
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/E4AEC0ACA75F11F19F6EA77F3611F970.roa
File: E4AEC0ACA75F11F19F6EA77F3611F970.roa (raw, json)
Hash identifier: jAX/VFWI/LGqcl+oM9q5+Phgjxnh7/enJfNQUBHHpkI=
Subject key identifier: FA:B9:59:7C:A4:0E:9C:80:72:EF:7F:12:4F:5B:1E:A0:55:49:70:71
Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial: 208E
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/E4AEC0ACA75F11F19F6EA77F3611F970.roa
Signing time: Thu 03 Sep 2026 06:22:53 +0000
ROA not before: Thu 03 Sep 2026 06:22:53 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137187
IP address blocks: 103.211.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8334 (0x208e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Validity
Not Before: Sep 3 06:22:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a99123c-07e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:8d:31:b2:c5:91:de:72:0d:8f:dc:06:d5:
ae:47:6b:eb:f3:45:b2:24:64:70:14:46:2b:4a:cf:
73:04:f2:d3:c5:d8:b9:88:68:25:c4:26:6a:31:d3:
13:f7:15:92:6f:2b:31:17:9d:6b:e9:6e:f5:ef:0c:
b9:3e:30:c8:61:9d:a8:62:3c:c2:33:75:36:d3:fa:
67:46:dd:17:09:18:37:ad:b5:9f:f8:23:24:e0:e3:
ea:39:25:b8:7f:b3:62:58:fe:94:07:e5:d5:64:31:
7c:f6:aa:c1:95:89:2b:d0:0a:4d:c1:fd:0b:34:6c:
5b:73:9c:52:24:15:7a:95:2d:8d:92:0c:44:39:84:
60:72:4a:5a:77:35:0d:9c:9c:2a:70:fa:8b:a2:d3:
81:55:f5:29:0b:62:37:c9:3a:58:f8:0a:4e:b8:cc:
eb:14:3b:f4:42:43:31:99:a0:48:da:3a:bb:b5:56:
12:98:30:7f:24:66:2d:f4:28:35:53:6d:4b:98:ee:
b5:a2:c9:d8:43:35:62:89:71:95:8a:64:ed:3f:94:
78:04:bd:44:75:de:5c:d1:70:8c:fd:11:5e:d4:21:
14:e4:61:89:ee:40:23:57:26:e4:44:02:7f:58:e4:
68:9a:7f:d9:51:08:39:b0:1e:c7:c5:78:c4:46:c8:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:59:7C:A4:0E:9C:80:72:EF:7F:12:4F:5B:1E:A0:55:49:70:71
X509v3 Authority Key Identifier:
keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/E4AEC0ACA75F11F19F6EA77F3611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.211.150.0/23
Signature Algorithm: sha256WithRSAEncryption
40:ab:58:d1:be:e0:af:5f:ce:79:06:7e:e9:cc:48:fc:14:ac:
cd:01:97:82:33:7d:c0:25:b9:cd:2d:2b:86:4c:cb:67:38:ed:
84:14:55:45:2b:b5:33:ca:82:f4:be:5e:37:ee:8e:18:ac:18:
dd:cc:9c:a0:54:ef:14:24:47:00:8d:e3:c1:c7:2a:52:69:9b:
c8:07:26:cb:ce:12:19:c3:b8:c9:f7:84:e8:fb:65:9a:4d:ea:
76:6d:de:9f:a1:6e:24:9a:56:00:5d:df:43:67:ae:94:c3:d7:
68:e5:7e:b0:9e:a5:01:57:7e:f7:8b:4a:37:b6:39:58:d1:83:
5a:61:96:8d:a3:d4:53:1a:b1:55:71:10:df:b4:56:2a:41:18:
cd:d7:7b:3c:7f:57:37:f8:07:e6:57:aa:a1:c0:6d:cd:fc:de:
87:8a:99:90:7d:2e:c3:4c:0d:57:03:af:34:5d:77:37:7b:26:
a5:1f:10:73:43:54:92:3b:48:26:e2:d5:28:3b:6c:16:65:94:
72:0e:ae:7c:5a:e8:eb:76:bc:f9:cb:de:46:69:6a:6c:f2:b3:
c4:ef:8b:51:0a:ca:7c:c0:52:51:1d:83:9e:36:61:cd:79:c6:
a0:19:8a:e1:57:60:25:90:dd:99:d3:4e:84:b4:06:c1:8e:26:
b5:54:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:14 2026 by rpki-client