
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
File: F9E4E14645AE11EF8870C771C4F9AE02.roa (raw, json)
Hash identifier: 92+MCvev4Dufdf+wuDOQcin6Fkp7+RWjlESgBq/RGGs=
Subject key identifier: 9D:E8:AC:D9:B7:F4:4E:C2:D8:F5:FB:FA:C3:EE:45:77:3A:05:87:53
Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial: 0136
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:07:48 +0000
ROA not before: Tue 03 Feb 2026 05:24:23 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 139329
IP address blocks: 103.178.219.0/24 maxlen: 24
2001:df0:3ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Validity
Not Before: Feb 3 05:24:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41e04-e34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:45:3b:55:52:93:15:f9:98:3c:dc:f4:6e:
1f:85:6e:cd:39:d1:28:9b:1f:97:a2:f0:b0:8d:5e:
c6:0d:de:fd:71:79:8c:85:7d:9c:6e:61:4e:91:18:
91:61:71:4b:82:78:ae:4c:c9:f4:f4:7c:a8:35:c7:
a1:34:bb:47:09:8c:d5:fc:a2:3a:a8:65:1c:ea:6f:
d0:3a:48:76:56:4e:93:65:b4:9c:d5:7f:33:cd:83:
9b:85:6e:dc:91:3f:4f:4d:95:4b:9f:a0:49:48:f3:
83:1d:fe:52:74:38:36:d4:46:a7:11:94:09:9c:a0:
bb:61:ae:ec:6e:64:0e:80:f9:40:92:1e:78:c2:f9:
01:d2:39:3a:07:3f:e1:b2:61:1a:2c:39:e1:39:48:
81:7b:58:05:46:ed:c4:28:df:00:eb:6d:16:64:95:
e8:49:b0:d8:14:86:aa:c1:18:d2:b4:0b:3d:0c:ee:
fc:06:f5:f3:15:b1:32:39:84:14:2b:3f:e2:d9:44:
94:0f:20:ea:1e:bd:66:2e:12:51:ca:07:55:4f:1c:
9a:6c:3f:6a:6b:36:ad:c3:fa:ec:e1:92:75:a6:d9:
5f:bc:5e:ce:44:5d:cb:d4:e0:9a:c4:39:8c:98:a7:
3c:09:c5:07:80:64:c2:8e:97:15:3d:54:3b:a1:b8:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:AC:D9:B7:F4:4E:C2:D8:F5:FB:FA:C3:EE:45:77:3A:05:87:53
X509v3 Authority Key Identifier:
keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.178.219.0/24
IPv6:
2001:df0:3ec0::/48
Signature Algorithm: sha256WithRSAEncryption
61:5d:b4:c2:cc:bb:e2:c8:04:fa:3f:48:09:aa:f4:96:d1:32:
45:cf:ff:52:75:d5:12:11:9e:10:5e:b7:24:dd:9f:fb:dc:37:
68:cf:b9:8f:b4:d9:f3:8c:14:fb:9d:7e:0c:88:8a:cd:22:4d:
e1:f6:f2:ce:eb:3c:b7:54:c4:2b:fb:28:7a:d1:af:fd:5f:0b:
98:8b:3b:96:63:6a:ae:48:85:07:10:1d:88:07:16:86:4f:d6:
e4:a7:9c:2d:25:d8:d0:5e:c7:03:a6:04:8f:4a:60:a7:73:59:
48:ce:c7:a3:53:bb:84:9f:43:93:01:f6:df:41:f8:1b:20:4a:
58:5f:e6:a0:8e:d0:37:95:e4:dc:60:87:54:31:33:47:31:5f:
8c:64:e5:e2:ff:e0:86:84:be:10:f7:00:2a:94:36:f8:f7:14:
cc:47:07:22:6f:b0:1f:fe:04:70:4e:3f:96:30:84:f0:1f:20:
bc:bd:98:a7:15:68:ec:3a:b7:5e:ab:96:16:52:1b:8b:f8:9b:
b5:ae:62:a0:b6:1c:54:93:57:79:b1:3b:21:99:16:41:b2:95:
17:44:55:ba:d5:25:c4:83:be:6a:41:f6:0b:ae:b1:f8:8d:bb:
61:e3:82:fc:d6:4b:bb:11:48:1e:54:a6:7b:c2:91:24:26:73:
ab:2a:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:25 2026 by rpki-client