
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/F20C8EFCBEE611F1A4E8C3E15511F970.roa
File: F20C8EFCBEE611F1A4E8C3E15511F970.roa (raw, json)
Hash identifier: 7her/Y1gX5SIB6mQBE9UUUwi8htSoe6sVWZx5vBn2jA=
Subject key identifier: 60:37:C0:C1:44:85:B0:C6:AF:A1:29:8A:F2:30:89:09:51:C6:F7:C5
Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial: 08AC
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/F20C8EFCBEE611F1A4E8C3E15511F970.roa
Signing time: Sat 03 Oct 2026 04:57:34 +0000
ROA not before: Sat 03 Oct 2026 04:57:34 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4637
IP address blocks: 103.3.167.0/24 maxlen: 24
117.120.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Validity
Not Before: Oct 3 04:57:34 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ac08b3e-0d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:53:4f:12:8a:14:04:98:f7:4b:0d:3d:30:
4c:3a:5b:fa:8e:2d:1e:cf:3b:89:89:cb:22:2d:7b:
da:ae:b4:eb:09:a6:9c:c4:29:f7:ce:f6:4b:2e:b0:
7b:97:45:dc:d3:27:8e:15:4e:cd:d8:79:07:84:0a:
42:6d:02:0c:6e:33:50:b4:a2:de:9c:e9:70:41:0e:
3e:4e:35:12:58:ea:50:be:50:dd:c6:ea:b9:f6:66:
da:77:ed:86:21:5d:27:98:5f:87:0b:55:a0:6c:c4:
62:d2:0d:6c:79:1f:f7:cd:e1:dd:79:7f:c0:c7:a0:
e9:d5:6a:ce:d9:6f:b7:fe:19:30:eb:14:2c:94:8f:
8f:83:5e:61:b8:b5:76:c8:6d:13:14:3d:a5:c5:aa:
2b:94:6e:46:36:ea:fd:6f:46:e8:7e:9c:92:f8:97:
17:43:72:42:4d:39:d2:16:66:74:91:e4:a1:a2:8a:
52:ba:59:37:76:fc:c6:47:f9:81:93:76:db:2e:bd:
c7:b7:ca:4b:5c:e4:1c:df:6e:fc:90:8a:89:c3:8d:
91:e1:80:17:48:3e:e7:62:09:0b:51:e9:f1:9b:f3:
81:9c:43:cb:ca:d8:d5:fa:fa:e7:77:74:d4:8f:ed:
18:28:e5:1b:55:fd:f7:3f:ff:22:68:6c:40:50:16:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:37:C0:C1:44:85:B0:C6:AF:A1:29:8A:F2:30:89:09:51:C6:F7:C5
X509v3 Authority Key Identifier:
keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/F20C8EFCBEE611F1A4E8C3E15511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.3.167.0/24
117.120.0.0/24
Signature Algorithm: sha256WithRSAEncryption
88:39:1b:9c:ff:b2:31:3d:ec:90:ac:1c:de:58:1c:87:27:97:
e1:7e:9b:f4:7b:69:8d:be:57:63:03:b2:d2:fa:8b:23:2d:10:
eb:e4:ec:9e:e8:6e:1c:b2:28:c5:a0:fc:80:82:65:e3:b5:4b:
73:c0:df:4a:0a:58:5a:ec:d0:c6:60:7d:c6:08:89:13:9e:3f:
be:61:98:c3:a5:b7:0f:96:f7:a9:4e:01:76:24:6c:0f:f5:81:
0f:87:65:6a:cc:75:96:85:bc:5c:8e:ca:bd:cb:b7:0e:a3:c9:
ce:5a:46:80:ff:f5:97:63:ad:f2:09:16:f1:1e:23:10:48:4a:
98:33:23:14:e5:be:34:fe:44:b0:33:0b:79:ea:3b:b9:9b:ee:
fb:90:e9:c7:98:16:58:af:8b:91:4a:f6:36:98:64:ab:6e:57:
5d:e6:20:69:bd:95:88:8f:41:de:be:56:70:f2:66:a6:be:e6:
1c:8c:92:e1:a1:d4:ef:b4:47:0c:98:7e:eb:7c:9f:8d:3a:ae:
a1:e8:a2:de:89:01:3f:6b:1b:b0:63:c2:d7:70:72:bc:ca:b9:
15:5d:21:6c:e0:59:b6:c6:db:f8:91:0d:cf:d9:7e:a6:fc:12:
7c:86:e5:20:1a:98:54:2a:6c:eb:65:22:af:58:a3:12:3a:3d:
90:ac:26:c9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw
QzAxMzFFMkUwHhcNMjYxMDAzMDQ1NzM0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwOGIzZS0wZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA155TTxKKFASY90sNPTBMOlv6ji0ezzuJicsiLXvarrTrCaacxCn3zvZLLrB7
l0Xc0yeOFU7N2HkHhApCbQIMbjNQtKLenOlwQQ4+TjUSWOpQvlDdxuq59mbad+2G
IV0nmF+HC1WgbMRi0g1seR/3zeHdeX/Ax6Dp1WrO2W+3/hkw6xQslI+Pg15huLV2
yG0TFD2lxaorlG5GNur9b0bofpyS+JcXQ3JCTTnSFmZ0keShoopSulk3dvzGR/mB
k3bbLr3Ht8pLXOQc3278kIqJw42R4YAXSD7nYgkLUenxm/OBnEPLytjV+vrnd3TU
j+0YKOUbVf33P/8iaGxAUBaKbQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGA3wMFE
hbDGr6EpivIwiQlRxvfFMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE
Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI
aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjlGQ0MvMjJDRDc5REUwRENDMTFFQkI4MUJBNDMxQzRGOUFFMDIvRjIwQzhFRkNC
RUU2MTFGMUE0RThDM0UxNTUxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZwOnAwQAdXgAMA0GCSqGSIb3DQEBCwUAA4IBAQCIORuc/7IxPeyQ
rBzeWByHJ5fhfpv0e2mNvldjA7LS+osjLRDr5Oye6G4csijFoPyAgmXjtUtzwN9K
Clha7NDGYH3GCIkTnj++YZjDpbcPlvepTgF2JGwP9YEPh2VqzHWWhbxcjsq9y7cO
o8nOWkaA//WXY63yCRbxHiMQSEqYMyMU5b40/kSwMwt56ju5m+77kOnHmBZYr4uR
SvY2mGSrbldd5iBpvZWIj0HevlZw8mamvuYcjJLhodTvtEcMmH7rfJ+NOq6h6KLe
iQE/axuwY8LXcHK8yrkVXSFs4Fm2xtv4kQ3P2X6m/BJ8huUgGphUKmzrZSKvWKMS
Oj2QrCbJ
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:47:57 2026 by rpki-client