
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6920E4D8D0F411EC8DAD6D11C4F9AE02.roa
File: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (raw, json)
Hash identifier: c2lo54QcjHvK6TZ8I450zd6helgARdymi5j3sxVLHME=
Subject key identifier: 9A:AF:7D:9F:34:79:D0:C6:B5:3C:D3:96:B0:FD:35:DC:A7:BA:31:FA
Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial: 03CD
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6920E4D8D0F411EC8DAD6D11C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:06:47 +0000
ROA not before: Sun 31 Aug 2025 02:18:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134414
IP address blocks: 103.42.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Validity
Not Before: Aug 31 02:18:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47227-87b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:25:97:8f:05:9b:26:a5:53:11:4a:81:8b:
eb:66:f7:01:fa:2c:2e:e1:df:4c:8d:9d:32:16:bf:
d6:62:d0:1c:11:5d:09:85:9d:32:73:c7:16:10:3f:
db:e3:37:f6:a8:ff:4f:63:83:42:bc:71:26:5f:22:
d9:70:ab:07:83:bd:c6:7a:67:70:67:4d:c6:56:54:
47:45:17:6d:35:57:f0:97:1f:2a:81:af:6d:20:d3:
5d:71:8a:1b:28:00:d0:78:8e:ed:34:b7:f4:bf:af:
b6:d7:60:d2:81:f1:65:18:99:70:53:35:7c:b9:2b:
55:bb:30:f2:55:a8:a6:b5:84:9d:9a:42:1d:5a:01:
9b:58:c4:d4:6a:f4:d6:0f:08:e8:64:03:35:61:54:
82:3e:66:ed:73:82:78:06:f4:7e:ce:59:41:e2:f6:
ca:d7:14:4a:39:36:99:16:ba:8c:6c:10:ef:37:73:
fd:d2:01:2e:e9:6b:ff:42:0a:e5:a6:0f:c0:75:76:
0f:3b:0a:f0:0f:f1:8a:34:68:6a:25:21:5a:ad:7f:
67:c3:28:4a:e4:d9:b3:a9:02:bb:b6:c4:66:c1:d7:
bc:9b:b5:92:13:7d:8c:db:d0:ef:f9:c3:f2:18:ad:
8c:f4:36:45:84:2b:cf:65:a7:a3:7e:69:c3:00:3c:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:7D:9F:34:79:D0:C6:B5:3C:D3:96:B0:FD:35:DC:A7:BA:31:FA
X509v3 Authority Key Identifier:
keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6920E4D8D0F411EC8DAD6D11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
86:da:5c:c8:ed:d7:35:cf:f5:0a:b1:19:73:52:92:9a:e9:67:
55:ad:48:87:42:18:36:c7:b3:9d:3e:72:31:07:ba:ee:da:06:
ce:8e:9f:20:ae:01:8a:c1:77:1f:87:07:69:db:8a:9c:4d:0f:
bc:45:97:da:f1:60:e8:44:72:a2:96:eb:4e:2b:0b:3e:1f:87:
8b:65:7f:9e:f4:7a:f9:ba:8a:b5:c0:d7:8e:c6:81:01:64:32:
bd:b6:8a:0f:7f:1f:a3:50:fa:7e:3c:be:41:3c:9d:5d:5b:a2:
52:71:92:99:46:57:10:ed:2f:45:93:1f:b1:57:20:9b:60:e6:
14:36:35:1b:aa:4e:b6:8b:f1:f8:a1:d2:aa:08:63:d4:1d:28:
a4:12:67:0d:6a:35:6d:bc:1e:5a:44:8b:12:1b:57:32:72:15:
39:a1:97:72:68:11:26:4d:5d:21:b4:41:71:ff:92:c4:e0:a9:
f1:1d:a0:68:a6:77:62:fe:5b:a7:3a:ac:3e:93:ad:01:be:33:
ee:f4:eb:f2:9c:36:cd:46:85:52:19:02:05:01:38:8c:b7:46:
8f:1c:a7:f7:37:61:6e:29:7e:48:5a:29:75:2f:95:a2:c8:80:
f4:35:d8:fa:4a:d6:21:1d:82:a5:84:a8:2b:34:3d:ce:5d:ee:
6a:c4:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:20 2026 by rpki-client