
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/28454DF268A611F1A734D2E87947A888.roa
File: 28454DF268A611F1A734D2E87947A888.roa (raw, json)
Hash identifier: n4ycj6ArWVaLi7Ew1oxQxTzWoZohtycWjHjC7iISPLQ=
Subject key identifier: 91:E6:47:D5:9A:F4:6F:65:DF:67:15:74:FA:56:88:E7:ED:6A:1D:08
Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial: 0281
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/28454DF268A611F1A734D2E87947A888.roa
Signing time: Mon 15 Jun 2026 10:37:07 +0000
ROA not before: Mon 15 Jun 2026 10:37:07 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 15830
IP address blocks: 103.83.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Validity
Not Before: Jun 15 10:37:07 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a2fd5d3-5841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:6e:b3:20:4b:a8:90:ae:d2:f1:c4:2e:e8:
eb:90:da:31:03:78:28:23:9c:f8:e0:c5:db:2d:2f:
a0:c5:f4:45:81:75:4c:77:41:22:90:66:32:1f:bc:
eb:df:5e:2b:55:a6:6d:77:8d:4c:1c:f1:07:a4:79:
5a:83:dc:bf:41:ee:fe:64:73:4a:2e:74:66:46:e5:
c1:10:8a:84:d3:3f:6c:1a:a7:33:82:69:bf:94:d0:
95:85:b6:5b:75:8c:8d:0c:b1:d9:99:d1:dd:8a:cc:
7a:19:de:0c:c7:42:85:25:b7:56:96:20:47:d2:7e:
15:71:c3:b5:f7:db:08:fb:fb:f3:02:b5:8f:0d:6b:
56:50:f7:54:42:66:03:06:1e:cb:85:5c:ce:f7:56:
11:a8:eb:cc:cb:7a:ba:d2:17:dd:cb:6a:2a:1b:8c:
22:71:35:34:6b:98:b8:15:5f:2d:04:53:dc:6f:31:
68:95:47:03:e9:27:1d:3e:0b:30:76:43:cc:fe:69:
b4:45:ca:7e:81:7b:c0:60:35:07:27:ed:2a:78:21:
d7:f3:9c:d7:24:d1:cf:c2:e8:1f:b1:fc:c3:3b:1f:
94:a5:23:42:0a:e1:25:74:01:f7:e0:ca:3f:f9:e7:
92:b4:b2:f9:c6:81:e5:c3:31:3f:f7:2a:bd:16:58:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E6:47:D5:9A:F4:6F:65:DF:67:15:74:FA:56:88:E7:ED:6A:1D:08
X509v3 Authority Key Identifier:
keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/28454DF268A611F1A734D2E87947A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:f6:91:51:45:3d:60:1d:e3:bc:62:ac:b5:d7:4c:c3:0c:d6:
2c:82:40:6e:e6:56:e1:d5:75:e0:e9:81:fd:0a:ee:4d:b1:81:
f0:e5:41:51:7b:a7:0e:55:da:c1:fc:df:6a:46:e8:22:be:e9:
01:9d:e3:09:af:87:ef:da:45:99:8b:af:9e:0f:30:bc:98:79:
0d:99:e3:4f:a9:06:34:5c:1f:07:32:ca:55:fb:da:a1:79:48:
2b:37:b5:67:9e:db:b1:ed:c3:7f:4f:df:9f:12:a7:b9:a7:ff:
88:2a:0f:28:5a:c0:0b:a7:e2:6e:16:24:19:3a:b5:7b:e4:1f:
13:6e:61:7c:22:75:42:b3:3d:01:9c:06:74:68:b6:78:3b:69:
de:07:d3:ca:62:2d:89:14:4e:18:c5:a3:40:d1:a8:ea:6e:a1:
20:29:c6:4f:12:75:7d:9b:6b:f6:90:c1:9d:e8:b2:57:4b:40:
7b:50:f8:36:54:0e:31:97:8e:c5:ac:a1:05:18:ae:e7:18:08:
2b:39:e0:84:cf:28:89:8d:43:3e:6f:9b:de:50:57:9f:d6:a5:
8d:58:cd:48:39:ad:9c:96:ab:26:3c:cc:8f:cb:29:e8:53:11:
ae:48:b1:10:d3:c3:9f:f5:a6:60:61:fe:8f:22:35:9f:75:f7:
80:33:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:31:23 2026 by rpki-client