
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/B6DE83747AE811EF94E01B38C4F9AE02.roa
File: B6DE83747AE811EF94E01B38C4F9AE02.roa (raw, json)
Hash identifier: /GMrhoQEKvHdkDFbI/1zTO+FBMytXW1TA1Gyffd9eiY=
Subject key identifier: C1:37:61:6C:BD:E3:8A:D5:27:69:D6:1D:98:1B:72:87:99:45:E3:61
Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial: 0133
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/B6DE83747AE811EF94E01B38C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:44:12 +0000
ROA not before: Wed 05 Mar 2025 07:53:10 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 1449
IP address blocks: 43.230.181.0/24 maxlen: 24
43.230.182.0/24 maxlen: 24
103.50.0.0/24 maxlen: 24
103.50.1.0/24 maxlen: 24
103.50.2.0/24 maxlen: 24
103.50.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Validity
Not Before: Mar 5 07:53:10 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a5861c-8233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:26:e8:67:2b:eb:2e:4a:c0:36:ad:e1:65:
a9:f2:1b:79:dc:e8:5a:38:17:1e:34:99:a8:7e:6f:
0a:99:22:c2:31:87:58:af:bb:fe:13:1a:48:eb:10:
c1:d0:20:9d:55:74:bf:98:05:fe:ef:77:a3:f3:fd:
84:a7:7d:74:88:a2:30:23:d3:9d:07:07:77:45:97:
b3:8d:8e:86:23:b2:7f:1c:82:d4:f0:da:af:b3:6f:
a6:c5:6b:a1:cd:ac:61:9c:3c:4f:41:c7:5f:de:61:
0e:7c:3a:b8:4d:09:ce:ce:04:10:21:9b:3c:43:5e:
ac:2d:82:d8:25:67:ed:5a:1a:d0:5f:30:c1:b2:75:
3e:ed:25:05:9f:14:04:d0:e2:fd:74:9d:03:88:11:
54:d9:3a:6d:1c:41:ee:d8:33:3a:6c:71:dc:b6:18:
d4:eb:51:93:fb:a9:d7:ad:8c:44:04:de:96:34:d5:
c9:79:0c:31:35:9a:d0:91:31:ce:c9:18:a9:ba:09:
9a:40:c2:81:05:8c:49:f3:3a:d4:c2:e1:e8:93:1a:
de:31:8a:77:65:b2:a2:92:4a:5c:46:a0:3b:03:c2:
cc:d8:c3:ba:d7:b4:26:bc:3d:e3:08:87:bc:f7:07:
a8:c9:21:85:67:e1:5e:ff:c0:b1:fa:bc:16:26:51:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:37:61:6C:BD:E3:8A:D5:27:69:D6:1D:98:1B:72:87:99:45:E3:61
X509v3 Authority Key Identifier:
keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/B6DE83747AE811EF94E01B38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.181.0-43.230.182.255
103.50.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:c6:d5:96:b0:87:54:71:65:ca:29:59:26:99:2e:4b:df:b2:
a8:ba:01:34:aa:25:c0:fd:8b:28:43:4d:8f:d7:d4:d3:95:11:
72:5c:e1:fd:37:69:8c:b8:30:1a:47:26:6e:00:e0:91:e6:d4:
95:c6:1a:ae:45:1b:28:53:fc:6e:dc:d3:14:e5:6a:1c:04:4f:
c3:79:49:df:6d:0a:3c:04:f2:fe:eb:65:ed:9c:d7:c6:2d:40:
61:66:bc:14:de:4b:be:71:fe:e1:cd:a8:b2:c6:75:75:4b:2b:
14:7a:34:b4:70:33:4a:41:df:94:e6:b1:8c:84:c3:b4:83:08:
73:57:58:c5:c5:29:71:ea:03:3b:4d:c5:c8:ce:06:4e:6e:48:
c1:64:c0:88:95:30:11:13:ec:e1:f6:de:9c:79:88:49:ef:16:
94:68:dd:e8:1e:30:80:19:cf:f8:87:32:ac:e0:df:73:a8:61:
b5:97:63:a9:89:86:d7:0d:87:a4:11:fe:80:8e:88:00:19:61:
9c:34:a0:4a:c1:9d:ee:e0:03:1a:9d:3c:7b:bf:24:e4:44:e9:
3c:5c:aa:22:3a:68:00:40:17:bd:d2:80:c0:06:43:12:70:d8:
96:60:b8:09:11:ad:c3:bb:d4:9a:7d:36:5a:d0:b4:83:7a:89:
91:0c:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:49 2026 by rpki-client