
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
File: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (raw, json)
Hash identifier: HgcggV8BxU3DsnfnAjE7D8jFk5D0BasQaQRqwA0EAKs=
Subject key identifier: 8B:95:46:9D:50:AC:86:D2:9D:96:70:E9:DE:5B:8B:7B:F5:87:E8:A4
Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial: 03CF
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:06:48 +0000
ROA not before: Sun 31 Aug 2025 02:18:40 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134416
IP address blocks: 103.42.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Validity
Not Before: Aug 31 02:18:40 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47228-9565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:ab:89:4a:b8:c0:7e:b5:4a:0f:67:6a:d1:
bd:0a:7b:17:c0:f8:7e:7d:95:f2:b4:b0:1a:64:91:
3a:aa:c5:1b:f1:4f:77:c6:81:a9:2d:25:17:4c:07:
02:d4:bd:1e:de:4e:df:9d:3f:4c:7b:0f:0d:12:a5:
c3:f4:3a:5c:b5:18:95:0c:90:11:c9:a2:5b:2d:51:
5f:23:98:fa:87:46:00:f8:a8:a8:ed:54:87:9d:bf:
38:7e:4e:d5:b6:3c:75:1e:5f:01:cb:38:50:ab:f8:
22:af:13:db:79:c4:f7:12:13:7b:04:4c:51:c4:fb:
66:14:98:14:c2:40:e3:41:85:9f:3d:6a:74:ed:cf:
63:4f:c3:f1:5f:33:69:40:01:42:3a:2e:a5:85:fe:
2b:da:ce:87:55:86:a2:f4:c0:dc:95:10:0c:00:b5:
1f:41:fc:fd:52:26:0c:6e:96:a7:7f:f0:70:2f:9e:
55:c8:5d:9b:24:3e:1c:65:25:5e:7e:a7:4f:59:3b:
70:1b:ed:4c:86:1c:66:c2:6f:c3:d3:af:0d:96:00:
69:a3:b8:f3:d7:b2:d6:95:2e:f8:ee:6a:4b:cb:bf:
c0:25:45:91:41:c3:97:ca:d4:08:31:37:dc:13:f7:
6b:d8:9d:d3:3d:5b:72:a8:ea:6c:a3:38:b6:e0:eb:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:95:46:9D:50:AC:86:D2:9D:96:70:E9:DE:5B:8B:7B:F5:87:E8:A4
X509v3 Authority Key Identifier:
keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.42.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:cb:a5:f7:96:6f:21:54:ac:99:5a:b8:4c:58:5c:25:fb:fa:
23:f5:ad:06:e1:06:57:0d:fe:a0:8d:e8:5d:c8:75:c6:55:1d:
aa:3e:98:3f:b8:f1:f8:44:32:b0:69:aa:52:61:0c:0e:57:44:
a4:98:83:d3:64:ca:3e:f0:34:7b:75:48:40:52:e4:a3:2a:1c:
ab:c4:55:6a:6b:11:bc:95:9a:80:d8:7a:f5:bd:e2:96:5c:23:
69:e0:05:57:71:a9:80:0d:cc:ea:6d:b1:a1:84:39:5d:32:bb:
b5:74:7a:81:ed:15:b9:27:d7:d7:25:db:2d:9d:75:66:c2:88:
88:79:f4:35:a2:8f:9e:f9:ed:85:63:69:9c:ec:2c:3b:00:0c:
0b:cf:26:14:79:8b:56:44:8b:85:33:31:2f:33:82:30:f5:6b:
ed:92:5b:75:74:92:fa:e9:cd:62:58:d9:e7:dc:b9:a5:46:d1:
81:bf:b5:4d:6f:a6:37:a7:f6:da:cf:cc:77:d4:76:82:d9:57:
f5:f4:b0:4c:31:e5:45:4c:a3:7f:fd:2c:9d:c1:d9:f6:0e:63:
fe:ee:7f:47:06:31:a2:77:95:92:8a:33:f7:a6:dc:98:56:ce:
ed:3e:59:a4:4e:83:24:05:28:7c:bf:c0:61:38:44:cd:72:60:
1a:24:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:17 2026 by rpki-client