
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
File: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (raw, json)
Hash identifier: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=
Subject key identifier: A1:D2:DB:CB:E2:BF:CB:CB:34:A9:93:9E:72:8D:3E:2D:0B:3A:03:A3
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 1495
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:14:59 +0000
ROA not before: Thu 18 Sep 2025 17:26:08 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 23876
IP address blocks: 103.110.212.0/23 maxlen: 24
123.49.43.0/24 maxlen: 24
218.100.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5269 (0x1495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Sep 18 17:26:08 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48223-68bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:9b:d3:b0:90:6f:52:47:23:bb:71:dc:eb:
8f:06:b9:94:f5:d9:5d:84:b0:8e:bd:b2:a9:9c:bb:
ed:b3:4a:47:39:77:4b:bb:23:91:17:5d:28:6e:88:
16:b9:ad:af:d6:26:35:ae:5a:fc:8e:97:88:bb:31:
a4:5f:ce:43:60:76:23:7d:de:70:4e:a6:cd:6d:c4:
1c:de:d1:03:b5:6b:88:53:e0:4e:de:ee:e4:7d:5c:
06:81:32:63:92:e2:7a:9e:e2:96:ca:e1:70:6a:ef:
b6:81:3c:34:a9:9d:c8:b7:99:44:ce:c7:1b:47:68:
cb:ba:79:db:60:b4:e9:05:3c:7b:1d:f6:0c:18:ae:
7f:df:5a:42:29:1e:86:ba:45:c1:8e:6c:4f:1b:54:
d8:5c:0f:b9:eb:35:34:b7:18:b3:6f:24:26:55:81:
61:08:b3:49:46:a1:e6:ad:9e:29:a0:7a:03:d1:3f:
71:56:5c:c4:7d:54:d7:9e:04:57:66:15:ff:23:c6:
38:9d:5b:7f:95:d1:a4:b0:a8:b2:c6:1c:37:06:e6:
94:22:28:eb:01:12:7c:c2:74:24:a1:05:59:b8:43:
03:16:94:b8:3d:ac:32:96:57:64:c6:4c:87:ba:22:
68:97:a7:0e:73:a3:48:f6:2d:a8:33:f9:95:b5:8a:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:DB:CB:E2:BF:CB:CB:34:A9:93:9E:72:8D:3E:2D:0B:3A:03:A3
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.212.0/23
123.49.43.0/24
218.100.37.0/24
Signature Algorithm: sha256WithRSAEncryption
40:62:c7:80:ae:48:3c:fd:1a:bc:a4:93:ad:a0:c3:48:58:aa:
c7:71:63:74:c1:23:07:ce:f0:23:6e:0c:a6:bf:dd:fc:5d:96:
89:e4:e5:09:57:63:7d:2b:19:b9:bd:94:ba:fe:0e:b3:17:2c:
e8:7b:78:1e:36:dd:7e:7f:28:49:24:8b:c0:0a:82:55:4f:1d:
48:5f:73:93:0e:0d:af:db:89:49:0d:e1:d4:9c:b8:76:5b:54:
b6:7b:12:64:06:81:93:07:0c:00:c3:c8:8f:cd:fc:76:5f:98:
5d:0d:81:ef:c0:c7:39:6e:67:df:09:68:0f:50:29:1f:3c:12:
a3:b3:e2:f8:18:bf:06:d9:f4:7e:82:7c:3d:22:c3:d9:6d:05:
85:aa:5c:4f:4f:a2:88:e8:56:bd:5a:74:48:e4:95:5c:0d:cf:
f0:5c:e3:4c:8a:4d:b4:f6:6b:ed:8d:e8:77:8f:c9:9e:b5:8f:
2e:eb:54:d0:92:c5:20:c9:29:2f:d3:81:30:80:6e:43:a2:9c:
82:1d:81:49:2d:b6:79:da:50:a6:04:6a:f9:63:20:82:7f:0f:
6b:ab:c3:5b:56:99:e5:08:64:f9:34:dd:3b:1a:43:1c:8b:f6:
29:48:e0:58:2e:74:e0:18:9d:58:ca:55:c5:1e:6f:19:e1:91:
40:d7:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:17 2026 by rpki-client