
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa
File: 234D0D6C500611F08771CE55C4F9AE02.roa (raw, json)
Hash identifier: 3UxHnA0X5lrZ5mQaAS9dVon56ZIRCi7/CXGXgzhsdQ8=
Subject key identifier: 39:FA:54:B1:5D:D4:FB:18:D7:84:29:EE:0F:F1:D7:D6:1E:1A:84:29
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D11
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:06:49 +0000
ROA not before: Mon 23 Jun 2025 07:46:14 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9311
IP address blocks: 103.15.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Jun 23 07:46:14 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a48e49-ce2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:03:a8:39:78:45:f6:77:cb:f1:25:55:5f:
d1:5a:c5:fe:e9:98:f5:88:fc:f5:10:e0:f5:94:35:
b3:9f:f6:3a:7f:cd:ca:d9:ce:b8:d5:75:6c:20:0b:
d0:76:33:cf:6c:9b:ad:ab:ab:99:5a:01:29:df:81:
83:8f:09:4b:f0:57:b7:1b:db:4c:29:58:e9:48:a7:
a8:31:79:ed:0f:72:a5:dd:a4:7a:dd:ec:9b:57:d0:
7b:cc:0d:cc:83:10:e2:75:0e:98:80:dc:dc:1f:de:
c3:f5:73:02:cb:46:38:4e:84:2f:69:5c:9a:52:55:
c6:55:2b:1c:12:4e:d1:07:3c:55:9e:e8:5b:62:3d:
82:9b:54:cb:08:c3:f1:93:42:f3:10:e2:b7:f1:53:
2e:ac:45:b3:dd:55:02:bf:94:b3:2e:bc:7d:14:b3:
5e:d5:07:f0:83:5c:17:65:3f:97:c7:08:9d:62:d7:
53:51:24:b5:b0:e4:59:eb:3e:26:ff:d2:a4:3a:56:
9f:40:a6:01:45:6c:01:ca:b6:f7:f3:a5:cc:d2:ad:
00:52:59:12:9d:b8:c6:7a:d0:b5:51:7c:7e:d0:21:
ff:e4:31:21:06:36:24:7e:c2:79:c2:77:e9:ad:bf:
39:f9:d7:bb:ba:7d:2e:50:61:7d:9c:17:66:27:aa:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:54:B1:5D:D4:FB:18:D7:84:29:EE:0F:F1:D7:D6:1E:1A:84:29
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.79.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f2:9a:9f:0a:4d:a0:b8:5f:fb:cc:3c:80:73:6f:ea:3d:42:
54:a7:9a:69:90:45:9b:75:df:8f:e4:72:5a:5f:82:ed:66:b5:
07:76:5e:13:09:98:30:94:31:bb:cf:81:56:7a:f6:51:85:d2:
4a:15:28:f4:0f:1d:d3:b9:18:72:3a:5d:da:0e:8e:cf:fb:df:
87:2a:f0:04:6d:4c:5d:7d:03:93:0a:48:b9:14:64:cc:3e:66:
a8:e4:5a:82:4e:c1:53:98:8a:9f:0a:0f:ee:1d:2b:07:a5:4a:
f2:64:67:6d:91:ea:2b:65:77:17:df:80:95:00:ab:12:40:42:
90:20:99:60:fa:24:c5:02:f6:1b:a2:22:d4:6e:f9:1d:d5:e5:
f4:cb:33:97:d4:a5:25:f3:57:2a:e2:2b:11:d8:a3:f5:cd:4b:
23:98:19:60:e6:7b:6e:a2:ec:30:1a:51:08:dc:97:25:fa:db:
78:75:c0:60:eb:cd:d3:3d:f2:4c:49:1f:d8:50:f5:b5:27:dd:
56:51:35:3c:1f:50:ea:ac:4e:27:d8:dd:17:8b:3f:66:19:0b:
b2:55:07:43:84:74:27:95:2a:1e:d9:e7:75:2a:22:90:c5:c1:
f9:8e:ef:c8:92:d7:31:4a:58:76:d0:04:43:99:b2:a6:08:93:
94:6e:d7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:40 2026 by rpki-client