
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/C4B2F4D26E2D11F1AAE9D25878A30FBC.roa
File: C4B2F4D26E2D11F1AAE9D25878A30FBC.roa (raw, json)
Hash identifier: y2Yu7DNBwQ1F41IXGGxGYif7p6j6eyoOWPgPCGsAZSA=
Subject key identifier: 23:2A:38:73:70:9F:80:F6:36:6A:E9:51:8B:41:E3:DA:56:B8:2A:06
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 0800
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/C4B2F4D26E2D11F1AAE9D25878A30FBC.roa
Signing time: Mon 22 Jun 2026 11:30:28 +0000
ROA not before: Mon 22 Jun 2026 11:30:28 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 21859
IP address blocks: 103.242.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 21:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Jun 22 11:30:28 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a391cd4-3523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:c5:31:ed:05:27:d6:f1:88:7d:3b:3c:33:
49:5a:ed:dc:25:31:77:fe:b5:ee:32:a3:88:1a:59:
0e:49:3d:b6:6e:1a:32:29:be:b0:cb:1e:71:7b:8c:
52:83:0c:e5:8b:e5:a3:80:bf:6a:ae:0c:14:e8:3c:
2c:e2:8e:d5:8f:1d:0c:3e:b8:23:06:10:cf:d8:89:
a7:14:ae:f3:bf:2f:56:5a:42:60:e6:bf:7a:73:52:
b7:c8:67:21:88:a0:ef:81:97:0b:c1:19:50:07:f9:
e8:76:93:9f:e6:d9:4e:35:97:54:d2:bc:a5:c9:e4:
0a:65:c9:1b:e5:2a:30:b7:0c:5b:24:56:bc:cd:25:
98:8c:69:fa:f6:6c:f9:87:c2:b0:11:68:0c:7e:2e:
e7:38:0b:14:a1:17:5d:26:de:f3:fe:1b:c0:f6:e4:
b3:0e:99:b1:a7:36:ca:6b:ee:e0:cb:b7:49:f3:24:
cf:b5:06:6b:0b:55:73:51:35:29:74:c5:d0:86:d5:
97:dd:06:fe:73:7c:a5:f5:ab:e0:5c:fc:c8:7f:c7:
04:ad:a2:13:0c:89:21:ad:fc:1d:fe:2d:c0:55:b6:
a7:fa:fb:fb:bf:d4:55:bb:48:29:01:fc:de:3d:27:
c1:24:0d:57:a9:78:9f:fe:3c:1f:13:39:5d:d4:91:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:38:73:70:9F:80:F6:36:6A:E9:51:8B:41:E3:DA:56:B8:2A:06
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/C4B2F4D26E2D11F1AAE9D25878A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.242.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:62:e6:aa:19:fb:6a:0e:79:8e:60:d4:6a:ff:72:aa:1d:42:
24:aa:61:a3:2e:9e:9f:f9:cc:72:ff:3f:e2:32:74:e1:73:77:
b1:0c:97:a8:3d:f8:b0:b6:a9:a4:45:45:ff:a3:a5:c2:8f:d5:
67:41:11:11:aa:64:33:a3:2b:09:ec:75:90:ae:cc:f2:b2:51:
76:b5:11:9e:f9:ed:a3:dd:8a:ea:cb:fa:de:df:12:5b:1f:47:
00:47:71:59:c6:89:f3:b5:bf:5c:2b:c5:5c:a2:95:53:bc:d9:
af:92:5c:34:71:d0:ba:5d:0f:22:a2:bd:68:b3:b0:0f:57:a9:
d4:c2:03:84:ca:67:d5:23:00:ac:c9:26:77:39:d4:c7:41:b9:
ee:60:82:e6:33:f6:81:ca:5f:99:49:da:14:50:3c:a8:9c:24:
5f:93:91:05:2a:c3:bd:97:27:4c:a0:35:ed:c0:d7:c9:5a:ce:
6a:eb:3d:c3:e9:3a:41:a6:7e:31:04:57:2d:db:4e:f9:66:56:
f1:7c:86:54:d5:e4:62:e1:d3:ca:04:10:d8:eb:24:25:7a:e8:
03:88:4d:de:d6:09:2e:fc:6c:66:ae:4b:4a:ae:0c:28:46:9c:
53:26:ed:fe:68:a9:94:ad:e3:0c:2d:fc:a3:88:f4:2c:f0:4b:
38:ef:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:51:37 2026 by rpki-client