
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/41E03246DA3E11F0A9D9994C8ED3641D.roa
File: 41E03246DA3E11F0A9D9994C8ED3641D.roa (raw, json)
Hash identifier: RSEIybSMpRGlyt7iVSAaODWDkzpxlz37Tk1zS8mwuzM=
Subject key identifier: 24:31:9D:76:FE:11:9E:6D:28:E3:BC:76:32:E4:A1:6A:B5:6C:37:BE
Certificate issuer: /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial: 2B
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/41E03246DA3E11F0A9D9994C8ED3641D.roa
Signing time: Sun 01 Mar 2026 10:28:51 +0000
ROA not before: Sun 01 Mar 2026 10:28:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136177
IP address blocks: 103.83.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Validity
Not Before: Mar 1 10:28:51 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a414e3-83c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:7a:cb:ed:b9:a3:67:8d:66:42:5e:5d:43:
fe:3c:ed:3a:97:48:98:45:64:35:41:a3:26:dd:13:
0e:14:b3:d4:cd:82:65:e4:11:da:ea:a9:2a:97:16:
09:1a:a6:09:46:b6:c3:8d:e2:bc:af:f3:84:f0:bd:
8b:46:ed:03:1a:33:24:6b:67:13:bb:63:37:00:22:
dc:59:51:43:c2:c1:e1:8c:a6:77:60:b2:7a:dd:69:
ba:2a:66:3b:d2:5b:94:ba:43:89:2d:64:c0:b2:9c:
b8:c7:af:fc:19:b8:33:52:96:86:15:85:20:42:46:
66:a3:8e:a2:01:28:40:0b:27:f8:18:36:ea:c5:e8:
70:24:e4:ed:cd:7a:ef:29:3b:66:28:0e:d2:c1:83:
e5:81:dc:e2:87:cf:a8:5e:89:0f:82:cc:43:1d:c9:
4f:e2:ee:ca:40:44:2f:ce:a9:a2:c1:79:74:7f:72:
e8:0c:57:d1:ff:0f:15:b8:7f:6c:88:db:6e:c5:54:
0d:3e:20:fb:e1:e7:07:46:66:72:8a:10:cd:e8:43:
07:4f:f3:e8:3f:92:cd:7b:b6:9f:2f:9a:63:97:53:
95:79:b0:20:99:f4:47:fe:8e:0d:3f:b8:7f:da:a2:
09:4a:8c:cf:17:fb:6a:b9:fc:1c:c2:75:7b:34:f9:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:9D:76:FE:11:9E:6D:28:E3:BC:76:32:E4:A1:6A:B5:6C:37:BE
X509v3 Authority Key Identifier:
keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/41E03246DA3E11F0A9D9994C8ED3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.34.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:25:bd:03:48:32:21:f8:90:1d:06:ce:82:22:78:1f:7a:aa:
83:ae:fe:85:d3:d9:b6:c0:cf:22:f7:61:d9:f8:51:a2:2d:74:
4c:e1:fc:67:85:64:b5:4b:8d:de:cc:ed:9c:84:04:da:34:01:
55:9d:34:d5:c7:70:03:e2:01:ea:1d:c6:95:47:59:6f:f5:e3:
37:44:1f:1d:be:ca:fc:23:bc:2a:88:a3:59:53:53:3d:94:af:
ad:39:5e:2b:22:d3:01:11:9b:03:b9:c6:be:c7:d8:3f:b9:c7:
e3:67:9a:3b:da:9b:97:60:10:7c:17:c6:38:c7:e9:ec:1e:ad:
61:23:df:15:3f:47:64:7b:cd:d3:a0:95:ab:8f:1b:33:23:52:
eb:bf:13:59:bc:1c:98:0f:0b:6b:d1:a7:72:93:87:52:ce:cd:
8e:a9:6e:b4:ce:65:65:af:2d:ee:67:c3:cc:28:35:5f:e6:24:
d5:df:32:20:e4:24:63:3b:61:08:af:3a:a1:b1:8a:c7:af:28:
aa:c3:7e:a3:52:10:a6:bc:81:4f:42:7f:41:da:14:b2:58:78:
ee:14:49:4b:03:35:e9:de:6d:0a:a8:61:81:e1:7f:18:a9:91:
23:dc:31:70:2b:f5:3c:74:2f:8d:a1:46:5b:9a:a5:e6:86:58:
aa:c9:1c:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:44 2026 by rpki-client