
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/50D040327CFD11F0B32D4522C4F9AE02.roa
File: 50D040327CFD11F0B32D4522C4F9AE02.roa (raw, json)
Hash identifier: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=
Subject key identifier: 67:73:B4:5C:24:10:94:62:70:67:5B:5B:4A:6D:A9:D0:7F:D3:AE:45
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11F0
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/50D040327CFD11F0B32D4522C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:59 +0000
ROA not before: Wed 20 Aug 2025 17:57:35 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 32167
IP address blocks: 103.140.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4592 (0x11f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:35 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4829b-0c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:05:0d:93:04:9e:28:30:1e:cb:f6:a4:fe:
bd:bc:17:6f:39:6a:f4:f3:ce:ef:78:b2:19:c1:83:
25:9c:a9:37:e2:d1:57:d9:65:af:e7:44:bc:da:6a:
3c:ba:2a:b5:0d:bf:02:f2:31:be:07:f0:b4:44:67:
cb:1d:c1:94:f6:f1:d0:8a:67:17:fa:39:9b:ee:e1:
15:f7:9f:10:d5:a0:4a:f6:19:ad:1a:83:33:f3:4a:
ff:dc:37:53:26:23:d4:3c:c5:e4:89:99:66:ce:65:
82:1d:80:47:e8:82:60:e5:1d:69:60:fd:96:3b:03:
ac:d1:a3:48:fa:e2:c3:e2:e1:a7:98:2a:df:73:5f:
9d:11:1e:55:d6:84:a1:f7:a6:9e:b0:28:0e:0e:20:
7f:d0:5c:ad:c5:f7:6c:18:25:64:61:12:14:90:84:
0d:2a:27:90:80:1e:ac:14:55:37:2f:b2:9d:da:bf:
7c:69:27:be:a5:5c:54:40:2f:7b:14:9f:eb:34:67:
3a:74:03:7b:65:56:9c:1d:b9:7c:37:ee:96:46:bb:
bc:96:30:be:b3:2a:07:9f:9e:3a:e0:f8:4a:1a:f9:
29:db:2d:43:af:44:62:59:1f:d9:71:90:1d:2f:27:
2a:d5:d5:a1:a1:01:4c:11:e3:47:87:8b:f4:3f:d2:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:73:B4:5C:24:10:94:62:70:67:5B:5B:4A:6D:A9:D0:7F:D3:AE:45
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/50D040327CFD11F0B32D4522C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.8.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bc:77:7a:7e:fa:e6:45:ca:e3:98:b9:79:0c:b0:a4:5c:8d:
53:9a:2b:22:e2:c8:7a:1e:f1:3b:c7:ef:87:f9:cd:b9:82:c9:
0f:92:d6:5f:57:d2:64:97:31:54:99:93:3c:2b:ce:a9:83:20:
11:6a:77:ad:58:f5:b1:53:23:01:d5:b3:0d:ff:e9:f5:6c:1c:
da:a3:26:0d:c5:d6:b0:b2:dd:b8:af:b9:99:49:6e:12:17:3c:
46:e9:3c:e6:97:31:a6:44:c9:29:02:7b:be:c2:2b:6b:bc:2d:
95:c5:e4:43:c5:88:f7:88:f3:59:85:09:96:13:bd:c6:a5:77:
2f:55:ba:f3:a4:56:84:75:8b:87:a2:84:dc:8e:79:0e:63:1c:
fa:cc:1f:15:07:b8:7f:7f:d9:c0:af:bf:65:a1:86:04:f5:24:
e1:2a:bf:11:1f:1e:93:7f:e9:d4:fc:09:fa:6a:2e:c4:cc:39:
dd:49:56:06:fb:93:59:2a:43:76:d4:a0:d5:44:c4:6e:b3:70:
b5:ce:07:f9:a9:7b:6a:45:5e:51:d4:8b:c1:ff:cb:23:2a:0f:
47:91:13:ce:5f:ff:6b:61:dc:a7:df:bf:47:a1:a2:77:c6:8b:
8d:ce:ed:bf:55:e5:12:13:24:2b:c1:e9:a3:fd:b0:5c:81:6c:
10:a6:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:53 2026 by rpki-client