
$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa
File: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (raw, json)
Hash identifier: jNxDHr6BPCWYOsHZin0NsVI+cf+zItqnlC9EufbwEok=
Subject key identifier: 69:2F:22:E2:B9:A0:74:4E:5D:31:BD:AE:61:E5:A8:87:0D:72:E6:76
Certificate issuer: /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Certificate serial: AE
Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa
Signing time: Thu 09 Apr 2026 07:41:57 +0000
ROA not before: Thu 09 Apr 2026 07:41:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132504
IP address blocks: 103.253.84.0/23 maxlen: 23
223.27.116.0/23 maxlen: 23
223.27.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Validity
Not Before: Apr 9 07:41:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d75845-325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:c1:07:a9:62:ba:9f:7b:34:d6:6e:0b:83:
f8:f4:c3:da:a4:21:f1:47:e4:6e:d6:0d:8b:48:4b:
b1:09:fa:99:5b:1e:72:99:c9:73:af:46:22:45:eb:
73:10:54:0c:c8:39:5c:92:22:4b:09:5f:88:52:69:
6a:b4:fe:8b:ca:8f:74:a4:e4:6f:e4:21:f2:2b:81:
85:7f:a0:b8:00:de:9e:12:4d:47:eb:34:60:32:59:
f1:42:db:ec:cf:ff:26:67:a2:3d:e2:27:a1:6b:4f:
53:64:e3:1e:dd:57:15:88:f6:9b:c6:ef:b3:b6:0d:
11:8c:77:20:da:f8:25:fb:70:b9:48:59:2f:22:f4:
3e:e3:ca:2b:a7:7b:b2:61:28:af:7d:73:68:6e:59:
08:06:f6:f1:b5:b9:0c:f7:d8:59:c2:62:65:bf:2d:
90:b1:0c:75:55:67:e2:4e:c9:9f:43:45:69:6c:56:
d6:3b:46:ee:10:16:f8:99:87:00:79:aa:e4:c0:f1:
60:79:3c:4e:27:a7:7d:c3:cc:e5:64:97:f8:34:c0:
fd:16:d1:5c:66:06:f4:9d:37:3b:88:68:07:92:e8:
f5:3f:e8:69:a6:e3:e5:f7:11:33:53:8c:41:92:9f:
2e:c0:f1:6b:39:76:a4:2e:8b:c2:2d:94:eb:3e:dd:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2F:22:E2:B9:A0:74:4E:5D:31:BD:AE:61:E5:A8:87:0D:72:E6:76
X509v3 Authority Key Identifier:
keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.253.84.0/23
223.27.116.0/22
Signature Algorithm: sha256WithRSAEncryption
92:60:42:d0:93:44:05:ce:7d:28:0f:f4:c2:0e:de:21:7c:3c:
fb:a5:b1:7c:95:e2:66:43:7e:d1:21:d6:f0:8b:59:17:bb:49:
3c:16:c6:c2:4a:05:10:2c:bc:ab:00:13:0f:28:e4:50:42:b6:
45:26:ae:1e:75:06:4c:88:cd:3a:da:23:37:dc:22:cb:5b:ea:
fa:9d:09:16:c7:2f:fa:51:be:42:71:c5:66:b2:3c:3e:1e:e5:
67:d6:77:1e:22:cb:92:49:b9:8c:ca:bb:fb:c0:b5:91:1f:cf:
2a:df:63:7a:81:16:48:b5:5a:e0:62:02:fe:f7:32:89:4f:b0:
61:98:6a:11:d0:d4:a5:26:ca:78:c5:ee:58:88:eb:04:d3:be:
c5:3c:8d:a2:04:fc:9d:d5:6f:fc:1c:ba:d9:f5:d7:3d:b8:53:
e7:5e:1d:9a:34:4c:75:fd:65:09:d5:6b:69:e7:ec:dc:40:ac:
a4:f0:03:c2:47:19:6a:72:3d:38:f3:a8:66:71:70:0e:fa:dc:
4e:2a:5b:ee:ca:a0:8c:2e:22:62:7a:4b:ce:d3:fc:32:62:f7:
92:b5:65:68:fb:e9:00:db:47:8d:3a:72:46:5d:c8:94:33:bd:
91:c8:f4:05:d2:f4:2b:02:5d:07:dc:97:26:38:69:c2:dc:84:
7e:d6:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:19 2026 by rpki-client