
$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
File: 388802BC067711EDA1DEB529C4F9AE02.roa (raw, json)
Hash identifier: ZLrpjaK1+7gnd1piN93H0vUz3/K0I8ARXc+tRTMhSrw=
Subject key identifier: 0B:B1:7A:1C:F4:15:C4:0E:78:7A:63:96:AE:E2:58:99:D1:6B:EA:5B
Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial: 0321
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:03:26 +0000
ROA not before: Sun 17 Aug 2025 02:08:24 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 134403
IP address blocks: 103.63.234.0/23 maxlen: 24
2001:df4:f400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801 (0x321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Validity
Not Before: Aug 17 02:08:24 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a400de-175b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:d0:a1:b4:fe:f0:57:ba:d4:0d:1e:17:bc:
c3:3b:7d:b4:d0:c9:e9:af:d3:b3:72:3f:45:f2:10:
25:ae:c7:5c:ee:4b:d9:e1:69:26:60:f4:2a:da:e1:
29:29:0c:ce:fe:97:6e:6a:4b:90:b1:a4:c0:b9:3e:
4f:3d:25:74:37:e0:4a:b0:be:72:bc:79:62:8a:f1:
28:e1:0f:86:a0:7b:d9:d8:cf:76:32:6d:c3:d4:85:
42:6b:56:e4:25:33:37:0b:c3:38:1e:33:c0:89:43:
58:ee:91:b7:67:da:46:59:56:31:16:25:03:36:fe:
95:8c:25:89:0b:3e:db:7e:36:19:0a:69:e0:7d:1a:
bb:ae:86:ed:b1:51:e6:94:7e:76:ac:93:aa:ff:51:
3e:f7:9e:40:d2:dd:1c:13:b8:81:02:13:ec:f6:f0:
7b:d0:c0:49:9a:93:94:cc:0b:f1:c2:a0:d0:66:f4:
98:f8:07:9e:b9:77:7d:c9:7b:ae:36:5f:2e:c1:83:
d0:be:52:1e:f6:65:12:35:ca:6f:ff:87:c2:f5:7f:
fb:47:97:43:d9:3c:e2:93:33:d3:40:e7:40:93:a0:
25:c8:14:e0:a2:15:01:c8:98:2f:2c:f6:3d:8c:01:
98:fc:d4:77:b3:5a:16:58:6a:3f:54:ff:82:27:6f:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:7A:1C:F4:15:C4:0E:78:7A:63:96:AE:E2:58:99:D1:6B:EA:5B
X509v3 Authority Key Identifier:
keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.63.234.0/23
IPv6:
2001:df4:f400::/48
Signature Algorithm: sha256WithRSAEncryption
4a:c6:73:35:bf:c6:68:d1:12:b1:e7:a0:e9:b5:c5:5e:ea:38:
1c:c4:49:66:56:ea:b4:95:a9:65:cb:a4:4c:65:db:45:e7:8e:
4f:a5:69:be:5c:ed:1c:a5:a8:ed:5b:4d:34:0f:04:7f:3f:e0:
56:04:c2:00:d2:a1:b4:24:43:23:45:58:af:c0:37:2f:b5:f3:
69:c2:58:8d:cd:1b:1e:39:36:a8:7c:b0:cf:8f:42:b7:0e:e8:
95:66:e4:28:35:f1:a8:b3:8b:04:ac:b8:48:9c:13:b3:a0:e9:
7a:95:b4:6d:26:40:7f:ad:60:d2:c7:29:70:76:7b:3e:8a:08:
c7:d7:f9:bf:9f:ff:de:1c:a8:55:71:37:15:74:6c:57:71:54:
be:4e:d5:46:85:fb:cb:c6:b6:a0:62:d8:be:9c:4d:06:65:0b:
6d:35:49:b8:ad:1d:10:ff:2f:01:6a:26:c1:19:a3:61:9d:a3:
9c:bd:84:1b:4d:36:d0:32:0b:7e:1e:f5:45:56:7f:9b:50:6a:
15:65:35:d5:a1:db:af:09:69:b0:bd:bb:78:91:00:36:6f:3f:
ef:1f:dc:4d:ad:1e:25:c0:66:86:33:04:1c:c4:2d:54:f1:4c:
3f:d0:5f:02:2d:fc:1c:22:c5:ac:96:02:e9:c3:e7:5c:02:2e:
a8:21:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:22 2026 by rpki-client