
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/496096EE41A311EABAADCE0AC4F9AE02.roa
File: 496096EE41A311EABAADCE0AC4F9AE02.roa (raw, json)
Hash identifier: owbB/QFVhS3E4rWN71OSFx1s7RgWi4YjBcaDXgNNaiI=
Subject key identifier: 08:5D:ED:61:6B:1C:31:76:5F:E1:A0:9F:7C:13:62:79:BA:24:9D:3D
Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Certificate serial: 0BA7
Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/496096EE41A311EABAADCE0AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:44:52 +0000
ROA not before: Tue 12 Aug 2025 19:30:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 136808
IP address blocks: 103.97.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3456, serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Validity
Not Before: Aug 12 19:30:53 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a426b4-0c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:1d:4d:fe:98:90:07:2c:d7:73:41:79:d6:
85:97:09:4c:6d:b6:52:ea:ea:5c:d5:3e:bb:cc:dd:
1e:6d:7e:a6:b1:c3:44:88:24:a9:d3:9c:11:36:1e:
e9:b4:94:6a:16:5a:bf:de:ad:22:50:e1:dd:e9:67:
bb:ec:05:7c:ef:68:20:a8:82:bf:f9:ba:d4:da:66:
77:a3:70:0a:90:9c:bf:ca:0d:00:fb:83:99:fa:52:
e0:53:c9:8f:c2:7f:b5:0d:e1:f4:cb:ab:01:a6:d8:
4f:68:b7:c3:ed:92:ba:26:c2:f1:69:58:9e:ad:1a:
8b:24:3d:45:c1:07:50:85:2b:73:fb:b7:a2:d9:36:
e7:ef:99:42:4f:ac:c4:ff:9e:a2:58:00:13:a7:ff:
ba:91:6b:9b:06:e2:29:43:c7:11:21:5c:6e:04:6b:
2b:70:78:b9:7a:2f:76:ab:10:ba:bf:72:29:49:14:
d9:50:eb:5d:a3:5e:89:65:bf:8b:13:43:1b:05:f9:
d0:7a:06:9f:93:4c:f4:d5:f5:49:df:f9:fb:53:7e:
f4:59:39:2f:e7:b1:a0:29:93:cc:b7:2d:9e:64:1f:
4c:9c:7b:fc:1b:fe:50:7d:66:a0:41:6f:54:6f:8f:
2e:13:3b:d6:35:a7:90:42:f3:75:53:64:65:04:20:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5D:ED:61:6B:1C:31:76:5F:E1:A0:9F:7C:13:62:79:BA:24:9D:3D
X509v3 Authority Key Identifier:
keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/496096EE41A311EABAADCE0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:33:4a:c6:58:6b:58:db:4a:4f:5d:55:60:a5:c8:f9:d1:c8:
a5:ea:0f:3e:4c:ef:6b:51:f4:61:0a:0c:a3:f2:71:f5:eb:2c:
91:d1:a8:f7:f9:ef:78:8f:ce:e5:2a:73:19:e5:be:6d:9c:80:
f5:f3:07:f0:a1:be:01:e0:fb:c4:f0:d1:95:2f:bb:23:ef:18:
3e:86:24:28:df:d8:b0:49:37:d9:de:9b:f8:f4:19:ab:7e:6f:
77:30:d3:a2:8d:ae:13:95:b1:90:dd:d4:d7:20:4b:d7:eb:76:
87:de:61:d1:40:f6:c4:47:b3:13:05:36:5b:29:c7:64:de:42:
43:4b:1e:e1:49:5b:f1:33:4f:f9:a1:03:14:2b:7f:c7:b0:b0:
64:fa:45:f8:45:c4:79:3c:62:8f:a1:a7:eb:50:05:81:7b:75:
a7:d5:bb:3b:cc:35:dc:88:fc:6f:68:c9:7b:ca:98:e5:a3:03:
1e:5c:12:b2:39:48:12:58:f8:de:3d:ef:48:80:e7:14:79:b6:
70:50:a5:9d:8a:f5:b2:2c:18:c6:b0:0b:ec:1f:79:d1:87:6f:
2a:55:17:d1:d7:e4:29:3b:5d:6a:cb:a6:67:ee:50:66:ba:0e:
e0:3e:50:2a:52:f9:0c:7a:1f:d6:8b:5f:d8:9c:4e:9e:c0:9c:
1d:40:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:33 2026 by rpki-client