
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa
File: 643961CCB39811EBBD3F524CC4F9AE02.roa (raw, json)
Hash identifier: r5h9zyvyocKErg8+JzpHFK2StLQF5Wzt0hRPt3Vhgus=
Subject key identifier: D3:89:7A:16:69:F7:6C:DD:D7:5E:F3:D0:F2:F4:D0:9B:F7:F7:28:1F
Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial: 073E
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:41:31 +0000
ROA not before: Wed 26 Mar 2025 22:33:22 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 4785
IP address blocks: 45.251.240.0/24 maxlen: 24
45.251.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Validity
Not Before: Mar 26 22:33:22 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fbbb-8649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:33:8b:56:33:39:c9:e0:98:a2:1c:96:a3:
c0:66:d7:a9:1b:0c:a1:ff:79:5e:3e:e9:69:98:e3:
85:49:27:79:59:fc:98:34:4c:86:9d:8f:e5:91:b2:
54:45:86:58:5e:ff:9b:b1:e7:d8:ef:ad:3e:90:aa:
f7:62:86:3a:58:ed:57:71:f0:42:cd:a2:a3:df:60:
a7:06:9d:e4:ca:99:b5:3b:c7:6c:13:88:75:44:1f:
2d:38:a9:2c:e5:a6:87:29:d3:2b:5c:58:07:d5:bc:
50:c9:27:55:2f:7f:b4:13:ae:cb:8f:b4:91:5f:73:
e2:56:ed:42:44:b7:87:68:72:7b:50:6b:8b:9d:58:
58:d1:63:24:3f:57:16:85:c6:f0:22:38:fa:14:04:
92:f8:84:83:6c:3e:1d:52:a5:e1:61:80:75:3e:7e:
89:1c:05:7e:5b:ab:fd:e7:61:a2:31:30:4a:27:3b:
f1:67:1a:9f:c7:b6:5d:ed:86:a8:9e:62:dd:0c:ce:
6b:83:30:92:f3:04:23:db:9d:c2:c2:06:f6:35:20:
42:d3:7e:04:f3:03:4a:71:b9:ef:5c:8e:c8:e2:9b:
5e:ce:f0:c0:6f:47:11:c0:ca:08:05:53:f0:84:b5:
68:d6:75:44:8f:29:22:91:e7:d2:c6:06:05:af:5f:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:89:7A:16:69:F7:6C:DD:D7:5E:F3:D0:F2:F4:D0:9B:F7:F7:28:1F
X509v3 Authority Key Identifier:
keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.251.240.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:fb:68:0b:d8:ac:74:4a:43:99:c6:b4:86:cd:78:43:2d:25:
50:e9:19:29:c0:f1:31:1c:91:fa:dd:6c:3a:83:9a:fd:8d:65:
2e:96:dd:3a:a2:4f:28:13:a8:13:99:d6:d4:0b:d5:f1:2d:f7:
79:2c:5d:0a:49:e6:cd:71:67:23:c4:ae:0c:cb:b5:48:54:69:
52:f4:83:df:d2:fd:6e:06:91:85:59:64:9c:51:2b:de:82:c2:
d3:f5:28:18:5f:de:19:a6:43:b5:ae:83:9c:ea:d7:07:66:7b:
84:ee:98:06:18:9d:8c:bb:ef:d3:60:81:ea:d2:30:eb:c9:48:
d1:c4:30:01:9c:0a:5b:4d:ed:4f:ee:d2:b1:06:04:e3:db:61:
46:ec:96:91:6d:0f:96:9d:46:58:04:3a:68:9e:c5:51:f7:07:
9b:61:f0:6a:ce:5b:51:32:6c:42:ab:4a:c7:32:9a:f9:92:09:
d6:3f:f1:f3:5f:cd:7c:8f:8e:af:fd:43:20:3a:73:80:27:17:
a1:a1:d3:df:d3:4f:84:da:22:2b:96:cc:cc:8e:76:65:ef:64:
d7:21:c6:3d:52:fb:d7:7b:0b:77:d7:82:18:53:0d:a8:30:1d:
4c:12:cb:69:23:08:0c:5d:11:4a:4f:71:73:2e:31:7f:1e:fc:
5d:2b:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:33 2026 by rpki-client