
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa
File: 9F3A919468D811EFB2FE405FC4F9AE02.roa (raw, json)
Hash identifier: GK0larljqDnIZSIDwqWiFQo4BToMGpYrvOsSZwaLGDI=
Subject key identifier: BD:10:84:68:96:28:14:D8:68:B4:8D:C5:33:AA:A6:A6:26:D8:7D:DF
Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
Certificate serial: 3613
Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:23:41 +0000
ROA not before: Tue 04 Nov 2025 14:30:20 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 131611
IP address blocks: 203.203.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl
rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13843 (0x3613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
Validity
Not Before: Nov 4 14:30:20 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4842d-4a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:90:6c:82:34:f5:f7:ee:29:5b:c4:34:8d:
d6:02:07:4d:ac:d1:40:19:e0:ff:27:8c:e0:ea:23:
63:01:0e:d9:96:e3:b6:57:76:e9:24:9f:d4:b7:89:
9f:96:0c:f6:0f:44:17:17:f0:ec:74:06:9a:1c:b4:
7b:8e:c3:64:3f:ce:dc:63:32:12:11:c6:f0:bf:7d:
de:9e:de:70:32:92:d8:3f:ed:23:4f:4b:52:1c:20:
23:c4:c9:03:0e:c4:77:2b:1e:48:77:79:6c:9e:88:
41:72:37:df:eb:a4:85:17:d2:13:2e:fe:e9:ae:9b:
ee:4f:20:ed:22:1d:c1:b3:64:a1:6b:c8:b8:c8:fe:
0b:da:f6:35:6e:3b:44:34:32:24:51:3a:fa:ab:89:
a7:7d:6f:0d:27:ff:b0:26:e6:f4:0a:db:bf:ab:eb:
99:45:32:3e:38:b9:af:6b:a1:72:72:66:1f:36:e8:
bd:6f:db:db:fd:98:25:17:20:01:06:63:be:9a:fb:
8a:a2:73:fb:7d:3d:8e:59:88:a3:d4:e2:a8:2c:04:
c0:ba:84:a0:37:53:e5:cc:34:d6:3c:c9:df:31:33:
b7:f0:18:15:04:83:ac:e1:94:ff:3d:dd:05:9d:8b:
7f:74:41:6b:5e:19:9d:87:aa:6d:0b:52:4c:33:ef:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:84:68:96:28:14:D8:68:B4:8D:C5:33:AA:A6:A6:26:D8:7D:DF
X509v3 Authority Key Identifier:
keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.203.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4d:a7:54:25:14:9a:73:78:13:41:91:2f:5e:5b:b4:e2:2c:fe:
92:a0:94:5a:0b:f7:ab:00:43:2f:93:55:e7:cb:fa:b1:42:8e:
ab:21:e7:60:58:ee:04:ff:7d:36:b8:32:46:6b:c0:77:ae:85:
cb:c0:e1:d3:94:d2:df:c3:b3:e3:f5:7b:9f:b1:0c:88:6f:7c:
ca:2f:9e:75:f2:e9:52:3c:74:09:b1:bb:b1:3d:d0:91:98:60:
1b:2e:8c:6c:95:7c:95:94:7f:56:72:13:f8:6d:b4:23:61:74:
91:92:2c:93:18:e4:25:04:c4:52:29:88:57:9c:4b:71:86:65:
66:c5:c6:35:d7:b3:89:43:fc:ec:47:78:27:c4:2d:24:48:33:
13:06:f0:00:51:74:38:86:8a:e0:3c:f4:aa:a5:24:a9:37:7d:
da:be:63:17:a7:1d:cd:03:e4:c0:f4:8b:97:8a:a8:5b:99:90:
47:7c:10:c0:a7:45:34:37:6c:32:3e:07:b6:8c:96:ee:4c:fd:
d3:cf:b8:00:97:0c:a5:ea:b2:84:ee:35:4c:df:90:5e:29:63:
b6:7e:db:51:a5:a7:09:f3:9b:f1:6f:ce:69:bc:52:88:ee:68:
fe:f9:4f:76:16:43:08:22:28:c9:ac:64:be:4c:e3:01:04:11:
7b:4e:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:44 2026 by rpki-client