
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/EBC23D9A041E11ECA959B779C4F9AE02.roa
File: EBC23D9A041E11ECA959B779C4F9AE02.roa (raw, json)
Hash identifier: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=
Subject key identifier: D6:D0:9A:F1:19:C2:F1:EE:B8:C5:76:02:B9:16:12:DA:2A:86:79:03
Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial: 2540
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/EBC23D9A041E11ECA959B779C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:39:20 +0000
ROA not before: Wed 08 Oct 2025 16:13:34 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 49544
IP address blocks: 43.239.136.0/22 maxlen: 23
103.194.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9536 (0x2540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Validity
Not Before: Oct 8 16:13:34 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44188-b905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:1a:11:00:b1:59:ca:23:ee:bc:5b:80:01:
c9:ed:75:dd:2b:0c:f3:5e:05:ab:6c:7f:7c:f3:79:
5b:46:1f:84:ef:34:b8:cd:9f:73:4c:67:47:2b:1a:
b1:d5:94:2c:af:4c:bd:ec:41:bc:dd:f9:c7:5f:c8:
e6:11:19:d0:fe:d4:7a:1b:71:0e:92:f4:db:3e:c7:
6d:d7:83:fb:bd:b5:05:7e:7d:43:3c:93:75:18:b5:
80:a7:00:9e:46:46:3d:9a:e7:76:bc:75:da:4f:22:
82:7c:56:84:0d:d7:7d:ca:ce:08:3c:87:7f:03:ae:
e2:da:37:67:2a:ad:5d:ed:5b:b2:4c:51:f5:f6:64:
e9:27:51:7c:57:8c:b2:a5:bc:52:b2:62:bc:c2:7d:
1d:bb:ed:df:72:2e:89:3d:ff:49:e3:76:63:56:75:
b2:9d:ee:d1:6c:e4:5b:83:ef:e6:1d:44:95:80:89:
2a:d3:9f:33:02:35:77:fe:8d:1f:80:59:87:7f:55:
90:90:76:96:e8:e1:a6:3a:cf:7f:da:b3:86:c0:1e:
85:a4:8a:3c:95:83:42:be:95:0f:0b:e9:9f:82:c6:
c9:ac:b2:3b:c6:86:7a:31:03:5a:83:fa:06:c2:8c:
02:97:6f:53:e5:d0:fb:44:02:a5:ae:57:10:13:b2:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:9A:F1:19:C2:F1:EE:B8:C5:76:02:B9:16:12:DA:2A:86:79:03
X509v3 Authority Key Identifier:
keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/EBC23D9A041E11ECA959B779C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.136.0/22
103.194.164.0/22
Signature Algorithm: sha256WithRSAEncryption
23:42:96:72:6f:18:6c:90:76:02:48:05:58:d8:8f:91:91:e7:
98:bc:27:26:00:57:66:b0:9f:64:90:6e:d3:3d:be:d0:7f:b0:
13:00:14:50:5a:08:89:22:be:9e:de:da:a5:3c:3a:26:5b:3a:
fa:b4:11:b1:a6:7c:c7:de:16:65:f8:c1:79:77:cb:66:46:ab:
7a:fc:bc:c2:03:6f:3b:81:6a:b4:a4:e7:e5:8f:5c:a8:b2:e9:
72:5d:95:ee:1a:47:91:6c:c5:84:f7:93:aa:44:e5:7c:72:94:
b0:9c:40:33:86:83:a5:d1:fe:e4:0a:7d:75:e6:a9:f0:6d:d4:
f0:d6:24:16:89:2c:c6:1a:65:01:d3:5e:d4:93:19:69:0c:fc:
74:f9:f1:33:d6:99:47:fa:82:8c:be:a8:18:5b:56:e5:ae:59:
8e:2b:7b:e7:51:56:f5:25:48:43:39:d6:e0:6b:6b:a1:8e:14:
e4:a0:63:7a:b2:69:11:42:74:f5:5e:7c:54:a3:fe:c1:ca:d6:
f2:c9:04:00:5e:08:30:90:98:94:dd:e0:e4:b3:97:ff:13:1f:
db:2b:b7:91:58:9d:51:ce:04:33:e9:f2:b3:0e:7d:68:d2:c9:
2c:e9:5b:f4:62:63:4a:69:f5:59:db:9b:b8:37:83:27:0a:61:
7c:43:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:11 2026 by rpki-client