
$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BDDB04B633DC11EF82BB2E27C4F9AE02.roa
File: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (raw, json)
Hash identifier: dkeJym/v87RKiKKUryyLDWvUYJU8ndSZ66o3idoC4+8=
Subject key identifier: 62:B9:3D:3C:C1:42:64:3C:D1:11:F4:77:D0:B2:BC:DD:39:19:81:8A
Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial: 02D1
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BDDB04B633DC11EF82BB2E27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:10:50 +0000
ROA not before: Sun 21 Sep 2025 02:20:04 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132401
IP address blocks: 103.72.193.0/24 maxlen: 24
2001:df4:2a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Validity
Not Before: Sep 21 02:20:04 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a46509-ce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:8a:c3:04:6b:67:ed:20:95:74:62:ec:57:
11:14:67:44:7f:08:88:50:10:eb:1c:3b:89:f3:22:
7d:19:24:70:54:d8:69:62:ef:46:81:a1:2c:96:81:
a1:d4:a4:8c:f6:81:25:44:7f:62:1f:7c:a9:33:7f:
66:fa:18:80:ff:b2:64:ac:c6:00:d8:df:fc:9b:cd:
a3:29:ab:34:35:3b:66:2f:43:19:1a:0d:5a:27:19:
9a:1c:8c:d7:a2:6b:b8:a3:d8:34:6b:8e:ea:d6:b6:
bb:e3:6f:29:3c:48:7e:6a:7e:70:cc:0c:9f:14:21:
a6:a8:fa:3c:fc:54:26:b6:42:d8:3c:97:2a:2e:80:
8b:a4:2f:22:2c:b8:dd:8d:11:60:02:15:a4:f8:c7:
c0:c7:96:e7:64:9a:53:f5:8a:cd:7d:56:74:45:da:
8b:81:e3:4b:66:81:d3:d0:de:8d:c0:2a:15:50:5f:
0b:0c:e9:99:c0:74:d7:16:9d:c4:89:62:2d:b4:f7:
c4:60:73:1b:43:db:8b:4e:0d:f9:9f:2f:ef:97:71:
64:ec:57:c9:c0:56:73:4c:46:95:c2:f1:e4:5d:18:
a7:47:45:a0:9a:dd:b2:23:d3:ea:4d:7b:92:80:0e:
28:74:31:a3:2c:bf:1b:b2:7a:cf:f2:80:0d:49:d9:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B9:3D:3C:C1:42:64:3C:D1:11:F4:77:D0:B2:BC:DD:39:19:81:8A
X509v3 Authority Key Identifier:
keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BDDB04B633DC11EF82BB2E27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.193.0/24
IPv6:
2001:df4:2a00::/48
Signature Algorithm: sha256WithRSAEncryption
06:3d:93:07:3c:ca:47:c3:f9:74:55:c6:17:95:ec:59:05:f1:
90:9e:30:67:ce:27:9d:57:17:03:32:4a:18:cf:db:32:27:c2:
73:2b:d2:45:5c:0f:4c:41:d9:f1:5a:0a:85:08:b8:7c:ff:ca:
62:fc:75:eb:f6:89:50:7d:5a:38:72:92:61:6f:7d:bb:35:9e:
4b:e5:0d:ff:b1:c5:18:dd:a1:03:34:dc:f7:b2:fc:5a:f4:46:
af:58:dd:42:54:37:6e:fc:38:f8:06:ca:c5:f2:aa:cf:d8:86:
2e:7f:e2:a5:fc:72:6a:70:c3:73:44:91:05:f8:1b:9a:b9:3a:
b0:33:27:4a:9b:e7:91:7a:cd:b5:aa:b1:d7:5a:db:9d:12:26:
46:20:6e:55:fd:da:f0:b8:22:68:b4:80:0e:ff:fc:51:fe:a0:
dc:a1:6d:83:aa:27:f1:cf:48:8e:3c:f3:42:e9:5d:9c:40:78:
22:07:21:00:bc:6b:fe:77:31:bc:22:9f:27:81:51:49:04:0d:
ce:6d:2e:c6:6e:ce:03:2a:a8:75:a9:9d:35:6d:c1:35:e5:bd:
49:51:7a:08:63:e8:a5:ac:a1:67:a2:7c:39:36:ef:b5:6c:f5:
a8:36:aa:3d:f8:2c:5b:f8:8b:68:7f:a3:38:9e:f0:56:1a:5e:
f5:05:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:07 2026 by rpki-client