
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/D076B1A49F2911ED937CF05AC4F9AE02.roa
File: D076B1A49F2911ED937CF05AC4F9AE02.roa (raw, json)
Hash identifier: ruF2i3AOGgPYwroRD2rSZSmDfGWURXx0prKXNcqPrNM=
Subject key identifier: 2F:F3:1D:17:5C:91:E4:E8:C7:E7:13:DE:0F:F6:59:48:3D:B1:B0:BE
Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial: 0266
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/D076B1A49F2911ED937CF05AC4F9AE02.roa
Signing time: Sun 05 Apr 2026 02:35:35 +0000
ROA not before: Sun 05 Apr 2026 02:35:35 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137391
IP address blocks: 103.72.213.0/24 maxlen: 24
2001:df1:da40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Validity
Not Before: Apr 5 02:35:35 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69d1ca77-a8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:bb:96:8e:3b:79:55:54:ec:f2:a2:13:c7:
51:13:d0:4a:fa:d4:9c:e5:76:43:f6:d4:59:bf:d3:
bb:4a:13:85:13:c2:b1:51:d3:84:8a:f3:97:f9:3b:
83:58:f6:6c:5e:1c:57:ec:d1:cf:f3:61:d2:34:8d:
78:0a:a6:8c:91:43:59:4a:21:61:98:55:a1:20:09:
18:e5:5b:39:c2:36:3e:c0:8b:17:19:f9:c5:73:fb:
e6:20:c9:d9:87:21:1f:f3:f0:16:99:0a:ac:f1:4b:
16:e8:1c:e8:cb:47:1e:87:8a:d3:cb:c1:ef:c8:5d:
51:e2:af:0b:ee:01:af:51:f9:54:f2:ba:cf:7d:71:
e4:ea:26:5e:ef:26:e2:e8:54:ca:0e:66:6e:fe:55:
49:e6:d2:f8:dd:d5:8d:50:c2:ae:88:29:7d:24:5a:
47:fe:53:b0:65:6a:94:2f:7f:7b:b5:f1:48:9f:e7:
eb:78:b9:a6:82:6b:0c:8a:e3:50:94:3d:a4:6c:fa:
e8:31:8d:5c:77:fe:bf:dc:6f:e4:87:aa:24:90:71:
57:3e:ab:c3:57:15:9f:69:b6:43:4e:9f:c0:79:87:
28:a5:ef:22:6f:a9:4d:c6:59:86:20:a8:7c:51:86:
64:58:48:38:7a:c1:c0:b7:5d:e2:78:6d:d7:8f:79:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:1D:17:5C:91:E4:E8:C7:E7:13:DE:0F:F6:59:48:3D:B1:B0:BE
X509v3 Authority Key Identifier:
keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/D076B1A49F2911ED937CF05AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.213.0/24
IPv6:
2001:df1:da40::/48
Signature Algorithm: sha256WithRSAEncryption
62:57:e1:93:f2:f9:59:5b:df:c7:6c:b2:2c:e3:ea:64:7c:0b:
70:4b:44:20:1c:40:ab:12:30:4d:dd:c2:8c:dc:2f:50:e9:7a:
d2:1d:47:bb:7e:ae:79:3f:03:8f:6f:62:71:1e:29:02:de:ae:
6a:66:14:64:62:e1:bf:90:02:07:75:4f:75:17:e6:b6:4d:8d:
ca:48:05:5c:ad:ce:50:c7:3a:f3:03:20:c7:ea:9d:27:ff:70:
0f:22:9a:28:a7:1a:62:d6:c3:94:41:ca:e4:23:ce:03:46:a3:
23:cb:77:22:0a:b8:b4:a6:d0:ee:84:65:10:3a:88:db:54:77:
4b:e0:f1:ef:63:ed:b5:30:f0:15:6b:eb:be:a5:39:3c:8d:5f:
68:0d:0f:f1:38:3c:e6:0d:04:76:52:d3:e7:34:9c:7b:8b:d3:
51:04:2a:23:72:b6:23:f0:47:75:3b:68:49:78:04:2f:f7:b5:
7e:68:09:83:f9:f0:cf:5b:95:0f:06:83:fc:0c:3b:81:90:61:
cb:2b:63:0b:9c:b6:aa:68:61:15:7a:83:42:ef:88:98:9f:eb:
77:3d:57:78:df:6d:12:19:9c:a5:fe:2c:5e:32:87:c5:16:44:
22:fd:5c:2b:07:de:27:35:a5:54:4d:14:ad:33:4d:90:72:8f:
9a:2b:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:45 2026 by rpki-client