
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa
File: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (raw, json)
Hash identifier: CCWU/slr79ct4FNV5i0TIXfHecnrZ2GwArH1P9tumgo=
Subject key identifier: 91:9C:CC:7D:4B:83:F6:55:FF:B4:DE:37:F5:B0:E8:5E:1A:7A:0B:47
Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial: 0AEF
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:00:22 +0000
ROA not before: Sat 14 Feb 2026 19:16:44 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138582
IP address blocks: 103.133.172.0/23 maxlen: 23
103.133.172.0/24 maxlen: 24
103.133.173.0/24 maxlen: 24
2404:5140::/32 maxlen: 32
2404:5140::/48 maxlen: 48
2404:5140:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2799 (0xaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Validity
Not Before: Feb 14 19:16:44 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a46296-0685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:d6:6e:ae:8f:9a:4b:3b:b1:42:8e:29:75:
32:e6:ca:04:9d:87:8b:e7:68:9b:83:60:49:3e:7e:
01:89:2e:6a:b0:25:f5:63:dd:6d:13:51:03:1d:57:
30:f5:81:0f:e5:44:22:1b:fb:b1:19:32:5b:25:52:
50:cf:19:18:e4:39:8e:7f:1c:4f:26:93:12:f5:97:
52:64:a0:b5:3a:71:aa:88:a3:2f:b0:56:62:ce:a0:
a1:c0:45:04:a2:bb:15:a1:02:9b:6a:16:c0:79:14:
79:3f:35:8b:2d:e7:6d:02:c1:6c:43:82:48:4e:cd:
0b:09:4d:59:e7:b5:2a:08:81:00:8a:e2:1a:2b:00:
58:52:cf:51:45:8a:1c:54:52:0d:2e:1d:84:cc:52:
21:8d:e6:2f:b7:14:e7:a2:56:86:0f:04:93:2d:96:
cf:b4:52:03:45:8b:0e:6f:1b:a7:69:68:f5:6e:b1:
1a:ad:b1:f6:e5:3f:1d:72:3d:67:30:52:b5:ec:af:
9a:13:bb:02:91:c1:38:cc:7c:11:3f:5d:df:d0:ec:
00:a7:a9:3a:a6:b6:bd:32:ba:6b:74:d7:16:cf:73:
de:88:34:7c:2d:8b:70:22:36:89:13:a3:7d:45:d0:
83:33:4c:2a:63:11:c1:eb:05:82:b5:6b:a1:50:06:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:CC:7D:4B:83:F6:55:FF:B4:DE:37:F5:B0:E8:5E:1A:7A:0B:47
X509v3 Authority Key Identifier:
keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.172.0/23
IPv6:
2404:5140::/32
Signature Algorithm: sha256WithRSAEncryption
a3:7d:76:38:34:95:8c:be:c7:6b:82:90:b0:4f:22:52:8a:ec:
62:7c:e9:4b:21:20:fb:9a:4c:2f:13:b8:56:07:d4:6a:f9:ff:
33:02:2a:8c:e6:b3:df:23:a1:2c:97:96:1b:69:a6:01:ad:dc:
cf:5c:29:0c:a5:dd:d2:65:fa:4f:e0:ff:92:c9:04:ea:f9:fc:
3b:04:b2:8d:5f:f9:49:db:d2:6f:f1:fb:00:9e:df:c7:c3:24:
2e:fc:4c:eb:dd:fa:10:85:5f:8a:e6:d0:e0:ff:b3:df:10:9c:
5e:dc:c0:9a:00:bb:af:a1:4a:33:a5:e2:86:0b:95:cd:94:79:
58:0a:56:52:e4:d3:55:04:45:fa:61:f1:ce:bf:58:53:09:56:
c7:e8:77:8c:b1:b4:3f:dd:64:df:97:b4:34:ab:22:5c:47:a8:
15:ea:c9:b5:8e:f8:c0:7e:ea:17:cc:f6:c3:4c:0c:a1:a1:0d:
64:37:65:c1:66:68:f2:78:1d:b9:fd:58:b2:31:90:5b:d8:93:
7c:2f:25:c1:b3:f7:21:33:31:5a:01:22:30:3c:82:fe:ff:59:
c8:da:c6:92:ee:77:f3:a4:eb:d0:51:5d:19:3e:7a:92:1d:18:
e6:fe:4f:68:17:a2:04:d8:ce:da:89:93:ad:75:7b:b9:1e:7e:
5e:45:4a:a2
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1
QzM4RjUxRDAwHhcNMjYwMjE0MTkxNjQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjI5Ni0wNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpnWbq6Pmks7sUKOKXUy5soEnYeL52ibg2BJPn4BiS5qsCX1Y91tE1EDHVcw
9YEP5UQiG/uxGTJbJVJQzxkY5DmOfxxPJpMS9ZdSZKC1OnGqiKMvsFZizqChwEUE
orsVoQKbahbAeRR5PzWLLedtAsFsQ4JITs0LCU1Z57UqCIEAiuIaKwBYUs9RRYoc
VFINLh2EzFIhjeYvtxTnolaGDwSTLZbPtFIDRYsObxunaWj1brEarbH25T8dcj1n
MFK17K+aE7sCkcE4zHwRP13f0OwAp6k6pra9MrprdNcWz3PeiDR8LYtwIjaJE6N9
RdCDM0wqYxHB6wWCtWuhUAZWjwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJGczH1L
g/ZV/7TeN/Ww6F4aegtHMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3
N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTBCRUMvN0I3RjI4RTI2NzdFMTFFQThCRDgyNjJEQzRGOUFFMDIvRjBFQzdBRUFF
NDhDMTFFRjhCQTQ2MDJBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ4WsMA0EAgACMAcDBQAkBFFAMA0GCSqGSIb3DQEBCwUAA4IBAQCj
fXY4NJWMvsdrgpCwTyJSiuxifOlLISD7mkwvE7hWB9Rq+f8zAiqM5rPfI6Esl5Yb
aaYBrdzPXCkMpd3SZfpP4P+SyQTq+fw7BLKNX/lJ29Jv8fsAnt/HwyQu/Ezr3foQ
hV+K5tDg/7PfEJxe3MCaALuvoUozpeKGC5XNlHlYClZS5NNVBEX6YfHOv1hTCVbH
6HeMsbQ/3WTfl7Q0qyJcR6gV6sm1jvjAfuoXzPbDTAyhoQ1kN2XBZmjyeB25/Viy
MZBb2JN8LyXBs/chMzFaASIwPIL+/1nI2saS7nfzpOvQUV0ZPnqSHRjm/k9oF6IE
2M7aiZOtdXu5Hn5eRUqi
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:20 2026 by rpki-client