
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa
File: 8B802D485F2211EC88AA0F84C4F9AE02.roa (raw, json)
Hash identifier: 7eNnv9/n13JHxhn9eXPX/2+r30TjaibukF568rxiuT4=
Subject key identifier: 4C:63:85:EA:A4:C3:B3:B3:21:EF:79:EB:6D:30:19:89:60:FB:DE:FD
Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial: 0A7C
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:48:18 +0000
ROA not before: Thu 12 Jun 2025 20:15:23 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 41477
IP address blocks: 103.219.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Validity
Not Before: Jun 12 20:15:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42782-7913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:cd:c6:9c:0e:76:ec:ef:1d:f0:82:4d:ef:
19:fb:61:34:97:0f:3d:32:bd:99:f8:14:9c:34:c0:
2a:a3:73:6f:cd:a1:ac:2f:5a:ee:b0:b8:10:55:13:
d3:be:0d:d2:a6:73:2c:71:05:29:2e:05:b6:69:06:
89:02:d8:be:60:79:39:a8:a3:f8:fa:af:06:7d:51:
ab:58:80:31:e5:ff:51:00:50:65:03:49:4d:ed:9b:
f9:83:ca:fe:ab:dd:9c:06:a1:2e:2e:75:ee:bc:4c:
0a:90:a7:76:fd:bb:ef:23:d5:8b:aa:f1:dd:d9:69:
05:b9:44:e6:30:6f:0c:45:1e:74:95:e2:e4:46:08:
f7:50:28:b0:2e:87:0c:99:16:8a:6b:3b:77:57:f1:
89:23:8f:12:f1:4e:04:50:ca:4c:54:df:ce:fb:61:
86:98:b3:1c:89:13:31:8f:d4:1c:85:34:19:10:e5:
09:9c:09:d1:2b:8b:0d:20:da:63:28:f5:f9:d2:b6:
42:6c:4b:4d:2f:70:42:22:f1:1d:58:56:d1:a0:15:
ce:76:45:6f:84:66:1c:e8:34:b0:a3:d5:e1:43:03:
58:6a:39:24:ad:6a:b4:5d:2d:db:9c:74:64:d2:4d:
ce:9a:73:1f:cf:ab:3a:05:a0:9b:7a:4b:5c:3f:03:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:63:85:EA:A4:C3:B3:B3:21:EF:79:EB:6D:30:19:89:60:FB:DE:FD
X509v3 Authority Key Identifier:
keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:a4:f5:d6:d6:d0:53:fd:2e:84:f6:0d:fe:9c:b0:54:a4:f5:
8d:94:a1:a6:f7:14:3a:05:ca:10:37:49:76:dc:74:20:b9:35:
81:1e:57:71:ea:4e:95:fb:d7:b3:e1:bc:23:06:1b:5e:8b:5a:
57:ec:45:6e:b0:b1:2f:b9:c1:97:3a:e4:bc:c4:be:1a:45:67:
34:e1:28:b8:2e:55:21:59:bf:51:15:92:ca:c2:0d:16:f1:df:
a7:94:b6:bb:4b:ed:e0:61:fd:aa:e2:df:ce:7d:f6:9f:3d:ba:
7b:21:e7:8b:09:42:36:2d:e0:1b:8b:2a:9b:ef:e6:d1:88:19:
ac:ce:0b:a7:fb:15:89:e5:cb:12:38:ae:57:53:1c:cd:ac:08:
6e:83:ef:1d:2d:2b:7d:32:54:f4:aa:a6:74:c8:02:9b:b5:1e:
44:b1:c7:82:3c:92:ba:ac:89:3b:a3:ce:92:d5:41:a9:8b:d5:
5a:1c:9e:62:f3:e1:10:ac:3d:94:73:ce:9a:88:4d:75:97:01:
a6:66:b0:df:8a:34:28:d6:6b:d6:5f:69:8a:f6:4e:d2:4d:a0:
45:7e:35:37:62:c4:bf:ad:82:fc:9e:c5:e1:9b:7b:7f:0c:70:
0f:e4:f9:5b:5d:72:1d:68:25:c5:7a:89:5c:f2:aa:9d:14:33:
49:b8:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:09 2026 by rpki-client