
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/95BF687CEDE511F0AFD0F13E766F56BC.roa
File: 95BF687CEDE511F0AFD0F13E766F56BC.roa (raw, json)
Hash identifier: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=
Subject key identifier: 9E:0F:8C:3F:50:AF:AD:D0:78:30:B2:C8:2F:C5:47:BF:6A:62:D7:5D
Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Certificate serial: 25
Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/95BF687CEDE511F0AFD0F13E766F56BC.roa
Signing time: Sun 01 Mar 2026 05:48:34 +0000
ROA not before: Tue 03 Feb 2026 08:26:23 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140096
IP address blocks: 103.116.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Validity
Not Before: Feb 3 08:26:23 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d332-cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:92:79:5a:c8:15:21:3c:a1:83:ac:0f:48:
35:c2:0e:60:37:43:14:0f:7a:1e:c1:e8:f1:dd:4f:
bf:e5:4d:c0:40:84:af:50:70:6e:ee:45:14:3b:88:
33:53:b1:1b:bc:72:0e:5b:5d:b8:4e:63:10:cc:a8:
6e:28:aa:4f:a5:f1:24:49:d7:b4:1e:8b:1c:3c:22:
7e:b6:eb:48:4f:12:c5:d8:d3:73:40:0b:91:f5:ae:
ed:91:9b:b0:bb:db:8f:9e:0b:22:5c:22:71:06:a7:
01:13:ab:c9:f6:3f:70:f1:19:c3:30:34:e4:aa:47:
ba:ca:26:c5:8c:05:82:41:9e:1d:1a:42:2a:76:20:
44:ee:0a:5d:b0:40:a6:cc:f9:12:54:fd:13:0b:41:
57:a7:b8:65:5d:0c:c0:04:01:81:d2:5b:cf:b2:99:
53:2b:d9:c3:8d:eb:c4:3f:5e:33:21:ce:30:8c:ca:
73:2f:32:8f:62:38:ed:e0:72:1b:19:7e:b4:c3:c7:
fb:15:26:a6:bf:84:64:0f:85:ff:42:dd:6a:9a:c0:
d3:88:ec:71:e8:5b:f2:13:7f:2e:37:9f:2e:b6:0e:
f3:7e:6d:13:7a:f9:29:8a:14:90:4b:7f:91:77:65:
12:9b:90:ef:36:2d:15:0c:76:00:47:b5:fd:80:46:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0F:8C:3F:50:AF:AD:D0:78:30:B2:C8:2F:C5:47:BF:6A:62:D7:5D
X509v3 Authority Key Identifier:
keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/95BF687CEDE511F0AFD0F13E766F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.72.0/22
Signature Algorithm: sha256WithRSAEncryption
65:57:3d:e1:09:dc:eb:20:47:96:96:8a:05:3e:91:4c:63:3d:
a2:c5:b4:6b:f3:d0:2a:29:d8:e8:ba:34:34:ef:fe:9a:21:5a:
f6:bc:c0:eb:77:15:1d:ba:95:61:e6:4c:c5:56:f3:72:7d:c4:
5d:74:19:f7:21:87:7d:ac:86:bc:c7:6a:64:50:5c:06:ec:24:
c1:db:95:37:01:34:90:a8:37:67:c7:3d:f1:74:54:27:b7:d8:
5b:4f:a4:e3:f4:10:87:8b:f9:cd:96:cf:8e:6f:35:c9:89:fb:
6a:a1:08:2c:49:cb:3b:31:f1:92:87:2b:32:d7:ed:31:7b:16:
df:d5:7a:b4:57:4a:da:ff:59:47:af:18:d9:81:5c:00:6d:6c:
85:5d:3e:bc:fa:aa:75:7d:dd:cb:8c:5b:c4:3f:1d:2a:5a:a1:
d5:f4:88:d3:6b:ba:23:0c:ed:3f:16:e4:dd:a2:14:2e:da:d6:
29:e0:ad:d0:5f:0c:2d:3e:5e:ea:64:73:d1:e5:c0:d9:ae:43:
18:4d:93:ba:4b:3d:22:20:8a:d9:3e:f7:50:06:0e:40:f0:88:
0a:a8:57:56:f3:eb:7c:46:95:00:7b:d3:f6:09:0f:94:05:50:
c3:13:54:35:92:7c:41:18:65:16:5f:f4:20:9a:52:c0:64:1a:
e3:56:5f:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:12 2026 by rpki-client