
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa
File: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (raw, json)
Hash identifier: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=
Subject key identifier: AA:B4:46:07:17:21:EA:60:0D:87:71:1A:03:2B:31:0F:F1:9A:00:54
Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial: 0859
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:22:34 +0000
ROA not before: Wed 26 Nov 2025 20:11:40 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139731
IP address blocks: 103.144.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137 (0x859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Validity
Not Before: Nov 26 20:11:40 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a42f8a-26fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:60:da:0a:3b:ae:c3:ab:8b:d4:06:98:f2:
a5:60:0a:28:6a:05:4a:21:35:3d:93:eb:39:f2:0a:
e7:37:f1:e3:9e:7f:ef:94:f6:5f:51:7d:e9:ec:fd:
f8:50:c6:e1:6d:cc:3b:c8:20:d0:07:2e:6f:1b:cb:
43:b2:40:6a:a7:14:f0:0b:cf:4f:64:ab:fb:fc:93:
3d:71:98:ae:7d:7d:36:83:d5:f8:40:3b:21:ee:04:
8e:ae:07:3e:4d:df:69:20:cc:73:b8:dd:04:79:95:
5d:27:43:c9:e5:27:e8:bd:a1:87:15:d3:98:4e:bf:
9d:84:94:62:74:0c:a1:b8:ec:75:f7:f4:3b:0d:99:
ec:ba:57:2c:e0:0e:49:86:29:27:59:60:d8:c0:25:
19:23:74:81:87:28:37:6a:ab:36:e4:1d:69:05:99:
6e:a4:9e:75:17:0a:f8:2f:83:1e:a2:1f:44:f3:a7:
f2:f5:16:a5:da:1c:10:ca:16:13:56:14:6d:42:c0:
b0:09:0c:bc:dd:cf:29:f3:60:14:3d:e8:27:45:b1:
e1:1c:b1:ec:58:c9:9d:89:04:30:97:6a:49:9a:b3:
74:fb:04:28:ef:ca:40:54:a4:cb:9f:28:00:84:fa:
25:b7:21:bb:4f:20:ec:fc:f8:b5:0f:d3:0d:50:ee:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:46:07:17:21:EA:60:0D:87:71:1A:03:2B:31:0F:F1:9A:00:54
X509v3 Authority Key Identifier:
keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c6:92:67:44:95:c5:6a:73:0f:ac:21:96:9d:32:14:84:37:
5f:f8:6a:43:b9:1f:95:21:22:c8:d9:95:aa:c6:a8:13:4d:19:
c8:2c:e1:c8:8c:f0:12:bd:60:3e:28:30:5e:03:ba:42:ad:25:
d4:47:f9:9c:a0:09:9f:5e:1b:ea:ed:bf:72:94:2b:47:c4:6c:
a1:2f:81:ab:43:3b:d5:41:bd:1e:d3:7e:76:de:9b:4c:09:83:
55:9e:7a:cd:4a:4c:2d:32:20:3b:01:81:6b:08:87:a2:d1:3f:
7f:fa:3c:16:43:17:66:da:9f:36:65:b7:3c:49:28:af:a1:67:
8e:2d:4a:0b:c5:a5:66:6c:ed:82:3d:66:c8:83:45:07:d3:08:
76:e5:21:f1:7c:35:b4:2a:7f:1f:b1:bc:ab:89:9b:c4:ed:69:
16:97:3f:a3:2c:f4:fa:f0:a2:5d:3e:36:df:0e:36:ce:f9:2f:
0b:0e:c0:cf:d5:fd:c8:89:d0:47:17:eb:49:86:83:f4:81:49:
4f:8d:04:b2:87:ad:2f:3f:ba:0e:e7:a3:c4:20:05:ea:e0:4b:
6e:02:05:64:d9:6e:64:f9:1a:09:25:d2:41:e0:46:18:6d:11:
c7:69:2d:49:d8:aa:b7:a4:f3:e7:e3:dd:b3:47:d3:73:67:d5:
cf:7a:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:33 2026 by rpki-client