
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/94467BCE95EE11F0B275FA48C4F9AE02.roa
File: 94467BCE95EE11F0B275FA48C4F9AE02.roa (raw, json)
Hash identifier: w96wheZvIa4b3Y+fs6mzOokLL39tdOI0xokRtBcFWgU=
Subject key identifier: 9C:D6:DB:53:B6:DC:98:4B:C2:3C:08:03:67:1D:8E:1C:06:B1:D2:23
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 025E
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/94467BCE95EE11F0B275FA48C4F9AE02.roa
Signing time: Sat 31 Oct 2026 03:50:14 +0000
ROA not before: Sat 31 Oct 2026 03:50:14 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 151832
IP address blocks: 103.213.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 03:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Oct 31 03:50:14 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ae56575-bd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:cc:0c:2b:a2:92:97:27:73:a0:d8:e6:79:
39:66:bc:f5:6d:59:85:51:09:88:36:6f:58:42:b2:
b3:f3:c9:9b:a6:af:d5:7a:03:d3:54:59:79:95:13:
95:05:00:0c:a0:fb:65:77:c7:b8:4a:0a:a6:17:40:
90:b4:6c:26:cb:e1:ea:9d:20:6d:15:e7:f9:d1:ca:
ea:11:99:62:b9:fa:96:1e:59:47:1b:fe:35:eb:7d:
f2:85:e6:ff:71:d9:a3:00:4f:28:e7:60:ef:e5:d0:
10:7a:ed:00:19:95:5c:e6:b2:81:87:20:b5:3a:02:
37:c1:15:25:6b:01:6d:73:a9:1c:d4:11:02:3c:d7:
1e:ce:03:65:73:70:3c:11:09:7d:7a:8d:43:09:4d:
57:75:b3:7a:2b:56:b0:95:a2:fd:35:ff:31:42:b2:
09:84:4a:ea:7e:b9:fd:c7:17:70:50:53:a2:05:0c:
6b:4f:8c:7a:ba:68:0b:fd:8c:31:dd:90:bf:4e:62:
19:7f:99:80:11:2b:1e:a8:e9:31:b5:d5:a1:77:e6:
48:f6:48:80:e8:28:ad:9f:a1:c5:f9:a4:40:d4:dc:
81:36:45:f3:f3:4c:89:3b:97:73:a2:f4:90:16:dd:
52:13:33:99:75:e7:96:a1:ec:e1:34:af:44:1a:57:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D6:DB:53:B6:DC:98:4B:C2:3C:08:03:67:1D:8E:1C:06:B1:D2:23
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/94467BCE95EE11F0B275FA48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.220.0/24
Signature Algorithm: sha256WithRSAEncryption
97:19:a8:93:c5:36:30:ff:70:d1:36:a7:03:34:4a:ae:da:e1:
13:9c:34:ea:43:21:67:d3:ea:1a:c5:44:3b:8a:56:89:f6:e0:
73:46:87:54:3d:6e:09:1b:19:b0:ce:16:88:ab:4c:a8:47:35:
4f:56:be:15:bc:12:65:7b:2c:01:9c:37:42:b9:1a:3b:1f:cc:
4f:2f:ba:ba:ce:d4:0d:4a:ff:ba:5d:ed:73:da:ad:e3:58:ab:
65:40:54:a9:08:18:7d:5e:40:02:2f:87:e9:e9:40:22:97:28:
f3:5a:d3:22:33:69:c9:df:2c:99:c4:72:72:b8:8e:33:1f:61:
8d:28:08:50:11:56:94:18:4c:f6:75:ab:7f:aa:ac:1e:69:c3:
a2:f4:45:ed:9e:62:20:64:85:09:94:60:23:42:4d:29:7a:ac:
64:96:cf:f6:d5:44:b3:46:99:ee:d7:f2:ab:e0:25:0b:41:dc:
55:4c:2e:12:4f:da:dc:e7:be:01:c0:29:67:0e:6e:51:00:3b:
cd:51:28:82:bd:f6:84:0a:dd:96:f9:81:b3:21:d8:e3:8d:3d:
24:7a:fa:ff:33:2d:28:3c:24:bb:3c:7d:5e:69:ed:c7:5c:e5:
c2:71:c9:28:7a:6f:6e:48:00:a9:47:29:03:e0:89:af:d9:e5:
93:da:f4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 23:32:29 2026 by rpki-client