
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa
File: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (raw, json)
Hash identifier: tnQvcL+XlKj1mrWVClsnZNGw7PANVizY98r9YXkQdO4=
Subject key identifier: A7:42:00:E3:DF:B3:AA:B1:7A:C3:13:B4:E8:36:9C:B6:EB:52:85:D2
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 3679
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:47:53 +0000
ROA not before: Thu 24 Jul 2025 14:50:20 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 134438
IP address blocks: 203.107.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13945 (0x3679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 24 14:50:20 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a489d9-622e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:26:0a:93:60:a2:fa:ca:19:95:6a:2f:e9:
50:5c:be:ce:0b:f5:23:d3:4d:64:8e:b6:1e:ce:3b:
95:21:e0:35:31:1b:92:cb:6e:28:4a:fd:bc:97:4f:
13:4a:b5:de:34:0d:37:ea:58:ce:7f:e6:9c:5d:87:
53:db:b2:6e:bc:96:43:26:7e:8b:a7:11:ad:ae:25:
4d:a4:89:53:29:46:a2:2b:dd:0e:fa:ba:09:65:e5:
87:3f:d5:64:0f:e8:55:59:46:ca:45:26:e3:1a:94:
4e:48:86:5d:a8:dd:c5:c6:ef:2e:cd:0f:b8:53:c4:
91:a3:c0:23:0b:5b:80:ab:90:63:89:e6:eb:2c:8c:
6d:f3:e8:3e:cc:0f:e6:42:a6:c9:a5:c8:bf:34:31:
aa:6c:58:e6:3d:a6:da:d7:5a:2c:db:b7:6c:10:dc:
8b:97:34:f3:c4:0e:98:41:b7:4f:89:7c:cd:af:00:
ed:5d:8d:0e:36:c2:88:f5:0d:13:18:96:a4:98:6b:
56:b4:aa:7d:b8:79:00:d7:f5:a1:8e:59:d5:f3:d8:
75:a4:34:00:d6:94:72:97:11:4a:0e:ee:ad:45:40:
4c:c7:0e:a4:e1:92:8a:08:a1:b5:9a:a1:c5:fe:2b:
0a:92:c1:46:2a:d3:0e:45:cf:35:d5:d8:25:69:67:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:00:E3:DF:B3:AA:B1:7A:C3:13:B4:E8:36:9C:B6:EB:52:85:D2
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.107.165.0/24
Signature Algorithm: sha256WithRSAEncryption
40:20:75:0e:d3:56:34:45:f6:fe:1c:94:90:54:73:f7:16:81:
0b:54:72:e4:7a:7c:ec:ed:e9:57:fe:88:45:29:e2:7d:7b:c7:
57:d4:3f:d4:33:f3:00:52:fb:8e:e0:6c:df:17:02:02:7a:fd:
6a:d4:fe:9c:a3:4a:18:8b:7e:f1:2f:0d:5f:45:41:73:ff:dd:
3b:c5:a3:46:65:bb:12:5d:d0:ce:59:3a:19:cd:e0:b0:76:f6:
06:7b:57:d7:2b:13:9a:26:5c:d2:5e:fa:35:8a:8a:f4:97:12:
e3:55:c4:4e:a7:58:b6:bb:d5:aa:da:9b:4a:25:46:d3:15:6c:
32:1c:e6:8b:87:99:32:da:c2:2d:f7:f8:5d:fd:0d:b4:1d:1b:
24:7b:eb:86:0e:2f:f5:45:95:c1:51:5e:7f:31:94:9a:6a:e6:
bf:11:89:f2:83:4d:cc:94:2e:e4:fc:63:0f:d4:e3:85:c5:bc:
30:2d:33:61:1a:d4:33:a8:2e:40:31:d5:7e:9c:90:1f:9f:34:
07:23:a3:ca:55:73:a9:90:61:6e:1d:44:48:4b:a4:dc:5d:84:
cd:5d:9f:4e:5a:f9:29:d1:6b:29:30:86:f5:f5:ff:71:36:69:
bf:03:e6:9b:db:1c:40:f8:35:eb:d4:c0:7a:a0:a9:43:fa:b2:
a1:39:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:30 2026 by rpki-client