
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
File: B9E2643697CE11EDB7D5B312C4F9AE02.roa (raw, json)
Hash identifier: TsYbtlzYuFIcHRyU9vKWwptu5/ItOjGOn1ZrqYpBfEc=
Subject key identifier: 5A:6B:D2:45:42:F9:3D:4C:C9:D0:27:9A:32:50:E6:0A:75:18:BF:BF
Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial: 025B
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:26:25 +0000
ROA not before: Wed 09 Jul 2025 03:38:57 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137503
IP address blocks: 103.141.30.0/23 maxlen: 24
103.189.186.0/23 maxlen: 24
103.241.100.0/22 maxlen: 24
202.37.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Validity
Not Before: Jul 9 03:38:57 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3ea21-5e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:c3:b1:5e:b7:14:1c:04:88:3f:50:a2:ed:
46:60:7a:6e:d0:ba:8d:da:4b:35:f8:fb:63:76:55:
59:37:11:93:09:ac:d0:a2:bd:27:99:22:03:e3:3c:
98:60:80:c0:38:ef:eb:98:d7:23:3e:3a:a4:1f:64:
38:f6:d5:f7:a0:97:b7:32:3c:ce:2c:8d:25:e1:67:
2e:11:8b:83:01:36:c0:ce:2b:da:de:b3:c3:c0:a6:
ce:fd:f9:4e:47:a0:99:c0:7d:2b:73:7f:1a:f3:2b:
32:77:8f:f4:41:94:9d:50:28:de:e6:52:8c:c9:24:
72:d2:08:30:57:ff:97:84:69:ea:8e:74:07:bb:50:
71:56:1a:ae:1e:58:cb:b9:3c:d3:ca:d7:f0:c0:73:
5f:1e:58:6a:98:85:07:ad:95:75:69:23:fb:48:f9:
7e:35:e7:5f:a1:24:5b:4b:af:59:e4:dc:99:61:05:
cd:96:40:25:04:00:91:55:24:cc:cd:90:64:4f:81:
74:dd:e0:8b:03:3a:0b:ef:66:f0:8a:bf:79:77:1a:
17:45:7b:e2:37:40:4e:6e:7d:3e:61:3a:86:63:a4:
2c:cb:47:44:67:5e:19:1a:fe:56:d5:75:bd:1a:aa:
1b:21:83:5b:4a:39:50:e6:0d:76:37:2f:59:b1:50:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:D2:45:42:F9:3D:4C:C9:D0:27:9A:32:50:E6:0A:75:18:BF:BF
X509v3 Authority Key Identifier:
keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.30.0/23
103.189.186.0/23
103.241.100.0/22
202.37.20.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:32:97:df:3f:81:b5:2c:7c:d5:ac:44:e6:f6:03:d2:2d:30:
86:41:f0:9a:c3:5a:72:8f:d9:62:1d:5e:ba:69:f1:f1:ea:9c:
30:16:76:15:1f:4f:93:18:50:52:8e:7f:c9:76:2a:f9:50:96:
f7:ec:95:89:ca:66:2b:7f:85:6f:d2:cd:2c:33:7f:09:2f:87:
c7:cc:e5:cb:36:d1:5c:1e:02:fe:fd:ed:c1:ac:d9:45:6a:60:
00:04:d8:22:7b:12:f9:77:4a:17:13:39:e3:5e:bb:a0:26:93:
0d:ed:b4:35:04:69:8c:29:74:f8:8f:3a:3a:f8:81:80:89:b6:
51:fd:83:b3:7b:9e:c5:9a:04:ed:51:a3:b1:05:92:2e:cb:13:
dc:a4:37:c2:e1:d1:e7:d1:3f:72:2c:53:0e:4c:88:97:e8:80:
f4:f0:61:ed:ce:f0:20:c5:98:b3:20:37:3f:54:ed:4a:77:d3:
f0:9d:3a:1a:a4:27:47:c2:51:07:d9:d3:dc:79:8f:94:34:a8:
6d:20:77:f7:bf:01:8b:33:97:4d:ec:3e:14:70:0d:ce:0f:6a:
89:82:68:67:92:e1:c5:f7:1f:1b:70:01:65:92:57:64:a7:9f:
20:63:ec:19:04:60:f4:16:8d:52:92:d0:2a:41:a5:5e:d2:de:
7c:29:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:34 2026 by rpki-client