
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa
File: 743770A0C06011EE882BC34AC4F9AE02.roa (raw, json)
Hash identifier: GXMJ3iSV7mMNI938z3e/TfdeTTGCTZ/1gTTNfE5Mcdk=
Subject key identifier: 0B:B3:35:1B:71:AD:16:C3:FD:78:F3:6D:9A:C3:0F:30:AA:D0:32:B3
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 15B5
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:27:17 +0000
ROA not before: Fri 02 Jan 2026 17:14:07 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9541
IP address blocks: 103.209.125.0/24 maxlen: 24
103.209.126.0/24 maxlen: 24
103.209.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5557 (0x15b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Jan 2 17:14:07 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a476f5-07c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:2c:87:65:38:59:e1:fb:fe:c8:82:10:1e:
07:04:de:17:75:5e:12:fa:3a:2b:4b:18:d9:33:a7:
75:09:b8:55:5e:0f:ad:dd:9c:d3:a7:4c:1b:8d:5a:
d1:3f:67:22:a5:88:ea:71:1a:cf:21:4f:e7:4d:d6:
c1:d4:b3:f2:9b:b3:d0:d7:2e:4d:ab:e2:48:38:bb:
4d:36:ba:c4:db:6f:11:f3:47:a5:9f:25:42:0d:e6:
1e:80:a6:e0:37:25:50:fa:1f:6e:f7:aa:30:04:1a:
3e:22:41:18:0b:e0:95:be:97:f4:6b:44:af:e7:5f:
d8:e3:d3:85:4a:bc:98:5c:38:a4:e2:0f:47:b7:a3:
91:e5:24:80:2b:4e:e4:ac:95:47:fe:93:46:d8:f9:
a0:08:4f:bb:b6:49:a8:33:af:b8:13:27:58:86:2b:
b2:96:d7:9f:68:1d:8f:46:39:8a:30:b9:98:73:9f:
c1:7e:31:bf:dd:4d:ff:a2:90:0e:44:65:94:0d:e7:
93:39:74:ab:d6:74:f9:13:b7:58:68:3a:2c:b2:20:
fe:a7:3a:81:9a:7b:01:84:5f:16:24:45:a9:da:4f:
e1:4e:da:ab:6c:02:6c:ad:dd:d5:58:b5:4d:dc:24:
b1:45:00:06:22:82:c7:90:5a:a1:06:35:47:a9:f9:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:35:1B:71:AD:16:C3:FD:78:F3:6D:9A:C3:0F:30:AA:D0:32:B3
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.125.0-103.209.127.255
Signature Algorithm: sha256WithRSAEncryption
2b:d6:14:1e:42:61:aa:51:91:fd:6e:d6:0d:3d:f2:82:fe:d7:
c9:32:30:c5:cf:79:6d:78:5a:6b:af:49:1d:df:67:cd:3b:72:
97:ad:81:78:d2:47:14:b7:5b:9a:95:ca:9a:67:1f:37:00:dc:
e9:24:34:53:05:59:18:54:63:b1:b3:08:17:81:a4:35:1b:c3:
38:ac:09:f4:65:9c:55:03:29:c6:84:0e:bf:8a:1e:63:3a:c2:
6b:01:ef:70:73:a7:02:0b:52:f2:b0:41:d4:26:83:2c:82:7d:
ef:c7:15:c8:7f:8f:03:ef:bc:89:42:42:e5:a3:c4:ae:5e:93:
f8:93:eb:bd:f7:bd:2c:8a:80:4f:8b:f4:c1:ac:14:61:a7:4b:
54:94:43:22:31:99:7d:d6:f2:18:cd:f5:87:00:b4:5c:04:95:
26:c8:9a:4a:ea:33:92:49:40:27:04:f6:bc:f4:94:83:a1:ca:
12:ad:5d:a6:34:4c:c0:6c:68:b6:f0:79:6c:da:ee:15:b0:3b:
c1:8d:34:9f:a8:fe:54:b0:3a:30:ca:1f:0a:b2:42:9b:1f:8b:
3f:ca:21:a6:95:b1:b1:75:b2:5a:b5:4c:9e:1f:33:e1:f9:c8:
05:79:29:c1:c1:34:8d:38:26:94:9b:57:43:51:cd:c9:cb:cb:
97:bf:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:06 2026 by rpki-client