
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa
File: 371059F4B8A311EEBDA30041C4F9AE02.roa (raw, json)
Hash identifier: OQdS0MqbomscJ7LmPYlCtNKMF+iUt0AL2oWOEgu1PX0=
Subject key identifier: 20:F2:9C:5D:3B:F5:5E:EB:B0:21:F4:6F:10:9D:BA:0D:ED:61:68:2F
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: 01AE
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:07:02 +0000
ROA not before: Fri 05 Dec 2025 02:12:38 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 148973
IP address blocks: 103.175.26.0/23 maxlen: 23
103.175.26.0/24 maxlen: 24
103.175.27.0/24 maxlen: 24
2001:df0:5a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Dec 5 02:12:38 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a439f5-5211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:9f:72:a8:af:d1:79:f1:8b:1e:78:23:d1:
c4:13:77:ae:ba:44:61:96:8a:71:11:71:ce:b6:3f:
1a:34:eb:05:e3:81:a0:1a:68:1c:67:83:ea:06:f2:
b1:13:6a:79:24:ea:f0:7d:70:35:ec:a4:b5:ff:12:
3d:77:66:ea:eb:36:b6:9f:2c:d3:20:8c:9d:60:10:
f0:2f:fe:21:7c:4d:71:7b:0f:81:13:9e:df:6b:03:
c8:18:32:99:33:c4:65:28:fd:87:5f:a8:d0:ee:f4:
21:60:03:30:e2:f1:e8:80:92:7e:16:1b:05:6f:09:
f9:c7:ee:2b:73:e1:9f:43:fd:99:13:eb:be:34:ee:
72:a9:1b:58:81:ec:0a:15:6c:6a:69:ed:fe:f9:29:
af:80:71:dd:fb:d7:bf:90:22:f6:c0:af:20:ec:f7:
78:ef:ce:19:1c:c7:cf:4f:be:58:00:be:a5:2a:bf:
1a:a0:73:dd:0d:33:a7:74:63:99:87:c5:ac:6e:28:
75:40:66:d7:93:9d:f4:20:6d:43:f6:78:03:27:21:
6b:cd:11:1a:1a:24:32:95:39:88:fa:c9:cf:6f:39:
be:22:be:23:44:f2:0a:de:1f:bc:33:93:36:9e:66:
2b:d5:e9:c6:a3:47:20:6f:40:29:1c:95:d0:d9:19:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:9C:5D:3B:F5:5E:EB:B0:21:F4:6F:10:9D:BA:0D:ED:61:68:2F
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/23
IPv6:
2001:df0:5a40::/48
Signature Algorithm: sha256WithRSAEncryption
53:e0:69:74:40:2b:66:b2:b4:4b:41:4a:f5:5f:e4:a0:98:a9:
cd:fe:9e:f9:1e:45:c2:7b:f9:75:13:43:bb:7b:0e:df:01:1e:
5f:0b:f0:3c:78:76:c8:39:91:fb:d2:34:1f:98:b6:16:36:55:
f2:5c:d6:c5:02:e3:7e:bf:cf:57:fb:e5:1c:27:56:1f:c9:9d:
8c:d4:b4:b6:55:b2:2b:af:bd:c3:42:f1:31:60:9e:09:c8:1c:
7e:35:3f:22:4c:5e:f3:4a:8b:61:8e:92:26:08:0d:64:31:7c:
da:46:ec:b8:e2:0d:eb:a9:9d:50:09:e6:f5:22:01:64:5c:35:
3e:58:79:3b:8a:17:c4:cc:15:80:4d:29:20:d6:9e:7a:46:eb:
1b:3e:28:a3:9f:3c:90:5e:24:8e:0d:fa:2b:64:5c:65:3a:13:
e3:f3:5c:57:97:6b:56:1d:63:07:30:eb:5a:8e:d4:b1:27:be:
97:04:ad:96:8e:65:14:a2:58:1f:fe:e6:5b:02:6b:4c:f8:c7:
fa:cc:46:3c:0a:f0:69:66:af:86:29:ab:58:1f:bd:6a:16:0f:
70:d7:e4:1b:25:2d:a4:17:8f:0b:6e:8b:ba:71:f0:6f:33:60:
ab:91:2a:33:f9:52:e2:06:e8:de:c5:68:a6:0d:ed:ed:01:5d:
4e:a6:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:15 2026 by rpki-client