
$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
File: CD23AE8C403011EEA773CE47C4F9AE02.roa (raw, json)
Hash identifier: 3thOWBScBaW27emyNgWIB6Tm9y3isPfdf3d0Ik133Zg=
Subject key identifier: 50:1A:1A:42:75:2A:5C:2E:27:3B:35:F1:B2:25:66:FF:23:83:61:B1
Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial: 0281
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:06:09 +0000
ROA not before: Tue 15 Jul 2025 03:09:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134424
IP address blocks: 103.167.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Validity
Not Before: Jul 15 03:09:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a455e1-bdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:7b:ac:66:b1:0a:37:83:f4:19:92:58:98:
81:28:b4:82:20:4b:db:be:ce:68:52:e9:c6:9e:a7:
8f:1c:17:83:ad:86:d7:c5:10:ba:e9:40:c5:4a:c5:
2b:03:65:7f:f1:9a:12:99:3d:26:d8:24:4d:de:21:
1f:a3:5f:17:0b:a7:20:28:54:a4:0c:d4:77:56:d6:
25:18:bd:f0:27:dc:ae:c8:5c:0f:a4:ca:a8:ad:f3:
8c:f9:64:d9:e6:54:ad:cc:ff:e7:48:0b:77:68:65:
68:58:52:e4:f0:30:a9:7a:de:75:eb:23:f8:cb:6e:
a8:3a:98:39:4b:44:4f:ae:cd:32:4d:5c:00:c1:62:
88:c7:15:77:b5:a8:3f:18:39:f4:a1:29:f4:d0:6c:
2b:71:ae:7f:7b:15:bf:01:28:30:60:29:69:c5:37:
3e:6c:4a:f6:15:32:a9:b9:98:44:e9:8d:d0:3b:70:
76:7b:e7:3a:6b:7c:4c:a4:90:35:d1:79:03:59:a0:
2f:90:30:f7:ef:72:d0:f1:ba:d3:a8:96:67:03:e3:
4f:a8:01:7f:b7:f6:a9:e5:c1:e0:f1:fc:dd:e0:4b:
0a:e6:03:5e:78:c3:d9:60:f8:00:6e:4f:06:29:7f:
ec:e6:15:cf:9d:f6:c2:e4:dc:d2:63:bf:31:8a:19:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:1A:42:75:2A:5C:2E:27:3B:35:F1:B2:25:66:FF:23:83:61:B1
X509v3 Authority Key Identifier:
keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.209.0/24
Signature Algorithm: sha256WithRSAEncryption
67:96:c1:58:58:25:99:49:b1:f6:a1:51:22:62:fd:5b:70:57:
9f:93:14:3c:dc:80:8c:4b:18:0c:4d:e5:39:b4:7b:3a:c6:f3:
31:25:ce:da:19:b0:ce:64:8e:b9:5d:c3:db:d0:59:f2:e0:0d:
12:38:67:e4:3a:d0:23:ac:82:64:f8:7a:9e:7d:83:91:91:e2:
83:ed:0b:15:c7:fd:fd:f0:61:e4:e6:93:59:8f:6d:bb:7b:fd:
85:64:f7:7d:c9:00:f2:a6:25:2d:c1:46:2d:fd:7c:c0:87:f7:
f1:4d:3e:ee:8a:a7:8e:1e:81:1e:83:43:49:67:d0:08:a2:db:
77:98:cf:cb:04:1d:bd:1a:5d:14:c3:73:99:c0:63:9d:9d:dd:
b8:21:bb:52:2e:bb:23:64:5c:13:3b:c4:35:ae:0c:2f:1b:80:
a4:74:4a:35:24:bc:76:2c:81:00:76:b2:82:4c:2a:08:9d:b9:
e8:2f:d3:bb:26:47:aa:0a:a0:9b:06:5d:38:e2:21:61:ad:8a:
6c:8b:0c:25:0b:09:05:5b:c6:e2:41:aa:ae:99:bc:29:14:72:
2e:2c:9d:a5:62:1e:3b:6c:c6:8a:5d:79:2c:21:dc:5f:ac:65:
1f:de:ac:7d:07:48:fc:de:80:96:9d:b4:dc:fc:cd:29:6b:bc:
00:a2:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:50 2026 by rpki-client