
$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa
File: 39397B6C69BE11EFA850E254C4F9AE02.roa (raw, json)
Hash identifier: WB4/4aQXO0dmreo4i2lxjozeibXr37yGg+CXzqW0Gx4=
Subject key identifier: 18:71:28:8B:23:63:32:5E:12:1D:AB:C9:BF:72:8F:FC:6C:EE:98:51
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 0624
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:51:46 +0000
ROA not before: Fri 11 Jul 2025 00:05:54 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 131341
IP address blocks: 103.69.124.0/22 maxlen: 22
103.69.124.0/23 maxlen: 24
103.69.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Jul 11 00:05:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40c32-2d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:8c:56:66:a1:8c:2e:6c:8e:85:fe:21:68:
29:63:01:74:0c:fd:1e:5b:c9:de:da:c6:5f:c3:da:
3a:3f:fe:b6:e4:0d:33:37:48:c4:07:93:43:ba:4d:
77:c4:37:ba:63:e1:c5:4c:46:c1:5b:06:3b:3e:b2:
24:fc:2d:22:b5:08:68:64:fd:53:6c:a2:74:a6:fe:
ed:11:9b:37:f0:2a:11:d3:f5:0a:be:1c:99:92:25:
34:d7:d1:ad:4f:ae:37:cc:d1:38:01:c5:2b:cd:29:
21:b9:5a:a3:2b:97:95:29:55:90:d4:24:0a:93:c2:
af:d3:f0:ac:c2:ba:25:6c:a1:ff:df:84:ac:9d:0e:
c3:24:9c:b5:42:4e:a9:f5:d8:f1:85:7a:0f:64:62:
24:fa:93:0d:fa:85:96:0b:24:54:c1:51:2b:35:67:
76:9f:0a:3b:cf:aa:20:44:8f:1d:03:5c:c1:e7:0d:
37:cc:23:dd:f4:29:22:1f:92:98:73:ce:ed:39:ee:
f8:61:ac:52:1a:2c:27:63:8a:0a:ae:45:2e:a1:7d:
f2:df:09:d6:dc:97:8e:e7:05:0f:ed:91:84:61:59:
9f:e2:5c:5f:be:84:74:a9:a9:ab:42:c5:7f:09:53:
42:e5:59:6b:f8:c8:81:63:94:03:f9:dd:58:0b:ee:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:28:8B:23:63:32:5E:12:1D:AB:C9:BF:72:8F:FC:6C:EE:98:51
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.124.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:f5:d2:45:0b:3c:5c:5b:e1:90:78:15:c6:7f:f3:7c:80:0e:
23:22:4a:6c:8e:4d:21:75:db:9d:d0:65:81:dc:db:10:b7:1e:
4b:ef:ec:e5:80:95:fb:72:d9:c5:8c:ad:f9:c6:d8:04:ae:b1:
43:28:4f:ac:17:63:33:31:5e:3d:b0:0e:93:03:79:41:bd:e8:
4d:4c:02:50:bd:84:29:95:20:4c:dd:9e:6e:cf:d7:4e:3b:0c:
8d:fe:0d:b1:b8:d5:a1:8f:25:48:4d:a7:cc:a4:5d:b3:a6:89:
fc:fc:31:37:72:40:06:80:44:ae:78:6f:cb:f9:b1:d0:e5:f8:
f8:98:79:e6:31:4a:95:48:04:ba:01:05:0a:1c:75:81:e2:49:
9b:a4:f9:e9:8a:20:8b:a0:5c:c8:1b:1a:e5:9d:21:aa:b1:46:
43:fa:5e:21:06:f2:9a:82:44:22:84:d1:89:f9:4a:2c:b9:71:
ed:68:fc:b1:b1:a0:cd:d6:c4:fd:dc:e7:da:38:ca:2f:33:63:
32:5d:57:7a:b3:dc:4c:42:29:9b:8c:9d:7a:57:be:fa:b3:4c:
14:4a:67:4e:4e:99:b1:99:e5:08:4a:61:26:e7:55:8e:2d:99:
be:09:34:2e:3f:23:0a:49:af:88:47:fe:90:5b:e4:61:2c:1e:
04:23:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:18:36 2026 by rpki-client