
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/7F17B380BED411EBA325CC76C4F9AE02.roa
File: 7F17B380BED411EBA325CC76C4F9AE02.roa (raw, json)
Hash identifier: bKcpZZTwqhEmSY3fiKvwEaekoELTPNXoKQx4Ji8+Zvg=
Subject key identifier: 8C:A2:C6:49:33:F9:02:FA:3A:DB:C1:F0:B9:71:5B:E7:54:9A:52:2C
Certificate issuer: /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Certificate serial: 065C
Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/7F17B380BED411EBA325CC76C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:50:16 +0000
ROA not before: Tue 04 Feb 2025 23:12:45 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137431
IP address blocks: 103.108.104.0/22 maxlen: 24
2402:6540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C02B3, serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Validity
Not Before: Feb 4 23:12:45 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40bd8-0640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:f5:af:9f:67:c7:db:21:7a:bc:1a:29:66:
68:a7:90:1e:a0:a7:a1:32:9b:9d:ac:03:55:1a:2e:
1b:54:de:ae:f9:77:2d:93:a1:a6:75:cb:a8:0d:c6:
9c:05:6d:32:b1:0e:f1:37:cb:e7:ac:6f:df:0b:68:
aa:3c:4f:70:6e:98:5a:13:77:86:99:47:0a:5c:ed:
17:4d:74:cc:f7:ab:78:99:88:43:64:43:7c:f4:c3:
6d:00:f3:4c:47:05:2a:8d:43:12:2f:1b:04:43:fa:
9f:ca:f1:59:43:7f:71:e1:04:ae:b6:5d:36:e1:e9:
7c:0c:1d:94:15:23:f0:1f:f4:ad:b9:ae:1c:cc:3b:
10:f3:ff:8e:93:a5:c7:6a:97:dc:1e:e2:38:24:32:
a1:14:db:b8:69:f2:bf:ec:3c:b0:29:40:8b:3c:bf:
76:c4:a0:4f:bc:6c:de:da:ac:ef:31:51:79:db:bd:
ca:b2:13:b0:1b:43:80:ed:f1:e6:dd:12:45:c0:b1:
2e:f7:99:20:41:4a:ee:cc:d6:5f:f9:4d:fc:4b:f0:
16:27:a7:ec:5e:da:8b:c1:95:cd:fe:ee:33:c8:a1:
3c:0a:4d:ed:9b:bf:36:d6:6b:f9:5e:8b:f7:5d:2a:
55:b2:a1:fb:91:f0:8f:34:53:a0:00:04:ea:e8:67:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:C6:49:33:F9:02:FA:3A:DB:C1:F0:B9:71:5B:E7:54:9A:52:2C
X509v3 Authority Key Identifier:
keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/7F17B380BED411EBA325CC76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.108.104.0/22
IPv6:
2402:6540::/32
Signature Algorithm: sha256WithRSAEncryption
03:a8:11:b4:c4:6d:48:88:45:90:de:9a:fb:c5:9e:8d:a8:4f:
3b:1e:e3:10:bc:9d:07:3a:4a:77:d6:b6:23:55:bf:50:f0:40:
5b:7d:c5:8c:d0:a1:d8:cc:1c:85:47:f2:cf:8b:9e:b4:ed:79:
18:73:6e:64:5e:66:8b:66:4a:ad:9b:82:96:6b:a0:d5:50:cd:
93:4a:8f:e5:61:f2:4e:f9:3c:44:82:21:93:f9:b1:aa:23:a2:
57:e0:33:dd:79:29:a4:a4:f4:e6:9e:0b:9a:8b:8c:f9:34:fe:
07:95:6a:ad:95:47:d7:6c:b5:8e:fd:98:21:d9:17:7c:de:55:
7f:6b:1d:0f:e3:87:54:40:ca:4f:d5:1a:7e:fc:d5:aa:97:69:
af:84:db:19:1e:53:98:a6:2b:4a:dc:c0:01:18:42:29:c5:8c:
e1:17:7f:0e:ad:f7:a2:66:19:fe:b3:21:f0:be:fe:53:58:56:
30:8b:72:2a:97:1d:68:6d:a1:9e:dc:72:e8:4d:c1:7c:38:4d:
2b:82:43:ad:d8:54:a5:74:ce:af:dc:fa:08:ee:52:33:2f:c7:
f3:74:97:28:00:ad:27:f8:b0:8c:86:29:6a:b8:bb:6c:98:9e:
9c:70:69:d3:84:f5:dd:25:e6:99:cf:f1:a2:0d:d1:5f:9d:40:
06:2b:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:22 2026 by rpki-client