
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1BC3E9F8D0F711EC8673072FC4F9AE02.roa
File: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (raw, json)
Hash identifier: xneEorLT2fJCumFtLwH2/UTnHd0vZVF2fH3pXd9wvcA=
Subject key identifier: CE:96:92:21:BF:F7:E8:AA:6C:6D:89:27:D2:81:A8:01:0E:A6:E2:0C
Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial: 044B
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1BC3E9F8D0F711EC8673072FC4F9AE02.roa
Signing time: Thu 15 Oct 2026 00:49:02 +0000
ROA not before: Thu 15 Oct 2026 00:49:02 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 134415
IP address blocks: 103.42.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 00:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Validity
Not Before: Oct 15 00:49:02 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad022fe-e60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:d5:95:cc:54:94:4d:69:5d:02:28:03:5c:
0b:a7:1c:41:fd:b0:7c:12:48:ff:d4:ad:5c:6b:48:
42:55:67:96:23:34:f3:e7:f5:80:65:ef:23:e8:bd:
ec:90:90:e6:23:94:f6:f9:d9:e3:e4:7b:0f:b3:a2:
1c:73:8c:51:e4:22:98:a3:3c:99:1e:e4:3b:bb:7a:
bd:c4:c4:6e:59:d4:91:06:03:d2:b1:de:b4:c9:3d:
d9:8b:22:95:3d:d5:29:cf:63:0c:4c:39:8f:82:94:
df:55:bc:da:31:98:ee:73:fd:23:52:72:57:b3:24:
1f:ed:be:3a:3b:91:71:50:42:30:1c:aa:a5:77:62:
d2:10:4d:5b:3d:ec:4c:a8:f7:98:b0:2f:9f:6f:3f:
63:62:e7:e0:14:7d:cf:48:de:ff:1a:7c:5a:9a:bd:
3d:4b:6e:70:10:90:5e:a3:ee:2d:9b:f0:54:44:5e:
76:a1:50:c9:89:0e:2b:9f:ed:94:9a:ec:ae:22:8d:
9a:08:02:29:0e:49:08:9c:ec:e5:f7:c5:00:d3:da:
8f:ee:63:60:ef:eb:f6:fa:ef:d7:8c:89:88:25:27:
0b:1d:ac:7c:f8:70:ac:35:81:ea:2f:bb:b2:22:94:
eb:e1:c5:0b:2b:b1:29:8b:24:4f:23:32:09:e0:f5:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:92:21:BF:F7:E8:AA:6C:6D:89:27:D2:81:A8:01:0E:A6:E2:0C
X509v3 Authority Key Identifier:
keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1BC3E9F8D0F711EC8673072FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.42.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a9:9a:eb:17:27:2d:f1:61:3e:c9:ed:2d:1a:79:cd:4c:90:
22:12:54:42:a2:17:5a:01:e0:7c:1b:f5:00:a2:f2:a5:8c:7e:
32:eb:6d:d8:7e:a8:b1:62:0e:94:07:a5:46:2e:2b:f1:49:58:
7d:68:d2:e7:69:ca:8e:99:53:65:2c:e5:1a:2b:3e:4c:dc:17:
2f:61:95:1d:f4:11:ef:9e:97:db:6b:1a:2d:f6:76:bb:cc:af:
d3:1a:44:c3:8f:be:f1:9d:7f:09:eb:79:a3:b0:01:c6:51:8a:
3f:8e:cb:12:28:3b:f3:6e:f7:d7:d0:65:36:4e:f7:5f:7c:7c:
68:ce:23:60:1f:39:54:75:ce:8c:a0:20:87:fd:9f:bb:a5:ba:
2c:e9:09:b7:2b:39:42:81:fd:05:66:bd:84:1b:3f:12:a9:e4:
e4:07:bd:01:2d:64:e2:57:d1:34:01:ed:ec:2f:e0:e4:bf:75:
3a:dd:07:8e:a7:ed:6f:94:a4:0e:13:ce:9c:b5:80:05:a2:3d:
bc:a8:4c:22:8c:3d:1d:11:69:9d:26:81:f9:34:57:6c:a3:bd:
3e:be:4f:2f:3c:79:fc:2f:4b:16:ee:b2:fc:ef:fc:eb:20:17:
ee:32:7b:e4:e0:7a:6e:ee:f7:c0:d9:f1:71:29:9f:df:88:b9:
79:80:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:30:07 2026 by rpki-client