
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CF0AE2F0159411EDB66C5D82C4F9AE02.roa
File: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (raw, json)
Hash identifier: 3tR98Qpp+cElPjcCs79m4oSOnnMvkWLHmAoCd/9m2C8=
Subject key identifier: B2:5F:C2:12:58:5D:C2:39:97:00:57:18:24:E5:79:6B:DC:DC:A2:60
Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial: 036B
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CF0AE2F0159411EDB66C5D82C4F9AE02.roa
Signing time: Thu 13 Aug 2026 00:50:32 +0000
ROA not before: Thu 13 Aug 2026 00:50:32 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 139043
IP address blocks: 103.154.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875 (0x36b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Validity
Not Before: Aug 13 00:50:32 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7d14d8-4631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:53:3c:43:6f:7b:21:4f:b8:65:51:db:14:
d5:7d:ac:69:3b:d0:54:c9:02:77:23:e7:95:8a:7b:
02:d2:9e:e7:a7:26:61:44:2b:8b:b3:67:4b:22:44:
5b:fc:be:53:3b:a6:e6:c0:a3:36:8a:e5:88:01:44:
fa:ea:f3:d0:6b:59:8c:34:5e:80:bf:b3:96:8b:ab:
ea:65:87:f3:5c:0b:fa:1d:fd:5f:3b:2e:56:2e:e1:
1e:d4:e0:79:8e:5a:74:43:e6:77:3f:03:f2:f2:5b:
bd:ee:bf:ca:e0:be:cb:1b:bf:b3:ae:fb:0e:8f:bf:
c9:cf:95:3d:a5:e5:76:36:18:c0:d3:36:51:ae:c8:
3b:44:c9:bf:32:bf:df:d9:46:31:32:c0:73:59:e5:
44:17:46:21:c0:0a:c7:55:63:a8:0f:86:0d:3b:64:
a4:66:e9:50:52:2b:c5:2e:4c:88:a2:71:90:30:b6:
79:87:18:81:7d:9b:52:da:07:f5:ac:38:c0:1b:66:
f6:60:4f:32:d4:9c:7c:49:1e:a7:84:38:8c:4e:0a:
b8:c3:23:59:c9:56:79:0e:47:39:b7:48:a5:d8:dd:
d3:e4:50:99:72:f9:89:db:c0:6d:ce:c4:89:85:bc:
31:8f:01:41:d1:31:6c:8b:61:96:58:fa:6f:c4:df:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:C2:12:58:5D:C2:39:97:00:57:18:24:E5:79:6B:DC:DC:A2:60
X509v3 Authority Key Identifier:
keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CF0AE2F0159411EDB66C5D82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.65.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b3:72:5a:cb:4a:d0:96:c9:fe:58:b8:ca:be:58:40:7d:35:
84:e4:73:db:d8:45:6d:98:a3:13:1d:03:ad:64:5c:25:f8:df:
ed:e5:84:bb:7b:59:62:4a:94:aa:ab:ec:5e:39:bc:7c:da:0b:
97:b1:ff:c7:e5:19:d8:9a:08:0f:31:a1:ee:24:e3:d4:11:1b:
67:f2:f9:aa:1a:25:64:b0:97:dc:2f:69:83:2c:1f:2a:f8:9f:
38:fa:69:a0:00:6e:56:3b:08:68:bf:31:3c:d7:31:7f:62:dc:
7b:00:83:6f:a6:f7:0a:c4:9e:85:61:2f:c1:a0:27:bc:3c:04:
26:3f:b6:f4:41:32:95:a6:de:17:24:9e:1d:d6:96:23:d2:78:
e7:ab:3e:90:57:b4:ab:99:e7:c6:cd:eb:3b:45:24:a6:f5:4d:
07:6e:c6:43:95:d8:2f:bd:68:26:eb:67:e1:45:96:c3:1c:a0:
79:06:c6:37:18:ba:b4:92:94:96:cb:01:bb:10:2b:6a:ae:4d:
03:29:9b:4f:7b:88:4a:ce:06:cd:1e:0e:9a:62:f2:c3:c9:cf:
a8:ad:85:c1:00:25:e2:d8:97:2d:b8:27:bc:2f:ab:f0:cf:6f:
04:26:0c:c8:b1:7a:d0:7a:d2:76:56:8c:15:33:ea:ef:32:7c:
47:13:51:eb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE
QkVCRTNFRjMwHhcNMjYwODEzMDA1MDMyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdkMTRkOC00NjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXVTPENveyFPuGVR2xTVfaxpO9BUyQJ3I+eVinsC0p7npyZhRCuLs2dLIkRb
/L5TO6bmwKM2iuWIAUT66vPQa1mMNF6Av7OWi6vqZYfzXAv6Hf1fOy5WLuEe1OB5
jlp0Q+Z3PwPy8lu97r/K4L7LG7+zrvsOj7/Jz5U9peV2NhjA0zZRrsg7RMm/Mr/f
2UYxMsBzWeVEF0YhwArHVWOoD4YNO2SkZulQUivFLkyIonGQMLZ5hxiBfZtS2gf1
rDjAG2b2YE8y1Jx8SR6nhDiMTgq4wyNZyVZ5Dkc5t0il2N3T5FCZcvmJ28BtzsSJ
hbwxjwFB0TFsi2GWWPpvxN/0mQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLJfwhJY
XcI5lwBXGCTleWvc3KJgMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw
RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkE4RTgvOTAzOTc4MzAxMEQ5MTFFRDgwQjgwRDI5QzRGOUFFMDIvQ0YwQUUyRjAx
NTk0MTFFREI2NkM1RDgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5pBMA0GCSqGSIb3DQEBCwUAA4IBAQBis3Jay0rQlsn+WLjKvlhA
fTWE5HPb2EVtmKMTHQOtZFwl+N/t5YS7e1liSpSqq+xeObx82guXsf/H5RnYmggP
MaHuJOPUERtn8vmqGiVksJfcL2mDLB8q+J84+mmgAG5WOwhovzE81zF/Ytx7AINv
pvcKxJ6FYS/BoCe8PAQmP7b0QTKVpt4XJJ4d1pYj0njnqz6QV7SrmefGzes7RSSm
9U0HbsZDldgvvWgm62fhRZbDHKB5BsY3GLq0kpSWywG7ECtqrk0DKZtPe4hKzgbN
Hg6aYvLDyc+orYXBACXi2JctuCe8L6vwz28EJgzIsXrQetJ2VowVM+rvMnxHE1Hr
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:04:27 2026 by rpki-client