
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
File: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (raw, json)
Hash identifier: tfF4YrF0sRQGLJpG/mPIZwvq6Hg8gdDF0qFcvaTRTDo=
Subject key identifier: CF:3D:03:BE:D8:3A:14:8F:C3:41:F3:E4:78:6B:6C:C2:CA:D0:6B:0C
Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial: 0238
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:29:10 +0000
ROA not before: Mon 07 Apr 2025 02:40:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139009
IP address blocks: 103.244.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Validity
Not Before: Apr 7 02:40:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3eac6-77fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:05:a9:47:14:3a:7f:23:45:9c:da:ba:b5:
27:9b:6e:9d:90:68:e4:4d:01:30:4e:20:5b:f2:8f:
eb:34:b8:57:b9:7c:91:2f:cd:90:2a:91:67:be:cc:
3d:a9:d6:7e:d5:83:39:52:15:ac:83:f6:60:5b:2f:
fc:d2:6c:75:25:a5:57:07:eb:57:e5:cf:14:5e:13:
e4:67:2d:0d:c3:34:4c:d2:c3:43:4e:28:c0:5b:d7:
f1:50:f4:f5:b8:60:ef:4c:ca:50:14:b4:da:bb:f6:
51:49:f7:c5:49:2c:c1:1a:d2:37:91:00:18:b8:d9:
eb:f1:b7:2d:d8:10:77:8d:28:1d:94:9c:21:31:4e:
e2:29:c1:e2:93:52:25:3e:04:8c:01:0e:15:9c:9a:
4b:11:e7:de:87:6b:f0:c9:76:f5:18:32:2c:66:60:
ab:d9:69:8e:93:2c:04:a6:13:62:24:ce:ab:f0:71:
d7:83:8e:f5:6e:51:2b:9b:6b:f1:df:c8:3b:54:96:
3d:b0:75:a5:52:78:75:50:5e:4d:36:96:97:5b:59:
98:bc:46:c7:f9:84:40:3b:53:3c:1a:3e:c9:43:6d:
84:64:b5:df:63:7e:ae:9e:03:f0:a3:ca:19:f5:b9:
85:e0:fb:52:00:85:76:b6:a7:f1:52:4d:a9:6d:ec:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:03:BE:D8:3A:14:8F:C3:41:F3:E4:78:6B:6C:C2:CA:D0:6B:0C
X509v3 Authority Key Identifier:
keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.244.49.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6d:c6:18:ff:e4:84:bb:bd:e2:5d:e6:14:40:26:e0:6d:5a:
4e:d3:60:03:de:f0:43:aa:48:18:96:da:ae:0c:c3:73:88:8f:
70:e5:30:91:4a:c1:b4:6d:40:b1:db:89:1c:6e:d6:0f:32:e9:
f6:a6:da:85:38:2d:74:03:23:47:fd:8f:fc:0a:b9:f1:fa:42:
81:05:22:dd:6f:27:42:87:1a:f7:4a:22:40:49:44:c5:db:67:
25:fc:63:92:63:a7:6b:2b:ad:7f:c4:16:83:79:82:e9:ed:1f:
6d:c5:25:33:da:3c:d0:57:2e:e6:be:2c:1b:ab:9a:72:01:a6:
bd:b2:52:5e:ce:76:d9:34:af:4c:f1:79:36:17:9d:18:77:f9:
46:6d:24:aa:8d:5e:87:42:c3:b0:bf:9d:8f:90:a9:ff:ad:f7:
b3:0a:df:ad:cd:53:8b:05:b7:38:09:aa:48:89:e1:a2:ab:4a:
3f:08:cc:6b:ca:53:4f:62:28:dc:03:a4:53:4d:2b:2e:5b:c7:
3e:87:69:18:a2:5a:8f:fc:e3:7f:21:a2:93:88:2e:13:c7:29:
8d:5c:c5:8c:c3:d1:4e:fa:50:2b:ac:b0:ad:e2:5e:78:5d:21:
85:a6:f8:b5:98:f4:ec:d4:93:3e:8d:61:c0:a6:72:fc:5b:bd:
2b:3f:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:37 2026 by rpki-client