
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/42BEF0C6965A11F089F1E151C4F9AE02.roa
File: 42BEF0C6965A11F089F1E151C4F9AE02.roa (raw, json)
Hash identifier: xbADL7cJr+2vRtqNmInV63ZP0c0h+KFlCiFFTFNf4Uk=
Subject key identifier: BD:E2:AF:71:97:EA:08:2C:DF:06:B1:E3:31:37:FA:07:47:9F:73:19
Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial: 09B1
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/42BEF0C6965A11F089F1E151C4F9AE02.roa
Signing time: Tue 14 Apr 2026 17:22:05 +0000
ROA not before: Tue 14 Apr 2026 17:22:04 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 149311
IP address blocks: 103.134.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Validity
Not Before: Apr 14 17:22:04 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69de77bc-2093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:ab:75:e1:5a:fd:6e:34:63:43:17:1c:70:
8d:ad:21:1a:8f:37:27:04:d7:17:9e:d2:82:ed:c5:
e9:3d:31:36:ba:eb:dc:65:23:7f:fd:a5:ec:f9:ef:
df:d6:48:62:39:bb:1e:d0:c3:7a:33:73:7b:66:36:
f0:82:08:c4:4b:43:87:c8:bd:39:c4:87:f3:19:d7:
2e:ba:1f:bc:11:a1:e0:fa:cf:c9:fa:3c:28:94:7a:
69:20:a9:34:f0:6e:e4:63:e6:08:ba:72:02:6d:96:
3a:c9:31:95:d5:b4:c2:ea:f8:67:13:77:63:02:e5:
2c:56:e3:8c:e4:1d:a1:cb:4a:2b:39:59:94:65:f1:
a3:74:1d:be:75:e5:46:5a:39:80:9c:53:60:b7:8e:
d7:bf:02:47:87:02:eb:1d:04:5f:70:c2:67:67:8a:
05:a9:58:12:04:3c:80:d7:82:f9:d3:0b:23:ac:98:
89:6b:aa:34:10:44:5c:d1:32:0d:b4:0e:ec:29:8b:
77:a4:40:f3:4b:1a:d4:0a:61:ab:ac:1f:ef:f8:05:
44:e6:9b:eb:53:40:2a:52:92:c0:36:c3:14:dd:62:
b3:6b:68:03:db:e3:1b:21:ab:32:f9:a1:f7:8f:02:
82:28:40:11:15:dd:2f:7c:9c:91:53:a8:9e:b3:2f:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:AF:71:97:EA:08:2C:DF:06:B1:E3:31:37:FA:07:47:9F:73:19
X509v3 Authority Key Identifier:
keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/42BEF0C6965A11F089F1E151C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.203.0/24
Signature Algorithm: sha256WithRSAEncryption
36:58:4b:81:7f:ff:99:e2:c7:fa:57:59:46:5d:18:79:67:e8:
19:b5:8c:74:d8:a6:95:d5:1f:90:0c:f1:25:dc:dd:90:dc:2e:
33:ff:85:0a:2c:ab:b9:99:4f:55:e7:b6:64:24:4b:53:5c:22:
ba:b5:a0:78:be:0a:34:f6:6f:3c:9d:38:d2:50:29:54:42:d7:
93:b8:93:62:f4:96:b6:9a:50:1f:09:af:6d:18:b4:99:6d:61:
fd:6a:0c:2b:92:a6:81:d6:b0:db:9c:e7:18:0f:08:6a:61:a5:
10:b7:ab:35:fa:14:49:d8:40:e9:a5:ff:6a:ae:49:99:a6:be:
23:8f:fb:f8:22:21:c6:2a:1a:90:b4:81:ae:ea:90:a6:ee:89:
2e:69:f1:a9:75:b8:f5:bc:45:ac:13:46:68:f1:75:23:bd:35:
57:37:1c:e1:5e:30:f1:cc:48:9b:d2:53:21:d9:51:f1:0f:9d:
ce:b3:b8:3a:93:3a:6f:bf:80:30:57:04:cf:3c:74:a9:08:47:
84:24:e1:9a:f5:b9:94:4d:ed:43:4b:fe:85:a7:c4:34:4d:d3:
1e:78:5f:5f:94:66:39:4d:85:bc:cc:f8:84:21:e4:d4:34:1b:
6b:49:7e:3e:c7:80:42:64:99:13:3d:8c:06:a6:93:ab:9d:dc:
40:03:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:11 2026 by rpki-client