
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa
File: DA481A0CB61811F0ABB14C31C4F9AE02.roa (raw, json)
Hash identifier: 8Rl96D5sYGpsjafaxGZ3JFZlqI400umySAUs5W9ShSc=
Subject key identifier: A3:A5:05:56:44:E4:B5:61:A3:32:EE:94:D8:D6:43:86:15:E4:33:05
Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD
Certificate serial: 0F5D
Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa
Signing time: Sat 30 May 2026 18:21:08 +0000
ROA not before: Sat 30 May 2026 18:21:08 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 139922
IP address blocks: 103.139.152.0/24 maxlen: 24
2001:df0:8180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl
rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3933 (0xf5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD
Validity
Not Before: May 30 18:21:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a1b2a94-e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:9b:82:4c:fe:65:ef:57:0c:8e:e6:fd:59:
8a:fe:b0:2d:c6:1f:ea:2b:ee:c9:df:5a:3a:eb:0d:
56:af:ef:4c:a3:2e:39:fe:5f:94:71:35:7c:26:e3:
d0:39:7a:ba:7d:4a:46:0a:e2:ff:52:9a:2a:a7:d1:
97:b7:1c:06:5a:ce:9a:cd:8a:00:94:57:e5:e5:3f:
a0:ae:59:68:47:4f:28:a1:9d:a6:21:7e:e6:be:5e:
68:51:cd:b9:99:7c:cc:ad:eb:6a:22:a8:df:5f:36:
44:0e:de:b4:fd:67:f8:7e:44:2d:43:4b:f3:67:e2:
1a:a9:54:3f:54:d5:6b:3c:4e:29:37:63:1a:6f:62:
94:b3:c8:cf:2a:37:ee:f9:da:5e:57:95:87:c4:9d:
7c:26:16:93:57:8f:27:b3:5b:dc:d4:d5:96:c7:4b:
e7:d5:9a:ea:f5:70:06:95:55:83:c1:4a:e7:a1:e3:
1e:41:15:3d:20:71:16:f4:d8:67:49:ea:86:3f:86:
2f:19:c6:c9:0f:48:13:54:ed:00:81:6b:8a:ab:ff:
b1:88:a8:fc:4f:1e:c7:c7:b2:8f:fa:0a:9e:69:7a:
24:80:f4:52:35:d7:8f:12:ca:70:29:a5:f5:30:49:
5a:de:8e:f3:33:d1:f4:29:15:a0:cd:26:3e:33:92:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:05:56:44:E4:B5:61:A3:32:EE:94:D8:D6:43:86:15:E4:33:05
X509v3 Authority Key Identifier:
keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.152.0/24
IPv6:
2001:df0:8180::/48
Signature Algorithm: sha256WithRSAEncryption
34:c1:1d:cd:fc:56:4c:30:02:c6:22:c0:69:18:40:75:9c:93:
75:6d:7e:75:00:0b:b3:e3:8a:95:41:e9:bb:f6:e5:b1:54:16:
8a:2d:e9:2b:8a:4e:3e:d8:80:a2:34:7c:66:c6:ca:7b:3d:c2:
57:a2:ef:88:6c:07:72:3a:7e:ed:38:63:ed:dc:52:54:0f:f3:
bc:1b:3d:5a:50:55:c2:91:33:a8:67:26:c9:eb:e8:9c:04:3d:
11:6e:0b:93:1a:80:98:4b:70:20:36:c4:cf:f6:7a:e4:37:34:
32:08:bc:76:05:76:9c:59:92:21:f4:6c:9b:88:b6:d9:45:1a:
65:8b:26:e6:62:00:d3:87:c4:67:ed:20:7a:6f:ad:58:87:35:
f9:51:f4:5f:00:e6:f9:c6:f1:42:0f:73:87:f7:9c:50:d6:8f:
77:58:54:58:42:12:de:c1:a3:3c:0b:72:33:c4:21:c1:1c:64:
06:c1:70:49:e6:15:47:82:aa:ff:32:aa:c8:25:8c:20:c6:6f:
ce:6c:e7:c1:cb:1a:5c:50:33:87:0b:d9:5b:7d:78:8d:40:b6:
cc:a2:5d:2f:f4:9e:f2:a0:db:da:be:21:60:39:9f:00:84:47:
3b:54:cd:f4:36:88:b6:ab:14:48:15:b7:9e:74:cf:a3:66:cd:
f4:82:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:09:42 2026 by rpki-client