
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/2A3D8B5EA97D11EABA31B843C4F9AE02.roa
File: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (raw, json)
Hash identifier: 06ODQyNlYCmtzAyw+klVtSCj9+JmnufpFyKDsAjgKpo=
Subject key identifier: A0:65:EC:ED:BE:55:23:8A:04:95:F0:37:1B:25:07:2C:BB:B8:9B:45
Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Certificate serial: 1092
Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/2A3D8B5EA97D11EABA31B843C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:35:30 +0000
ROA not before: Thu 20 Mar 2025 17:26:45 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 132298
IP address blocks: 103.133.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4242 (0x1092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Validity
Not Before: Mar 20 17:26:45 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a42481-e92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:16:f5:15:29:a6:32:5e:7e:40:97:3f:92:
ec:b1:7e:78:7c:cb:f4:27:c3:dd:bf:57:36:9d:94:
4d:b7:89:96:0a:6e:7d:ec:22:8c:ad:9d:87:8c:39:
fb:46:57:28:2b:01:ca:d1:81:77:d1:87:a2:11:04:
15:e3:ee:53:d0:fa:9a:72:09:f4:8c:75:ea:dc:1f:
c1:02:9a:61:44:7a:bd:a8:fb:39:9e:ee:91:14:00:
62:01:7d:08:29:62:fe:9f:75:6d:8d:4d:13:d1:f7:
61:09:03:f5:f6:10:2a:26:59:60:de:f2:78:16:2e:
ce:4c:68:c2:ed:1b:a1:14:27:33:06:c3:b5:21:b8:
a0:c9:43:2c:1c:e1:da:5e:1e:0e:48:68:00:cc:1d:
65:84:f1:7f:99:43:ff:5b:79:3a:5f:31:65:46:36:
ad:dc:86:3d:3b:a9:1a:85:e5:e6:2e:ac:23:6f:ac:
a7:2e:94:a7:1f:fa:03:ce:cd:30:19:89:62:a5:05:
a2:6a:ab:c3:38:6a:a5:90:39:8c:27:6c:d4:ad:13:
2a:b2:c8:43:1f:53:09:74:d2:cb:70:3a:fd:77:8c:
57:f5:6f:d1:01:bd:1e:71:cc:34:01:ca:ed:59:6f:
0a:5d:8b:47:de:e5:79:39:20:03:13:00:0d:14:16:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:EC:ED:BE:55:23:8A:04:95:F0:37:1B:25:07:2C:BB:B8:9B:45
X509v3 Authority Key Identifier:
keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/2A3D8B5EA97D11EABA31B843C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:7b:05:23:02:97:be:c7:08:c1:d6:48:ed:29:e1:e8:ea:57:
8f:43:d3:b7:48:df:70:06:05:84:2a:c4:6b:15:28:67:50:02:
20:11:2d:f0:09:35:18:8a:95:5f:85:d5:45:40:eb:b2:25:34:
6d:a9:8a:fa:ff:2f:7d:3a:30:42:22:5f:f6:a2:70:a4:71:60:
4d:33:72:48:d6:b7:da:57:fe:b2:41:fb:f6:39:31:a4:ac:dd:
3e:c8:e6:6d:e1:3c:4b:64:0c:8a:69:95:b2:4d:e4:65:c6:73:
ff:09:ae:67:08:14:76:7f:2f:82:31:4c:09:a1:ef:38:c3:0e:
09:e8:5c:0e:ff:98:26:98:9b:37:13:c1:7e:88:f9:7a:60:24:
63:f3:0b:3a:c1:f8:e2:dd:94:f5:98:95:0b:cb:41:5a:09:d6:
9d:7e:63:a2:c9:75:b2:11:d6:a2:91:56:46:3f:99:96:0f:d8:
e6:83:43:3b:ad:eb:1f:59:39:a7:c9:f9:eb:ba:2f:b4:2b:4b:
2d:1b:48:3b:4a:91:21:3f:72:93:83:fd:1e:f6:71:94:36:e7:
d8:eb:72:f4:06:da:ca:0c:65:a7:62:67:6c:72:d2:12:d8:40:
8f:14:64:6a:8c:b6:6b:ba:8c:3c:ce:31:00:fc:f1:ec:20:c5:
73:30:6e:05
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC
QjY3Njk0QkQwHhcNMjUwMzIwMTcyNjQ1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjQ4MS1lOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMAW9RUppjJefkCXP5LssX54fMv0J8Pdv1c2nZRNt4mWCm597CKMrZ2HjDn7
RlcoKwHK0YF30YeiEQQV4+5T0Pqacgn0jHXq3B/BApphRHq9qPs5nu6RFABiAX0I
KWL+n3VtjU0T0fdhCQP19hAqJllg3vJ4Fi7OTGjC7RuhFCczBsO1IbigyUMsHOHa
Xh4OSGgAzB1lhPF/mUP/W3k6XzFlRjat3IY9O6kaheXmLqwjb6ynLpSnH/oDzs0w
GYlipQWiaqvDOGqlkDmMJ2zUrRMqsshDH1MJdNLLcDr9d4xX9W/RAb0eccw0Acrt
WW8KXYtH3uV5OSADEwANFBZyuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKBl7O2+
VSOKBJXwNxslByy7uJtFMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD
NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs
TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUNDMjIvNjkwNkM2RkE0Qzc0MTFFOUI3QzRCQjU1QzRGOUFFMDIvMkEzRDhCNUVB
OTdEMTFFQUJBMzFCODQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ4XIMA0GCSqGSIb3DQEBCwUAA4IBAQB7ewUjApe+xwjB1kjtKeHo
6lePQ9O3SN9wBgWEKsRrFShnUAIgES3wCTUYipVfhdVFQOuyJTRtqYr6/y99OjBC
Il/2onCkcWBNM3JI1rfaV/6yQfv2OTGkrN0+yOZt4TxLZAyKaZWyTeRlxnP/Ca5n
CBR2fy+CMUwJoe84ww4J6FwO/5gmmJs3E8F+iPl6YCRj8ws6wfji3ZT1mJULy0Fa
CdadfmOiyXWyEdaikVZGP5mWD9jmg0M7resfWTmnyfnrui+0K0stG0g7SpEhP3KT
g/0e9nGUNufY63L0BtrKDGWnYmdsctIS2ECPFGRqjLZruow8zjEA/PHsIMVzMG4F
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:17 2026 by rpki-client