
$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa
File: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (raw, json)
Hash identifier: 21k7xo1DVvGDuKsBBbSZADbL50JKJ6QopBZblEvUm/c=
Subject key identifier: 35:9B:0B:93:33:D0:FE:71:BD:9C:C8:9F:4B:A1:4B:88:61:C9:9F:0E
Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial: 0243
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:09:06 +0000
ROA not before: Wed 03 Dec 2025 01:00:24 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150427
IP address blocks: 103.96.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Validity
Not Before: Dec 3 01:00:24 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41042-0824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:d7:30:57:e8:0b:94:f0:ab:43:85:53:d1:
03:a1:0c:e4:1b:9f:70:4e:f5:78:57:e3:85:9f:f0:
12:dd:05:5b:86:d2:d9:c0:b3:7c:a5:d5:e5:f6:7d:
83:62:01:17:7f:df:6f:2f:d9:8f:11:d0:e4:9f:7f:
cd:53:d8:c0:a5:8d:35:72:27:36:39:69:e9:3f:b1:
ea:d9:ba:5e:c0:3f:a7:b9:85:64:3e:5d:58:b3:8e:
2a:07:23:b0:88:30:79:87:27:a7:ea:5c:d2:01:5c:
a8:2d:d6:45:6a:73:b4:ea:71:50:ac:e4:11:6a:8f:
de:02:ae:01:c6:33:72:30:ab:a1:64:fe:aa:45:94:
ea:34:e0:09:c3:1f:72:b2:f4:71:03:49:3e:31:49:
77:34:07:29:e6:c6:0b:d9:37:cc:41:a7:49:93:a3:
87:44:8f:a8:80:c6:1d:1c:1f:5b:5d:ba:98:25:64:
af:5a:90:6f:1a:59:b4:86:a1:6f:8a:54:9e:89:a2:
1b:05:79:8c:61:73:84:8a:cd:ee:87:5f:1f:2e:f3:
4d:ec:7c:8e:97:9b:b4:32:37:b2:d3:33:26:4a:d6:
ea:88:37:af:70:c3:1b:2d:4e:5b:20:dd:c6:1b:90:
ee:ef:57:b8:b9:3d:ad:f4:25:d7:05:dd:da:f5:64:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9B:0B:93:33:D0:FE:71:BD:9C:C8:9F:4B:A1:4B:88:61:C9:9F:0E
X509v3 Authority Key Identifier:
keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.88.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e8:83:7d:e9:c1:46:e0:17:eb:7e:61:61:d6:3d:bb:9f:48:
77:3d:45:7d:d2:57:1f:38:0c:86:66:88:94:6a:9a:70:a0:34:
83:da:8a:47:47:2d:6f:22:98:df:f0:4e:e0:48:f7:5d:e3:47:
95:cf:2f:e9:91:e5:e5:7e:0c:2f:e2:17:59:6d:18:af:f2:fd:
c2:04:48:04:0a:3c:2a:29:85:42:e7:c7:f8:52:8e:6f:80:e0:
b2:a2:2e:ca:ba:79:ad:17:85:60:aa:29:f5:fc:e7:cd:ea:6a:
36:f9:e8:1e:17:bd:0a:a0:4f:c7:0e:4a:cf:90:cd:16:da:bb:
ad:b4:60:a4:8a:e2:92:d6:43:69:be:de:58:1f:0f:1e:71:36:
d1:cf:ec:bf:fe:d8:a5:c9:65:9a:20:46:65:1e:cd:01:20:92:
d4:3a:0a:6a:80:de:42:bb:1e:73:b4:23:94:74:1a:73:d2:2d:
7a:3e:30:3c:6d:a1:a8:a5:99:f1:a2:32:b3:19:0e:41:27:b6:
6d:21:b0:fb:40:5c:57:79:be:8b:39:4a:c1:17:3f:63:85:4a:
73:bb:67:28:0c:f2:70:05:dc:54:f0:c6:a5:3a:27:f4:3a:a8:
6a:a3:0e:d5:c5:c7:9a:48:45:38:14:c1:94:65:67:d7:9a:16:
15:cc:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:26 2026 by rpki-client