
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa
File: 04231ECC326F11F0B0723439C4F9AE02.roa (raw, json)
Hash identifier: OeaYPNBUtTPvim9HMxt2o8TBmHEZXyqHblAeC5l7mS0=
Subject key identifier: 47:A6:18:09:51:D4:C1:15:A2:CA:B2:84:9B:DC:3A:AA:67:14:06:54
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C01
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:15:41 +0000
ROA not before: Thu 28 Aug 2025 19:40:43 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135426
IP address blocks: 103.17.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3073 (0xc01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Aug 28 19:40:43 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4824d-be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:29:38:02:50:f5:35:b9:00:88:39:e3:3e:
17:47:d5:07:2c:ad:03:72:8d:f2:08:2b:90:23:8f:
56:49:28:ee:f2:83:a9:69:52:a7:42:5d:c1:d2:e8:
33:cd:db:c0:e8:6f:73:47:4a:0c:0e:49:c3:e3:11:
40:62:e6:94:88:77:09:69:60:54:6d:63:fb:b3:58:
62:97:1b:20:6e:70:6a:5a:85:dc:33:bc:ce:a3:65:
5b:3e:48:75:ab:21:1a:b6:c5:d9:a1:22:64:24:1d:
a3:e2:81:1d:40:16:d1:74:2e:6c:57:4e:0f:9e:f1:
35:29:78:72:b6:7f:fe:55:b6:db:08:9a:dc:e8:9d:
7b:13:a8:ec:b7:15:b3:83:27:45:f3:f3:96:1a:f0:
b6:53:c8:3a:2c:9e:14:e0:07:60:75:b7:7e:3a:88:
44:93:ba:21:ff:13:3b:3a:73:69:28:fe:b8:96:fc:
cf:d6:5c:2a:c1:b2:fe:ae:5e:76:ca:70:89:e8:e3:
9a:d8:a7:21:69:1a:7d:7f:50:af:55:4e:a9:6d:c0:
e0:e1:bd:51:29:74:ca:0f:c4:e4:28:98:da:0a:8b:
e2:61:be:35:4b:dd:24:aa:da:1b:5e:81:dc:5b:0b:
cc:d5:55:71:ff:9b:61:40:3a:a8:8a:23:bd:7d:c0:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A6:18:09:51:D4:C1:15:A2:CA:B2:84:9B:DC:3A:AA:67:14:06:54
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.29.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0d:76:2b:d1:e0:67:22:c8:bb:f3:5a:b9:fa:3f:ce:5f:48:
5e:8a:8c:7f:da:88:18:6d:ca:96:29:f8:5d:3b:01:17:1d:2a:
eb:e0:1b:cf:c1:9d:86:b6:11:a6:11:68:6e:32:9c:50:fa:a2:
fa:47:9c:61:3f:7a:67:8a:db:a1:56:32:ed:fb:4e:fb:1a:d9:
33:11:4d:95:4a:be:6a:76:de:6a:b9:16:5f:6e:31:50:b1:76:
6b:e6:3d:f1:a3:0b:2b:03:81:f2:9c:2e:c6:e2:52:f0:33:9a:
0f:c7:38:d0:b9:f7:9c:14:06:1d:9a:41:90:54:74:8d:61:e9:
c2:49:f2:e2:23:03:55:c0:66:c6:d5:30:e0:4a:0d:d1:6e:9a:
84:b2:a0:15:51:96:bf:8a:c6:38:6e:2f:e5:1c:fe:c4:d6:2c:
55:0b:3d:c4:f6:5d:c5:03:e0:d3:57:2a:33:02:89:36:05:71:
de:7c:d9:3a:5d:71:68:42:b3:c6:2b:db:1f:26:cb:bf:d7:70:
e0:e6:cf:af:2e:bb:8f:1b:02:fb:6d:84:07:19:10:ce:ba:94:
c0:aa:9f:68:a6:59:42:f0:82:2e:0f:c0:60:58:e0:ae:c8:ef:
a5:c2:c5:ab:b2:71:44:5f:ae:3d:72:55:b2:70:af:fc:82:7f:
46:42:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:05 2026 by rpki-client