b:a8:df:
4c:ef:85:15:d7:d0:1b:1a:c9:55:8a:da:82:fb:08:
2e:77:fc:43:6d:94:5d:a2:27:34:96:00:e4:fd:1f:
db:46:0d:b9:35:65:60:93:c9:85:a0:16:76:d9:62:
39:ca:02:fc:84:e8:ce:c2:de:b9:90:fb:29:d2:5b:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:43:F8:63:A8:0C:CF:4D:0B:9E:EB:76:8A:00:AA:C0:E3:60:66:E2
X509v3 Authority Key Identifier:
keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.224.0/23
Signature Algorithm: sha256WithRSAEncryption
44:05:b3:08:b5:88:94:ec:93:f5:0f:d2:b4:6b:74:52:c2:94:
26:ed:76:19:d1:6b:01:61:e5:e6:31:cf:24:a9:e6:5b:ab:b1:
81:a1:10:21:51:f6:07:79:37:49:50:21:e4:c0:04:81:14:88:
6c:e3:27:8c:b7:5c:c0:18:bf:90:32:69:b8:16:88:2a:23:8f:
89:ea:fd:55:0d:42:df:c0:f4:1a:aa:58:29:84:50:cb:a9:26:
2c:dc:d3:3a:78:01:c7:8f:9d:97:e4:b2:99:23:a1:89:1c:78:
28:6f:9e:7a:0d:80:34:78:1b:47:4c:55:a2:54:0f:33:f9:9f:
82:fe:e5:cd:a2:fe:ff:16:7c:14:d4:18:c5:fd:30:ea:d6:32:
b3:af:90:31:91:f9:c1:a7:81:36:5d:d6:25:e8:45:2b:00:55:
80:01:ca:f8:59:9f:1e:83:17:61:60:13:22:d7:9d:07:96:6f:
fc:91:3b:48:f7:aa:df:eb:37:a2:0a:65:2d:19:bc:6c:ec:e0:
8b:20:07:dc:80:e6:50:cb:f3:e9:69:33:e3:4a:8e:45:8e:35:
7a:29:8d:f4:f3:49:27:cd:84:50:cf:7a:0a:3b:40:82:26:f1:
72:1b:96:ca:18:7d:64:67:63:67:16:66:cc:57:8e:15:20:d3:
93:4b:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:30:01 2026 by rpki-client