
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9EABFF288CA011F0B1F47C12C4F9AE02.roa
File: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (raw, json)
Hash identifier: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=
Subject key identifier: A7:85:95:A4:C6:EA:33:53:24:12:85:67:4A:D9:DE:AF:C7:F4:56:54
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 059A
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9EABFF288CA011F0B1F47C12C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:55:53 +0000
ROA not before: Sat 04 Oct 2025 23:55:39 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 399870
IP address blocks: 103.73.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Oct 4 23:55:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47da9-0dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:13:c1:a5:31:c1:2c:21:15:57:e1:bb:96:
b5:98:bd:51:54:94:91:a1:da:16:2e:a3:d0:e9:dd:
b4:ea:27:27:6d:7d:24:83:e2:33:e1:bf:3b:79:3c:
a8:86:60:85:0b:1e:67:96:db:9c:e3:cd:83:9b:b9:
0f:83:fc:37:6e:ce:cd:92:98:fc:b9:cc:46:d9:5e:
a7:16:5c:28:da:8f:e5:fb:89:23:e6:bf:c6:c4:bc:
70:b5:88:51:5d:af:e7:8b:b4:a3:5d:27:c9:12:6e:
a5:f6:69:b3:3d:af:18:32:7a:c4:54:ca:42:ec:6b:
d0:67:e0:39:fb:4c:27:c4:59:99:d6:91:61:36:03:
41:9f:b8:5d:c5:d9:37:d8:47:a8:9e:49:ef:18:d2:
59:d5:d5:ac:5b:e0:6d:1c:a1:10:de:ae:7d:32:9d:
4f:9f:df:39:a3:27:cb:e4:81:19:d7:0a:d1:3a:51:
aa:8a:3e:49:6f:00:1c:a0:fb:b7:52:e5:89:74:88:
85:0c:91:c6:70:9c:44:1b:63:f0:84:78:a8:51:49:
d9:2d:18:4d:d4:96:78:5e:22:8a:21:d5:7f:9d:4a:
63:56:6f:26:fb:2c:87:b2:54:ce:f7:98:bc:9f:19:
5c:73:e1:2e:79:57:bd:31:f9:5c:f7:ed:63:1b:7a:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:95:A4:C6:EA:33:53:24:12:85:67:4A:D9:DE:AF:C7:F4:56:54
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9EABFF288CA011F0B1F47C12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d1:09:ca:e7:91:77:a8:84:26:50:b6:4c:a1:21:36:9d:36:
97:b5:ea:a6:f2:f6:6a:2d:f8:cf:36:1a:37:85:f1:41:b5:df:
85:d9:8d:e0:80:fd:eb:8b:1a:4c:55:d4:76:c3:45:f1:cb:ed:
2b:54:30:3e:f7:b7:d2:72:82:2b:89:42:d8:9a:90:44:a8:e6:
09:87:93:e9:0a:bf:f6:19:a2:88:db:18:66:8d:74:b2:15:c6:
16:43:f6:6b:d2:6d:8a:b2:29:57:c6:3c:b3:cd:53:fb:c3:e8:
50:20:73:08:b9:9b:2a:85:42:65:87:0e:40:e6:be:2c:78:02:
aa:34:58:fb:97:5e:a4:02:7f:9e:29:a2:98:f8:92:58:cf:39:
1b:d7:9b:2b:9b:77:84:26:28:75:81:51:70:f3:e0:9e:a7:2c:
91:d1:f1:46:9d:86:33:a1:43:78:0a:bb:c7:e7:c8:1e:d2:2d:
9c:90:7a:eb:7d:1e:71:ee:f5:d6:52:ea:2d:53:a7:e4:4d:e5:
34:a1:3a:46:de:19:39:0f:fc:cb:5f:49:e0:5b:b1:f0:55:3c:
3c:6f:c3:05:e4:2a:00:99:df:4b:33:98:63:ce:90:51:c8:03:
a6:8e:49:be:a8:15:cd:56:a9:0d:7a:3f:76:48:f4:ac:34:89:
14:a3:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:33 2026 by rpki-client