
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
File: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (raw, json)
Hash identifier: 0Sdkpie+7gAg3O3unZJoDbb5tUYnJKsnlgFztV27JM8=
Subject key identifier: F3:FA:35:DC:60:AF:DE:A2:42:53:E1:09:F0:44:9A:1D:6A:D1:6F:4F
Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial: 0252
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
Signing time: Sat 11 Apr 2026 02:34:54 +0000
ROA not before: Sat 11 Apr 2026 02:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139009
IP address blocks: 103.244.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Validity
Not Before: Apr 11 02:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d9b34e-7523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:fd:d6:7c:1c:b0:aa:bd:ae:17:65:4a:e8:
15:e2:a9:62:ef:cf:0d:ba:4a:95:ee:fa:b9:69:8a:
04:e4:78:34:b6:29:51:0c:56:c2:7d:a6:ef:dd:33:
3b:e3:a3:27:e5:4e:d0:cb:46:3b:a2:b5:e3:28:24:
fd:7d:c0:3f:16:ef:19:e7:36:f4:ce:50:1f:8f:5a:
57:ae:79:3c:8f:d7:5c:29:5c:45:f0:42:fb:ba:75:
82:0c:87:e6:ab:69:5e:7a:df:73:14:6f:35:3e:34:
1c:9b:61:85:c8:a6:31:59:b4:11:87:88:c1:b2:7c:
15:9f:a1:63:2f:86:c6:dc:96:a5:fc:55:ed:2d:6a:
b1:38:f6:50:e7:f0:f6:03:0d:59:84:6e:75:69:4d:
8c:78:c6:89:33:21:c2:8d:c6:d7:dd:e1:38:d3:4a:
15:e4:79:b0:27:32:e2:0b:a4:41:a8:2a:e0:f0:d2:
4e:55:49:32:85:a1:52:df:4f:16:a7:77:50:77:b1:
34:43:fa:db:9f:27:dd:0f:43:6d:00:48:ce:a2:7e:
db:69:10:39:fe:88:23:c3:d4:7d:75:6c:00:4c:5a:
5b:5b:a8:93:f8:f7:33:90:d0:fc:d1:ae:07:82:ab:
89:8d:3a:0b:45:94:78:57:30:87:ca:91:41:a2:5d:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:35:DC:60:AF:DE:A2:42:53:E1:09:F0:44:9A:1D:6A:D1:6F:4F
X509v3 Authority Key Identifier:
keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.244.49.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b7:a3:41:80:df:48:8d:9e:d1:72:dc:04:40:9b:95:24:20:
b3:41:23:04:88:6c:4c:a9:ac:50:01:2a:db:a7:71:ee:eb:f4:
8a:60:45:8f:6d:5a:35:8a:55:b2:95:ef:71:42:1b:21:fe:86:
23:7b:f2:01:74:04:c1:97:7d:03:71:b2:9a:56:51:0d:58:ff:
61:8c:76:79:5b:36:03:6d:ad:b8:6f:3f:db:d5:54:61:62:63:
7f:60:59:fc:de:a0:16:33:f8:ce:29:38:29:96:f7:0d:8b:fc:
08:c8:56:d9:4d:01:3e:8e:54:0c:1a:4b:36:12:b8:13:08:5c:
74:d7:d6:f1:32:32:d0:9d:21:6f:f3:b2:24:57:50:82:21:e4:
a1:a8:94:7d:6b:ed:5b:5e:58:7f:77:be:47:5d:e1:32:6e:7d:
ad:87:de:3c:c5:f9:64:1b:2d:2b:19:4a:e2:4d:64:33:c0:e1:
34:2b:d0:43:3b:dd:52:9a:a9:e3:51:51:51:b0:1e:73:17:b2:
8f:a1:ce:8f:d0:35:b7:29:3b:bc:d7:d0:40:72:38:25:3f:41:
e8:fd:3d:f9:3a:55:6f:6b:c8:26:b6:86:c9:77:a0:d4:ac:2b:
1e:6e:49:96:44:6f:03:d3:af:ad:52:9d:9e:c5:d9:f1:5d:81:
e4:74:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:11 2026 by rpki-client