
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/A30B6882B3DE11F0B2D83330C4F9AE02.roa
File: A30B6882B3DE11F0B2D83330C4F9AE02.roa (raw, json)
Hash identifier: N1gpxY1Qmu9TXM+UsBN7G4a19/a7C7ui0EX50hEj8GE=
Subject key identifier: 32:CE:BF:0D:9B:03:BA:2D:6A:11:18:9E:75:4F:1D:E1:F6:81:D3:93
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C08
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/A30B6882B3DE11F0B2D83330C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:15:47 +0000
ROA not before: Tue 28 Oct 2025 09:20:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 31713
IP address blocks: 103.17.28.0/22 maxlen: 24
116.66.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Oct 28 09:20:47 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a48253-0c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:5f:e9:1f:99:f6:a3:8d:a4:3a:fe:d2:5f:
16:3e:cf:5b:2d:52:c8:d1:60:98:92:cd:e3:c1:b0:
10:82:c9:ab:da:e5:38:fa:b7:1c:46:d0:40:a2:b5:
48:17:93:68:c1:a4:70:da:61:97:b4:d0:b4:39:69:
4d:b4:57:42:68:8f:5a:e7:30:eb:7a:4a:fb:fe:94:
0c:6e:7c:3b:32:ba:88:98:b4:87:3d:ab:d7:28:1d:
90:eb:7b:29:78:63:8b:fd:49:99:b3:1a:58:e1:cf:
4e:b2:7d:2b:0d:08:d4:a9:79:80:47:a1:57:fe:3f:
b3:be:91:64:1f:ef:46:a5:e5:00:0f:69:37:29:d8:
86:9c:d4:c2:f9:f6:84:32:a6:04:f5:74:f2:7a:1e:
82:70:12:73:42:de:98:07:52:43:9c:dc:bd:06:ee:
a1:43:21:aa:cf:9e:72:d0:2d:6b:1a:e1:11:52:32:
5b:b5:56:e8:f2:3e:e0:5d:dc:b5:af:60:5d:b6:79:
a1:fb:bb:96:99:c3:7c:6e:ca:6f:ad:3d:cc:69:02:
0a:18:13:f7:bd:8a:75:2e:e9:08:20:8d:a6:45:52:
32:c2:8f:27:e2:7d:ad:5c:d8:ff:43:3d:ee:a5:bf:
fb:75:6a:33:dc:9c:e4:f4:58:ae:68:df:ae:8b:d0:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CE:BF:0D:9B:03:BA:2D:6A:11:18:9E:75:4F:1D:E1:F6:81:D3:93
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/A30B6882B3DE11F0B2D83330C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.28.0/22
116.66.208.0/20
Signature Algorithm: sha256WithRSAEncryption
41:f0:85:b8:81:75:3a:25:37:70:d1:04:b1:09:9d:1b:78:f7:
63:36:d8:c4:a4:97:c5:53:7a:0a:9e:94:31:b7:bb:61:82:81:
db:d5:c4:89:61:44:82:0c:54:fe:41:9e:e6:84:60:d1:20:61:
ae:15:9e:20:52:b7:e1:8f:b8:33:ff:55:04:47:c0:de:1d:61:
78:ce:d6:e5:da:df:a5:d4:62:da:2f:24:2b:39:0a:f1:e9:85:
1f:a8:4c:8e:8a:51:ef:64:cc:bc:9c:3f:9d:d3:4a:c1:56:54:
5a:1b:cb:6f:81:8d:a2:00:a8:2d:3d:0e:17:0c:23:48:10:7c:
e4:b3:0d:58:da:50:56:68:2e:df:ef:59:ce:ca:84:91:9e:aa:
1b:9f:4e:53:36:b9:48:61:ea:db:1d:a5:9a:07:e1:77:c5:86:
05:1a:c2:94:60:34:36:b0:bd:3c:86:0e:8b:71:90:4a:83:2b:
30:c4:a7:b8:fd:30:bd:cf:26:d2:83:9a:0e:b5:b9:80:34:ce:
ac:aa:21:59:58:02:58:d2:1a:83:31:67:f8:64:11:cd:50:6e:
58:04:52:4f:9f:d7:e9:f9:33:c9:51:53:7d:59:d9:75:95:ed:
ca:4e:27:79:fa:10:4f:14:2d:05:8c:66:cf:d0:f8:28:52:83:
df:65:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:09 2026 by rpki-client