
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/A7EBD74EAB7611F0A4F18663C4F9AE02.roa
File: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (raw, json)
Hash identifier: LeLRqsxMpp4Ky8wD6G3jj2qk2RePehhwztN5Ryshg7k=
Subject key identifier: CF:1A:62:27:25:E9:27:E1:A3:29:7C:29:29:FB:62:11:27:30:24:72
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 063F
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/A7EBD74EAB7611F0A4F18663C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:24:22 +0000
ROA not before: Fri 17 Oct 2025 16:30:56 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 103.214.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Oct 17 16:30:56 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47646-4f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:8b:5f:79:96:ba:1b:b4:5e:6d:fc:c5:72:
7a:44:98:9c:c6:1a:fa:25:46:67:c3:b0:4f:3f:2c:
af:25:32:71:98:f4:05:3b:ee:c5:81:48:ff:30:43:
4f:25:86:8c:67:f0:28:10:4c:13:ef:9d:17:15:c3:
a7:d7:71:7a:a2:c6:d8:9f:8d:51:8c:9f:8b:ea:c7:
31:ff:45:e2:ae:5a:2f:a9:12:bb:66:f7:3e:e8:99:
e9:fe:d7:04:2b:d9:c3:55:60:cd:5b:d4:98:70:f8:
14:dc:fe:da:9f:47:25:18:b6:2d:bb:3a:43:04:b5:
dd:36:54:6c:76:a3:cc:45:e4:22:ac:86:7f:dd:75:
4a:37:43:5c:e7:21:30:c4:32:b8:c7:61:5b:55:12:
52:93:91:1c:89:28:e2:6a:c8:6a:69:d8:47:0f:34:
bc:ed:59:26:07:de:6c:87:61:79:4f:5d:aa:ab:61:
4f:d0:b3:b5:94:73:14:d1:28:1a:1d:01:4d:a3:70:
71:5e:9a:27:19:86:9d:98:db:e7:36:cc:1c:4c:2f:
09:e4:4b:be:8c:31:41:ca:6a:68:f0:e1:af:20:fa:
b9:03:a2:08:6d:6f:c7:38:b9:33:2f:7e:41:73:f2:
3c:15:c4:be:4c:8b:dd:3f:e9:2c:bf:ea:1c:ef:dc:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:62:27:25:E9:27:E1:A3:29:7C:29:29:FB:62:11:27:30:24:72
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/A7EBD74EAB7611F0A4F18663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
51:a7:14:68:3d:cd:e5:66:a8:ea:36:00:f9:f1:7c:fc:d1:ac:
ba:d5:09:1d:11:d0:c0:58:7d:f7:ad:69:71:4a:fd:b5:7c:b5:
85:d6:34:89:e1:58:01:f3:96:12:48:d9:32:c7:39:0c:fe:36:
77:db:09:ab:de:c9:a2:f1:6a:b4:a4:70:0d:42:17:42:80:00:
c1:f8:a9:df:4c:1f:cb:24:41:34:a3:5f:ed:af:c0:bd:92:92:
d1:58:c6:e8:dc:46:a5:4b:46:08:a8:34:2e:85:e6:23:e1:db:
36:f3:2a:e4:eb:32:85:c4:7e:cd:f1:77:33:fa:62:86:62:b2:
14:a0:d4:3d:2f:4b:0a:9f:4f:69:5d:2f:0b:8a:b2:1d:3d:d2:
37:8f:f8:17:38:62:83:0f:56:c5:05:b0:85:23:49:84:6d:92:
6e:41:ff:ea:61:5b:37:2f:4d:c7:45:17:a5:e8:70:39:00:1b:
92:29:69:2a:a6:e4:31:99:7f:de:73:3a:d2:a3:be:ed:f9:ba:
a6:96:f1:2f:27:2d:2b:eb:14:18:90:91:4c:a4:ff:1a:35:24:
2a:1b:13:78:2b:bb:67:5a:a6:ee:ab:06:0f:39:e0:36:75:06:
8f:32:58:97:4e:2d:2e:1d:fe:6f:36:cb:69:c6:63:0d:d5:c1:
33:51:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:59 2026 by rpki-client