
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
File: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (raw, json)
Hash identifier: nqloee83mYK4LAUWoWj3kE85J21wVy7rJGLqi69BeH8=
Subject key identifier: 96:14:DC:D0:0C:BF:36:09:6D:93:70:63:B1:BE:68:BA:0A:B0:37:90
Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Certificate serial: 0489
Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:49:03 +0000
ROA not before: Thu 01 Jan 2026 00:20:10 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 131284
IP address blocks: 103.133.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161 (0x489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Validity
Not Before: Jan 1 00:20:10 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a45fef-d987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:2a:02:ee:df:ef:04:7c:4d:f1:ff:e9:af:
47:dc:e3:53:0f:64:c5:63:1e:eb:a2:a5:13:ea:91:
ca:44:b4:64:32:f6:f5:32:3b:30:a0:ac:41:b5:d7:
09:da:2a:5f:0a:78:34:56:bc:a4:8f:8d:04:ec:9a:
16:4a:bd:4a:c3:b7:bc:7a:a8:01:bb:3e:c2:b0:89:
c9:f5:8f:c1:ed:49:de:09:0b:46:63:1a:5c:a3:f9:
7e:37:92:e3:85:63:38:c3:31:41:28:b5:72:9f:d6:
30:0c:bc:83:4e:e6:af:04:09:cd:2e:37:40:28:10:
d5:98:77:88:74:8f:1e:a7:04:84:f7:52:ad:d5:aa:
f3:83:e0:4a:88:dd:82:68:c3:a8:85:01:f5:72:c1:
96:64:3f:b8:74:a4:6a:79:be:91:7b:b9:14:55:74:
fb:8d:61:ae:06:69:e6:8f:82:f2:5b:5b:07:cd:94:
10:da:c3:80:e2:00:57:d3:3c:88:82:a7:58:7f:cd:
80:4c:44:1d:8a:04:90:0d:7c:10:14:50:36:62:63:
03:83:00:2f:dd:f5:65:26:09:68:98:af:4a:92:1e:
9f:bf:71:25:f9:95:3a:62:a8:89:c6:d3:a2:c6:81:
6f:ec:d7:4d:46:6a:ab:1b:ca:55:a1:12:4f:84:9f:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:DC:D0:0C:BF:36:09:6D:93:70:63:B1:BE:68:BA:0A:B0:37:90
X509v3 Authority Key Identifier:
keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
97:dc:e3:0a:ad:01:3b:4b:ad:5f:f9:61:29:5f:c2:26:4e:04:
a7:49:85:9c:a2:30:ae:8d:8b:ad:2d:6f:19:0d:d3:24:9c:ed:
93:3b:47:bc:92:7d:2a:03:ba:7a:03:0c:f8:6a:ce:69:f1:af:
9f:97:8b:2e:54:4b:88:9e:72:e1:7f:d2:55:11:b7:a3:25:86:
3a:56:a7:fa:57:ad:b3:fc:f6:37:04:a8:04:13:56:09:06:39:
cd:c2:bb:62:54:16:61:b3:c5:73:3b:4c:52:f9:c3:b2:25:b0:
b9:45:8c:fc:70:3e:af:8d:48:b9:bc:00:5c:dc:90:92:95:d9:
96:81:62:18:00:e0:55:c1:d1:09:66:96:07:b8:51:42:9c:34:
d4:25:23:7f:fc:d6:86:2f:96:01:c5:d6:d2:80:12:57:78:4f:
1e:14:6b:f6:e7:09:d6:00:c5:e4:ba:3d:1b:42:3c:c9:78:76:
22:94:85:4e:13:ed:9c:e8:1a:e1:06:52:73:4c:85:33:c2:47:
d0:52:b7:d0:d4:1a:79:d6:65:76:50:3d:dc:cc:3b:45:63:0a:
13:43:ba:36:20:2d:41:00:be:01:ee:e8:20:91:1f:9a:dc:4b:
20:9d:f2:79:b2:ae:2b:41:02:b1:d4:1b:d4:6c:2d:aa:b4:8a:
7e:9a:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:26 2026 by rpki-client