
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/3B4BB0AAFF8111F0BED16FE95C6F56BC.roa
File: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (raw, json)
Hash identifier: xT4ltQ0fqXtOZbKoSwpsdMTsY3mOeI0/8WHutWp7LmI=
Subject key identifier: 55:68:9E:0A:50:66:42:58:6A:C5:42:E3:0C:92:35:B3:B7:56:91:2A
Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial: 0995
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/3B4BB0AAFF8111F0BED16FE95C6F56BC.roa
Signing time: Sun 01 Mar 2026 19:18:13 +0000
ROA not before: Sun 01 Feb 2026 15:18:16 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152176
IP address blocks: 103.134.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2453 (0x995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Validity
Not Before: Feb 1 15:18:16 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a490f5-24bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:f9:e8:e1:40:ce:cb:95:9a:61:a5:86:1a:
e3:e5:69:4d:4e:07:c1:cc:96:6c:52:f6:9d:1a:52:
c0:56:1c:29:6c:a0:1c:6f:c4:b3:33:de:2e:71:1f:
79:a4:0b:0f:4c:21:a1:6f:73:8e:29:c3:e8:38:1f:
a8:5d:61:b6:72:b1:d7:8b:4a:36:db:4a:c4:d0:e7:
ed:e6:75:cc:8c:71:41:ac:7d:af:dd:5c:e8:46:a5:
05:92:d2:9b:96:2a:a2:c1:f3:de:e4:1d:50:a8:ba:
65:5f:e7:18:99:77:02:e4:cc:10:10:ee:68:69:ba:
f7:78:81:39:00:c5:73:4e:9f:7a:24:14:5b:46:db:
68:b2:cc:1a:3c:f6:8a:b0:e2:09:af:e9:7b:8a:15:
d1:f7:56:5e:42:dc:9f:80:78:9c:50:ab:ab:f0:5a:
99:93:ab:d4:c2:6a:1c:5a:a1:d0:5a:03:5e:99:20:
e3:62:93:df:34:44:d6:67:ee:3d:92:82:03:bf:42:
b2:e6:88:69:f2:cc:7a:78:e3:e1:1e:5b:fb:ed:78:
8a:d4:c1:15:1d:83:d1:29:a2:52:1a:75:6d:b5:27:
b4:2e:f0:5a:d5:76:f2:2f:03:e0:6c:22:1f:62:32:
24:1d:29:9d:75:16:10:c9:d0:29:3a:51:f6:80:02:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:9E:0A:50:66:42:58:6A:C5:42:E3:0C:92:35:B3:B7:56:91:2A
X509v3 Authority Key Identifier:
keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/3B4BB0AAFF8111F0BED16FE95C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.202.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1d:62:c0:ce:81:a6:aa:b1:83:28:7e:8a:7c:8e:47:1b:6d:
52:9c:ab:db:14:e2:25:dd:1d:4e:e6:e0:4e:ab:72:d0:36:2b:
36:23:25:14:cd:5e:66:73:ea:a4:45:37:4f:3f:d5:fa:1d:e3:
47:5a:63:1a:a3:08:33:28:aa:15:d7:ef:8b:45:03:c0:6d:71:
6e:55:75:b0:48:a6:f5:59:84:62:a5:32:3e:2d:13:6d:80:3b:
53:66:0c:18:ef:a8:01:c8:67:fd:47:56:c9:5a:82:44:37:cc:
aa:18:c3:a7:b3:74:89:a3:da:88:87:b1:4e:72:dd:bd:a9:9b:
3b:a5:6e:88:4c:ce:8e:9b:ca:95:6e:93:a4:de:02:85:8c:67:
74:8a:36:ef:eb:17:dd:30:9f:48:c3:ba:23:bb:f8:98:17:8b:
d3:97:0b:72:a8:13:d8:7c:8f:f9:4c:11:7c:1c:76:12:a0:f3:
9e:c5:46:0f:73:b2:ca:fa:41:d8:73:8b:10:81:14:4a:a8:1a:
93:f2:fb:8d:5e:3d:0a:54:92:8a:a3:45:0d:f2:13:1b:2c:f9:
5c:85:b0:91:22:fd:87:5d:9a:7c:f0:39:8a:ae:71:7e:ee:a9:
2e:f3:21:98:0a:63:5d:03:94:a5:3c:10:ba:3c:d2:82:e4:cc:
18:3b:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:26 2026 by rpki-client