
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/47C07DB84F9C11ED8B9E4333C4F9AE02.roa
File: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (raw, json)
Hash identifier: nElsT+N/MIrrr9qtcoSmG1v+rPEG+QrKjb++ePTIoWo=
Subject key identifier: 13:9D:D9:AB:F2:0C:56:AF:FF:23:54:2C:86:DD:80:EC:08:22:12:05
Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Certificate serial: 0320
Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/47C07DB84F9C11ED8B9E4333C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:05:34 +0000
ROA not before: Sat 07 Jun 2025 02:00:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 23966
IP address blocks: 103.189.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800 (0x320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Validity
Not Before: Jun 7 02:00:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42b8e-7a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:85:9c:4a:90:55:05:20:01:bb:09:5a:1f:
6f:55:99:12:86:b9:6e:1f:f0:09:67:8b:f9:2b:14:
b1:24:46:d9:ba:82:b6:ea:01:ff:ae:70:c5:60:c4:
9e:b5:66:1a:f2:4d:6d:eb:02:73:59:de:57:c5:5d:
9a:05:42:3f:c6:54:29:3e:92:19:7d:29:76:a9:1c:
97:33:07:1e:85:80:a6:90:bb:36:65:b1:c5:f8:84:
e6:cc:db:dc:ac:ab:13:29:67:c5:bd:4f:a3:56:5f:
9b:3c:de:7f:b7:37:db:f3:18:8d:00:55:5a:26:7d:
03:6c:f9:00:28:cd:2d:e6:39:54:01:64:15:ce:b0:
dc:ce:40:38:f8:04:3c:33:b2:4d:43:3d:60:63:f9:
ee:67:12:2a:0b:9f:6c:6c:f1:25:db:f5:23:e9:36:
91:0c:71:a8:c4:54:a3:8e:78:c1:15:ac:84:52:6b:
b4:1b:1b:aa:3a:f3:68:f1:43:7c:ac:fc:92:89:3a:
5b:ff:0f:38:97:ce:d2:bd:0b:27:3a:60:1c:4d:07:
ed:2c:49:0c:35:83:41:b3:c1:7f:e0:91:3d:1d:10:
ab:f8:a1:ea:02:9b:8d:23:f4:5b:8e:a5:2b:39:9e:
07:2c:91:9e:93:82:d4:dc:9c:e8:f0:b8:16:65:9c:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:D9:AB:F2:0C:56:AF:FF:23:54:2C:86:DD:80:EC:08:22:12:05
X509v3 Authority Key Identifier:
keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/47C07DB84F9C11ED8B9E4333C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.2.0/24
Signature Algorithm: sha256WithRSAEncryption
09:49:5c:8d:c8:67:e9:72:79:0b:23:24:6b:5c:1e:5a:4f:39:
35:ba:f9:40:f9:3b:b1:37:2b:83:31:71:f7:a2:60:2b:02:bb:
ce:d8:7d:be:bf:8c:96:48:5f:c2:50:5d:5a:c6:95:ba:b5:20:
0f:ed:77:7b:e6:23:01:a2:27:32:0b:0b:a9:60:f1:f0:5f:18:
36:e7:b9:3b:6b:89:70:65:08:d0:ec:ba:d1:2a:29:94:2a:fe:
dc:af:37:b6:42:cd:99:1b:e2:d8:49:ce:30:ff:5d:b7:46:ea:
33:89:a7:11:3f:60:cd:dc:c0:8d:a7:f6:8c:29:8f:b7:4f:78:
17:1a:ff:e0:26:c2:fa:68:df:2b:a4:3e:a4:7a:9c:45:2d:39:
20:46:8b:7e:9c:79:72:53:3b:78:0b:b4:73:bd:6d:57:69:ab:
f6:eb:5d:27:d3:ff:fc:cf:45:a5:ee:33:5d:ae:23:57:33:ca:
9f:65:b0:42:8a:76:92:27:58:81:1e:be:87:5a:dd:d8:d6:6a:
fe:be:d6:db:ce:4d:24:69:49:e3:0f:03:e6:23:fc:46:14:6b:
30:19:76:d8:63:9f:22:89:a8:22:d2:c0:2d:ee:2c:d4:81:14:
06:ed:bf:1c:d2:e0:f1:fe:f1:3a:3c:20:7d:74:e9:d4:71:af:
90:11:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:03 2026 by rpki-client