
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
File: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (raw, json)
Hash identifier: FSmvi+jzzyKKXWhskSUQbtgE3xdZ8BhML9W9RQn3tuA=
Subject key identifier: 1F:6C:C2:D8:81:A6:B9:C6:27:F8:94:08:52:07:23:B9:01:A2:09:E4
Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial: 063B
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
Signing time: Thu 20 Aug 2026 22:44:49 +0000
ROA not before: Thu 20 Aug 2026 22:44:49 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 142552
IP address blocks: 103.169.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Validity
Not Before: Aug 20 22:44:49 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a878361-182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:c4:2e:e7:d2:49:00:97:1a:89:75:2a:28:
48:19:1d:23:3a:a0:c8:8f:5e:61:6a:cc:b8:07:a0:
e1:0f:fa:5e:43:64:dd:8a:74:31:a0:31:91:78:a3:
dd:1b:15:46:d4:2c:35:e7:25:a3:71:38:fe:42:f1:
ad:c1:df:69:be:6a:98:c5:c0:7f:60:61:96:67:dd:
c1:50:2b:1d:5d:fd:d4:da:1f:f6:de:4c:12:11:46:
5a:65:19:bb:ca:a9:db:80:da:e1:b1:67:8f:37:60:
13:eb:63:1e:20:da:d0:4a:7c:f9:30:e7:6d:02:3d:
99:49:58:5b:da:a2:b2:d4:7c:e5:66:97:02:3a:7d:
36:72:b2:f2:ec:b7:96:30:6f:69:3e:ae:f4:a7:43:
82:de:66:7b:b8:fb:2a:47:62:32:ce:4a:16:c7:0e:
04:5b:71:ee:8c:77:71:c1:83:7e:75:d8:0d:53:9c:
b1:4a:1d:c0:95:61:0f:fd:3a:c5:42:8a:07:36:67:
81:45:2a:d9:58:57:c1:66:10:d5:f0:7d:ff:8c:27:
33:58:30:83:60:15:f3:6c:12:02:be:e6:14:d1:dd:
6a:79:27:00:57:eb:3e:fd:92:5d:4d:12:87:05:70:
71:b7:fd:6e:b1:ec:54:b0:2b:65:61:32:e7:60:31:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:C2:D8:81:A6:B9:C6:27:F8:94:08:52:07:23:B9:01:A2:09:E4
X509v3 Authority Key Identifier:
keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:75:d5:bd:bc:cc:5e:6c:d6:17:5e:82:da:83:b3:36:85:20:
68:20:11:e3:7a:b3:15:f2:73:4d:79:af:89:a5:34:e9:b2:e5:
c6:30:1a:7c:23:de:bb:b0:3a:84:5b:78:3a:20:ef:ea:88:66:
f1:f3:40:db:25:c4:de:0c:ce:a6:60:6e:e7:00:a2:21:a3:42:
02:bf:12:0e:fe:89:c6:be:af:db:f0:08:e8:92:94:24:82:86:
b6:53:1b:ae:6d:59:d0:27:28:3d:90:06:de:3c:d6:d9:f0:a1:
98:33:e7:49:05:ee:a6:8f:d6:8d:7f:c0:fe:6d:29:cf:95:6d:
c5:27:a1:1d:c0:95:bf:f4:fa:62:dd:e8:88:4d:06:41:be:f6:
d4:dc:06:14:23:13:f5:cf:5c:1a:35:f2:5e:a0:c0:26:99:b3:
54:c3:d2:37:71:65:2f:5b:83:16:78:a8:a8:92:c7:83:39:ff:
4a:01:ae:c4:4d:77:15:56:d4:c1:70:d2:6f:a9:0c:95:69:d0:
3c:eb:22:96:12:22:2b:94:26:a4:9c:9e:4f:25:ab:55:b7:f6:
ae:5a:da:22:ce:93:49:ea:f5:3b:fd:06:3e:a4:bb:f3:34:66:
cf:d0:ea:37:ee:4e:bb:99:d4:40:f6:b7:a6:1d:e5:ed:b4:dd:
4e:7c:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:05:56 2026 by rpki-client