
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/FF33C1BC1DB111F186D8EF283F3D8C67.roa
File: FF33C1BC1DB111F186D8EF283F3D8C67.roa (raw, json)
Hash identifier: xm+x+fd04WB7I1yVjzFgWBEajtZgqkuYkfVhhVRPfos=
Subject key identifier: 6B:3D:5E:4A:B7:2F:BA:C7:A8:B2:62:CC:46:86:36:39:43:B9:5E:4F
Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
Certificate serial: 53
Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/FF33C1BC1DB111F186D8EF283F3D8C67.roa
Signing time: Sat 01 Aug 2026 10:58:09 +0000
ROA not before: Sat 01 Aug 2026 10:58:09 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 40605
IP address blocks: 103.27.246.0/24 maxlen: 24
103.27.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl
rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 08:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
Validity
Not Before: Aug 1 10:58:09 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6dd141-8407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:52:02:59:82:e5:c9:2b:09:70:70:3f:a5:
bb:78:e4:2a:e1:c0:14:72:db:1c:56:7c:ed:38:fd:
25:9e:24:de:b1:63:12:7c:04:ab:ae:87:55:b4:2b:
5e:2e:94:2f:d5:aa:11:c1:71:16:41:c0:f7:a5:13:
61:94:41:83:15:51:6d:9e:30:7f:77:86:e4:00:e9:
ba:6d:aa:e4:b6:3f:c2:5e:10:10:23:fc:30:7b:82:
c8:5a:87:e2:e2:f6:2f:2c:47:6e:e6:71:16:fd:f7:
46:71:f4:82:39:66:ec:94:50:4d:05:5c:71:43:ce:
af:4b:d6:b7:fd:4f:06:b3:62:71:f4:fb:cb:b7:29:
d8:d7:28:b5:02:6d:a5:91:50:ee:86:2f:4a:4e:31:
1e:bf:99:1e:20:56:a4:ed:31:84:fa:18:f4:6d:1f:
79:32:fb:ef:a2:7f:fe:f8:63:10:01:83:04:1c:58:
61:b2:dc:66:4f:e8:16:ab:03:02:f3:20:19:7f:ae:
00:58:79:68:1c:c5:55:00:cb:2f:ef:2f:81:fc:a5:
aa:d2:21:6d:0f:62:fc:29:03:bb:0e:c2:2c:91:b7:
90:2b:63:04:7b:1e:45:b8:be:39:25:14:70:a5:e4:
33:26:ff:15:59:cb:c6:f4:c9:81:9a:8a:14:be:c1:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:5E:4A:B7:2F:BA:C7:A8:B2:62:CC:46:86:36:39:43:B9:5E:4F
X509v3 Authority Key Identifier:
keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/FF33C1BC1DB111F186D8EF283F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.246.0/23
Signature Algorithm: sha256WithRSAEncryption
53:b6:e0:2a:14:e7:e4:7c:89:ab:95:b7:4a:91:98:03:f7:80:
5e:9e:93:17:08:46:0e:ac:3f:cf:37:b1:f6:84:55:25:f8:9a:
9f:81:38:54:af:17:2f:d4:d4:53:80:eb:02:bf:62:c0:af:35:
b8:48:61:92:39:67:3b:52:6f:6f:d0:f1:0b:cf:6d:79:4f:c2:
e7:2b:19:54:b9:fb:c7:97:92:2a:47:4f:ba:18:c9:07:52:23:
a6:44:76:ff:7e:b2:7a:ff:c0:dd:66:3c:9b:0b:c3:39:58:f0:
e8:27:3c:f1:9b:04:be:f8:92:c4:93:82:f4:75:28:90:fc:d0:
c3:f4:71:0f:0c:3e:cd:ce:49:c5:b9:70:7b:31:96:e5:38:6f:
53:6b:9b:22:05:17:61:10:16:bc:a3:71:2e:2e:64:77:80:16:
36:7f:7d:89:a3:28:c9:3a:f0:a2:d4:88:75:4f:7a:b1:3c:81:
de:b3:56:a3:7f:41:83:9a:49:4a:e3:4b:8e:87:49:49:11:18:
b5:af:cf:5d:63:51:36:d3:99:66:a4:4c:5a:1d:de:eb:61:c5:
1e:7b:05:c4:68:d6:f7:a7:8a:51:54:50:9d:b3:ea:a1:a2:84:
72:ed:52:2b:71:e0:99:bb:d1:bc:91:a0:1c:b0:6c:31:32:70:
58:55:70:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:31 2026 by rpki-client