
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa
File: F2826A504FCF11EB88444467C4F9AE02.roa (raw, json)
Hash identifier: Ucwe0TblfY65Z8jyUiAbiD9N4E5gQiucEqZR5BprIfA=
Subject key identifier: 82:D9:BC:F4:B0:1E:BD:D8:19:B0:30:66:B3:D4:03:EE:7D:72:07:59
Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial: 0E37
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:27:47 +0000
ROA not before: Tue 06 May 2025 18:27:36 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 43.243.168.0/23 maxlen: 23
43.243.168.0/24 maxlen: 24
43.243.169.0/24 maxlen: 24
103.38.255.0/24 maxlen: 24
103.90.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3639 (0xe37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Validity
Not Before: May 6 18:27:36 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a46903-c8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:cf:90:d8:a9:29:18:05:85:9b:f8:45:3c:
2c:9c:d2:ec:1e:ac:8a:ba:20:d4:93:28:48:2c:4c:
2b:01:70:1c:cb:17:6b:ac:09:5e:a3:79:08:fe:b9:
b6:48:85:29:a3:84:35:32:9e:0b:22:35:6b:0b:dc:
e5:7c:f9:ac:66:c2:72:35:5d:bd:05:85:39:52:54:
c8:64:35:04:d6:db:01:2c:33:e6:30:b3:37:8b:cf:
e5:ba:f9:d1:84:d6:41:ab:f4:f4:c9:ae:8a:8b:91:
76:81:c1:f7:c5:4c:69:16:a0:d5:60:e3:db:d4:dc:
70:c2:72:b7:d3:8d:86:bb:8d:de:f2:05:34:2d:ca:
5b:8e:e0:d4:de:77:8b:cf:ae:6c:fa:fa:9c:30:07:
6d:81:65:c6:ea:22:f1:50:97:11:f0:b1:80:98:66:
3d:df:e2:0b:20:33:eb:1f:34:07:1c:5f:02:3f:1d:
4c:b9:7b:8a:cc:21:22:c7:85:6a:2f:a4:7b:e1:fe:
6d:bd:2e:a4:44:f9:67:f7:4c:70:78:ee:02:4f:f6:
a1:37:59:fb:aa:12:ca:0e:b4:5e:76:fa:36:6b:65:
81:8c:06:88:1a:5a:9b:91:a3:54:0b:f3:bb:63:9a:
04:52:20:8b:11:c6:11:4f:45:36:86:2d:98:17:be:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D9:BC:F4:B0:1E:BD:D8:19:B0:30:66:B3:D4:03:EE:7D:72:07:59
X509v3 Authority Key Identifier:
keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.168.0/23
103.38.255.0/24
103.90.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0c:1f:d0:48:b8:8b:7b:ca:90:f6:3c:65:f7:fc:57:60:4a:
da:74:8f:71:83:67:d8:34:30:9d:d7:4b:43:b7:e2:90:15:8e:
e5:9f:b1:61:d7:ab:71:52:23:4d:fd:1b:57:d4:97:77:83:5c:
87:2d:65:76:46:e7:bc:85:a5:a7:ef:7a:3b:77:e6:bc:4e:be:
06:94:5f:a8:13:73:21:a3:59:2d:b0:84:05:e2:39:58:6d:58:
98:5d:6f:c2:40:a8:71:50:1b:40:45:dc:88:4a:61:da:a1:dd:
4f:a9:47:ce:9b:74:8b:d1:9d:87:c6:62:00:24:5d:24:4e:51:
b3:a6:d3:3e:85:b5:74:da:61:7b:ca:dc:fb:ed:72:c7:99:77:
87:1e:3a:82:42:a0:88:db:63:6a:8e:af:f4:ba:b9:d2:01:67:
33:b0:5b:be:79:0a:39:0b:0c:e6:12:bc:75:7b:c5:de:57:32:
6c:d7:01:dc:73:55:2e:77:13:79:f3:c4:bf:69:ca:f4:53:11:
97:80:08:3a:4a:22:e4:56:54:4b:44:5b:d8:05:18:0a:2b:93:
a5:53:bf:5d:75:c9:59:09:62:00:4f:6c:31:1b:44:08:13:28:
b9:ec:85:6f:0c:7d:a6:44:b1:6f:d1:6b:d9:61:25:e4:8a:1d:
6e:7c:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:42 2026 by rpki-client