
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa
File: EB292D8A6BF811EB8E899650C4F9AE02.roa (raw, json)
Hash identifier: Y+1fvWj3nLlmoNV6cl239YJXWHECE8PMA09Art+Ouzs=
Subject key identifier: 8C:6E:FF:9D:44:B5:E4:89:DA:89:DB:9C:48:DC:3E:9C:47:DF:11:7F
Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial: 0730
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:41:46 +0000
ROA not before: Fri 04 Apr 2025 22:32:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 132745
IP address blocks: 103.24.140.0/22 maxlen: 22
103.162.176.0/24 maxlen: 24
103.162.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Validity
Not Before: Apr 4 22:32:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fbca-6625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:58:5d:72:02:4c:c6:51:fe:45:11:26:c2:
04:69:ec:52:dc:d0:a0:4a:83:92:49:7c:0a:7e:ef:
b9:80:43:fd:11:ed:0e:e9:0d:c0:f8:10:a0:27:35:
67:76:87:04:13:63:07:27:12:ef:d0:a8:32:8a:6b:
51:ff:3c:dc:b5:f6:62:82:3c:25:d1:ee:91:d8:65:
9c:e0:96:ce:bf:0c:5e:39:81:9e:a1:3e:02:6b:51:
09:2a:ef:ff:64:18:66:08:13:c4:35:e0:0d:4d:f1:
3e:40:77:82:e0:fe:1b:50:d2:ce:e8:31:88:58:2f:
07:f7:e3:0f:16:81:23:d0:72:bb:96:b5:14:49:7a:
aa:ea:70:44:9d:bd:e2:89:b0:ec:b6:a8:f7:63:67:
3e:6d:9b:82:c0:ab:97:0d:12:34:e6:7f:89:b1:3b:
4f:cc:41:6b:e0:11:5c:91:9e:0c:33:d0:28:78:c9:
a4:bc:bf:e5:f2:e0:12:8c:02:ab:ad:6e:8f:95:c1:
78:43:1f:a0:95:44:e6:c2:f0:a7:99:54:06:49:21:
5f:46:2d:f3:84:2b:db:de:04:12:f8:6e:1a:65:58:
71:42:0c:47:5e:2d:d5:86:65:6e:09:60:9c:e8:3d:
71:5d:12:b3:96:5a:3e:58:7d:01:ee:04:5c:99:7a:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:FF:9D:44:B5:E4:89:DA:89:DB:9C:48:DC:3E:9C:47:DF:11:7F
X509v3 Authority Key Identifier:
keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.140.0/22
103.162.176.0/23
Signature Algorithm: sha256WithRSAEncryption
01:7c:d6:ff:ed:f7:b9:f7:11:fc:95:1a:ff:d7:2a:d3:c2:1e:
e1:05:7e:7c:14:8e:20:48:cc:56:c1:87:ca:43:c0:41:29:3e:
ba:af:ae:c3:f1:ef:d4:a3:8b:c5:77:3b:bb:f7:3f:1a:14:82:
0f:4b:2e:2b:63:84:6f:e4:ac:56:b9:b2:01:21:61:e4:77:04:
0a:4c:14:a3:f1:9c:28:8e:cd:fe:e7:fe:54:c4:11:fd:19:b8:
05:68:85:78:4f:36:4e:f1:e7:25:c4:c0:14:c7:7b:b9:43:24:
76:86:48:13:f1:59:26:64:3b:98:2a:cc:35:1c:27:fa:54:a6:
59:f6:53:a5:e7:f2:fc:70:16:6f:32:3f:ba:6d:4d:55:68:ba:
5e:a1:3b:38:a2:79:10:8f:42:21:2d:8a:67:63:6b:ae:c3:3e:
fe:ba:99:41:96:80:23:39:eb:07:b6:0f:1c:e2:62:85:d0:7b:
95:a9:de:ba:01:69:8f:87:a9:ab:c7:f1:96:86:9d:b2:5d:c6:
19:49:92:e8:29:80:f7:f4:34:92:f5:51:a9:d6:29:27:5f:84:
c1:aa:5c:1f:d9:ff:3f:91:46:6f:cc:de:c8:e5:08:39:fe:20:
32:9d:f9:03:f3:f2:5c:3b:c7:fc:29:74:21:94:d7:11:f5:ac:
55:08:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:00 2026 by rpki-client