
$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa
File: 72CE4D80958411EEB3748B58C4F9AE02.roa (raw, json)
Hash identifier: Y7CBsuQt9HIpYcN19tybRAYJs+zswt16vqxj5J0HE2o=
Subject key identifier: D4:74:3E:D4:68:06:EB:FD:D4:12:33:55:CD:B9:E0:34:EA:2C:C5:81
Certificate issuer: /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial: 01A9
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:40:25 +0000
ROA not before: Fri 13 Jun 2025 03:54:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 58580
IP address blocks: 103.54.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Validity
Not Before: Jun 13 03:54:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3df59-2222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:be:0c:1f:a5:c0:f3:20:f7:86:08:eb:01:
eb:2a:e9:47:18:af:2a:18:0b:48:f5:0e:1a:20:aa:
3a:41:28:82:04:b9:26:2d:e6:81:40:1b:ea:ed:e2:
94:c8:18:b9:07:18:88:3b:5c:0e:86:02:a0:cb:d1:
39:3d:1b:be:77:81:ae:8e:57:f6:1f:6f:c5:d6:3f:
5e:d5:26:9c:8e:c0:32:86:b7:7b:bd:54:12:bd:dd:
bb:70:cd:1a:37:41:65:c9:fa:50:10:21:5d:e2:26:
33:05:93:c2:32:4a:5b:6e:50:d3:8d:b6:4f:b9:0b:
3d:1f:08:70:23:c9:8e:8a:3d:1d:b3:f1:34:31:4f:
13:60:93:e9:14:f3:f3:e1:f1:87:7d:23:52:16:30:
79:96:65:b9:42:01:3a:3e:29:00:bb:79:e7:58:43:
e5:b8:95:97:dc:db:d7:9a:d6:5c:ef:ec:4d:99:b2:
fc:ed:82:50:d1:c3:23:82:7c:aa:fa:ac:50:6c:ba:
d0:61:16:4e:f0:02:ab:df:72:e4:65:4f:04:46:cf:
c0:2a:f9:e9:3b:74:7d:e1:ea:2a:78:af:ed:3b:0f:
e0:37:b8:c4:28:21:e8:bb:9c:25:00:a2:a2:be:ec:
bd:d0:cc:3a:18:70:18:02:32:0d:98:2c:9b:80:94:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:3E:D4:68:06:EB:FD:D4:12:33:55:CD:B9:E0:34:EA:2C:C5:81
X509v3 Authority Key Identifier:
keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.54.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:8d:f5:b5:2c:ab:51:49:86:6c:08:de:4f:7d:73:ae:6e:35:
fb:3f:e3:8e:85:1e:0b:9c:f9:93:ec:02:31:97:a8:3f:13:42:
a8:c9:bd:a6:29:44:6b:2d:cf:0c:1d:67:7c:33:08:ce:89:fd:
f6:51:77:d3:7f:2e:65:67:be:f1:7c:ec:e0:a4:32:7e:f2:4c:
55:fd:db:e7:1c:e7:f8:a9:58:a2:ae:84:93:d4:9f:00:ce:90:
b2:2f:c9:a5:c3:5f:a2:bd:63:5a:0c:5c:dc:a7:32:35:38:a1:
a1:be:d3:dd:59:6c:f6:2b:fc:db:2e:3a:d0:4b:c5:96:f0:90:
44:23:f8:ef:c8:d7:06:3f:93:ec:a5:e4:8f:1b:1b:97:bf:38:
c0:43:0c:23:6b:a5:de:5e:59:80:2c:dc:08:0a:66:e2:94:26:
1b:b2:4a:43:2a:bd:20:65:e6:0c:8e:51:f8:c1:a0:02:30:f9:
e2:49:9f:8b:5b:f9:a6:f4:87:1b:07:9b:66:97:f1:d6:bf:e7:
c5:50:e8:10:eb:1c:5c:2f:45:7a:d1:c1:5f:3d:66:77:a1:4b:
5d:38:58:d6:0c:0c:68:f3:f3:01:d9:fe:58:d0:1b:25:9b:3e:
0e:73:fc:b7:45:05:c0:48:87:1a:05:90:24:d7:ad:b0:c0:5d:
0d:69:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:54 2026 by rpki-client