
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa
File: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (raw, json)
Hash identifier: 0G8y890AV8+X2YlEAcmnQRZ33GxT1e5vDg0b+sSexQ8=
Subject key identifier: 06:32:36:8B:40:CE:67:78:01:C8:BF:FB:B7:F9:8C:4A:FC:D9:36:E6
Certificate issuer: /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Certificate serial: 0334
Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:02:58 +0000
ROA not before: Tue 17 Jun 2025 01:37:38 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137853
IP address blocks: 103.115.172.0/22 maxlen: 24
2402:eb40::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Validity
Not Before: Jun 17 01:37:38 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a400c2-10c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:a8:9a:b9:e5:86:0e:a0:88:38:87:33:d0:
12:5e:e1:81:47:de:35:79:4e:46:68:2b:f8:a1:ea:
e0:c4:08:4a:cb:90:57:83:e1:83:47:26:db:15:c2:
70:b7:8e:9d:13:d6:1f:14:4f:b2:d1:ed:41:62:49:
6c:59:ec:24:d2:93:58:33:ce:c3:e1:93:10:23:0d:
00:85:b2:66:15:3a:66:c6:9d:1c:98:03:34:ac:93:
30:13:0e:88:44:e9:26:11:e5:ed:0f:0a:07:ea:f1:
c3:6e:c9:53:c5:d0:45:63:ba:93:bb:dc:c3:7e:1e:
69:f0:12:66:cc:4e:35:c2:45:c4:cd:5b:99:9d:66:
55:33:64:cf:c4:21:ba:16:25:4e:c2:7c:36:5a:a0:
a8:20:4f:20:f0:53:0d:3f:79:aa:b6:9c:52:d5:4a:
8e:83:e5:ce:7b:af:e8:d0:40:a9:db:63:8b:d4:34:
22:ec:85:b4:68:9a:9c:f9:9b:f4:0c:a9:0f:2f:aa:
92:b6:44:a2:6b:8d:76:62:63:ec:84:ef:b5:ac:b6:
23:a9:88:83:61:cb:b0:1d:ab:33:90:f9:47:05:b9:
00:9f:a3:73:84:e9:8b:ef:40:34:16:62:dd:59:8f:
71:1c:0a:b9:9e:12:c6:e6:7d:5a:43:db:00:c0:a9:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:32:36:8B:40:CE:67:78:01:C8:BF:FB:B7:F9:8C:4A:FC:D9:36:E6
X509v3 Authority Key Identifier:
keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/0C2902B4FC3D11ECAD619C35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.172.0/22
IPv6:
2402:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
71:82:82:2f:c8:60:c6:42:43:98:f8:78:f0:1b:d8:f5:fd:e7:
14:a0:22:ef:28:e2:98:92:bb:3f:6b:5f:ec:47:cc:5e:ae:a2:
28:96:c3:9d:95:73:be:63:98:e4:7a:58:9c:3c:58:8d:70:91:
da:30:ab:2e:90:6e:20:bd:ba:03:7d:f4:ed:7d:b6:23:89:d2:
59:b3:1d:d7:3a:c2:88:d1:89:6a:6e:fd:21:cc:9c:b4:12:a1:
55:3e:be:87:df:5b:87:13:0b:43:1d:4a:ad:32:48:da:00:f3:
15:9c:b7:4e:f2:e1:48:5e:e6:6b:c9:fe:e9:00:e0:7e:18:67:
32:19:13:68:e8:ef:1e:cd:b5:36:e2:a2:eb:03:e2:b0:41:c4:
71:7b:06:f8:c0:d2:d7:3a:4b:6c:41:93:0d:85:cb:66:cf:bc:
60:11:ff:83:aa:01:c3:f6:33:ef:df:99:40:c4:36:05:e4:30:
39:42:90:47:31:8c:23:bd:75:56:e0:17:de:a1:ac:a8:b5:ef:
98:b6:db:61:a8:0b:ba:19:bf:03:bc:86:80:9e:2d:5d:a0:19:
0c:38:1f:47:44:1f:cf:3e:80:20:c1:8e:e3:ac:01:1b:2a:16:
84:9c:cc:a0:f4:a7:eb:a1:11:9d:51:51:d9:1d:a8:ec:d3:35:
ec:ca:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:30 2026 by rpki-client