
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/F8400A20C80811ED9ADBA05EC4F9AE02.roa
File: F8400A20C80811ED9ADBA05EC4F9AE02.roa (raw, json)
Hash identifier: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=
Subject key identifier: 38:D2:85:C3:8A:7F:EE:C7:6B:4E:41:B7:1A:E6:14:B5:D3:89:E8:CC
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 03FE
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/F8400A20C80811ED9ADBA05EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:31:10 +0000
ROA not before: Sun 15 Feb 2026 00:21:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134599
IP address blocks: 103.177.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Feb 15 00:21:16 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a477de-cfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:45:07:34:f2:b1:d7:83:02:2f:98:64:a6:2e:
81:b6:b1:21:a3:18:29:3b:1d:26:cd:f3:9a:e5:e3:
51:8a:e2:70:e3:15:bc:57:71:82:e7:b7:21:05:8f:
1c:37:a5:73:04:7b:06:13:bb:8f:af:ed:e7:e1:eb:
a3:0c:46:9c:33:8d:7f:0d:98:71:c6:93:e9:a9:11:
69:d7:d6:af:87:fa:cd:fc:fd:8f:2b:71:9d:8a:d5:
6e:27:3a:95:e7:59:96:07:2e:81:00:2e:ac:44:75:
a0:49:9f:1e:fb:8d:7c:34:96:56:c0:bc:94:9a:95:
9c:ef:69:fb:c3:a3:97:e7:99:6e:2e:80:db:b6:b1:
e9:72:93:3e:4b:54:04:df:6a:fb:7f:03:ee:c5:6b:
4b:16:5f:ee:59:22:e5:56:c9:3f:1d:bf:a2:2a:82:
9b:b9:6e:ed:14:4b:d9:ad:8e:c6:cc:16:50:a6:fd:
7e:5a:42:d8:ed:27:5d:34:77:f1:6b:e7:2a:69:c8:
26:ef:96:1e:32:a6:7c:64:42:86:37:12:35:07:1f:
da:26:31:61:29:05:3a:10:e9:93:2e:2d:01:54:b2:
1a:98:64:19:90:c3:a4:50:b2:81:b3:1d:fb:00:16:
e6:ce:ae:b9:e0:c9:a8:2d:61:63:1c:d1:65:0a:e2:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:85:C3:8A:7F:EE:C7:6B:4E:41:B7:1A:E6:14:B5:D3:89:E8:CC
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/F8400A20C80811ED9ADBA05EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:76:9e:30:8b:35:0e:da:42:e4:2d:e5:88:26:e6:5b:fa:17:
72:6e:c8:42:09:de:8a:c5:eb:ee:89:60:cc:57:2f:f2:5a:7f:
92:71:d2:62:67:06:98:da:ea:cc:75:8c:96:d8:f1:26:fb:90:
29:d4:7a:63:a9:5b:8a:2d:cf:a6:33:7e:08:51:b1:01:cf:d8:
72:f8:d7:ce:8e:1b:1c:7b:8b:5c:a4:1f:17:f8:2f:b2:e5:8f:
76:79:2f:a9:22:9e:fa:0c:e2:d5:ae:73:3d:f2:d2:59:92:57:
ba:80:73:3b:a7:9f:65:3e:ec:54:96:ad:d6:99:43:8e:2e:44:
d5:be:69:d9:72:58:c0:66:c8:94:3d:b8:44:b5:87:7d:37:23:
99:a6:9f:4a:86:a2:0a:cc:59:ed:28:5b:1e:7f:f0:ef:c7:23:
53:b7:9b:0e:0f:b1:53:7d:80:d9:15:8a:dc:2c:af:c5:16:0c:
72:13:69:21:c8:f9:c1:55:f7:70:69:43:42:15:e5:d2:8e:2e:
00:6e:91:2f:7e:69:9c:26:fe:63:1d:b3:37:07:e7:b0:d3:f4:
1d:28:6a:a7:9f:9d:59:86:31:a2:bc:a6:74:6d:e5:b3:de:80:
87:ec:ce:63:87:e3:08:25:cc:f0:23:94:79:cb:4e:fb:ac:1b:
3f:39:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:47 2026 by rpki-client