
$ rpki-client -vvf rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/D030482C001011F18942B574406F56BC.roa
File: D030482C001011F18942B574406F56BC.roa (raw, json)
Hash identifier: sbfrnLF6dkRPUD2i2wrrg7/6Vn8Z0is3ukK/xyl/U6c=
Subject key identifier: 69:B7:C7:0E:32:A7:A5:34:2D:66:F1:DE:59:B1:32:0E:27:09:11:55
Certificate issuer: /CN=A91133BE/serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Certificate serial: 12
Authority key identifier: FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/D030482C001011F18942B574406F56BC.roa
Signing time: Sun 01 Mar 2026 05:38:11 +0000
ROA not before: Mon 02 Feb 2026 08:26:04 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4686
IP address blocks: 103.242.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133BE, serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Validity
Not Before: Feb 2 08:26:04 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3d0c3-8bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:db:a0:58:e1:cd:a2:c7:2d:71:58:b5:72:
29:1d:38:5d:31:87:f4:21:06:66:b4:86:42:dd:ea:
2a:dc:1e:34:1b:5a:3c:05:9f:1d:e4:09:1d:7a:04:
c7:73:83:1f:2d:2d:e5:1a:a4:19:9a:82:4e:63:08:
72:aa:3a:00:63:df:e4:bf:95:ac:df:35:f9:c5:2b:
a8:67:f2:7f:92:ce:0d:04:00:cf:7e:e1:35:d3:c1:
27:3d:b8:41:de:76:d4:d1:9b:29:89:52:60:0e:a2:
57:80:9d:47:bd:a1:ce:a2:bb:38:c2:23:3b:d5:37:
c9:86:35:9a:0b:3b:28:b4:2a:fc:14:be:39:1a:27:
72:82:57:f9:e4:98:30:fd:37:e4:d6:30:7b:02:a8:
a9:21:01:ab:31:56:91:7b:6b:8d:fb:7b:3b:49:69:
c0:e1:8e:3d:76:0b:57:c7:a6:c9:91:b9:00:ba:f2:
1c:8c:60:3a:d1:c0:c9:87:a4:f7:4b:54:1d:76:a8:
f1:2c:f9:88:13:93:99:87:6f:45:76:26:bc:bb:b7:
c4:c5:41:4c:c6:67:20:cb:89:29:2c:37:43:7c:66:
a9:43:b4:3d:78:93:d4:94:e2:13:2e:d0:5c:3e:bd:
58:9c:2f:d8:cc:5d:00:bc:35:ab:f3:54:fc:a0:aa:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:C7:0E:32:A7:A5:34:2D:66:F1:DE:59:B1:32:0E:27:09:11:55
X509v3 Authority Key Identifier:
keyid:FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/D030482C001011F18942B574406F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.242.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:54:ef:ac:93:ad:25:b9:3e:ba:e9:8a:c0:c8:ef:87:d4:a1:
65:a2:e1:34:c9:3c:60:60:73:41:3a:e7:f1:44:16:7d:b1:ab:
fa:30:a3:ca:e3:95:2b:c1:ee:5a:4d:9c:90:25:65:bf:c7:1f:
b1:90:53:fb:52:88:cc:e2:ea:97:64:17:a2:20:64:0e:95:bc:
b6:e5:10:c8:be:ba:79:02:dc:46:4e:37:a1:c1:6d:be:75:55:
6f:91:b8:74:90:d4:75:6c:7c:b0:66:e6:92:92:55:aa:94:10:
56:7c:17:74:38:db:32:3b:97:d2:4d:2d:fe:ba:2a:49:34:62:
00:ee:d8:6c:6b:d8:76:e3:16:fe:0f:1c:bd:21:30:fc:01:4d:
24:be:93:e0:9b:f5:db:68:d0:4b:9c:3e:c0:cd:88:d9:73:50:
a2:68:5e:cf:59:6d:41:e2:32:a0:93:e3:58:6a:55:fd:e8:68:
43:dc:84:46:13:69:57:45:83:e6:3f:e3:14:13:b1:ac:37:00:
f1:fc:73:1d:a4:e3:99:92:d0:d0:44:0d:3c:83:51:93:13:e4:
1e:15:40:cd:00:18:e7:bc:ba:0e:63:66:4c:eb:fb:03:11:a2:
25:ff:9c:6a:84:2b:05:37:bc:80:c0:00:13:b4:e7:5c:05:c6:
35:6b:f7:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:22:57 2026 by rpki-client