
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/43C84B26BD0911F1AB7F27F74411F970.roa
File: 43C84B26BD0911F1AB7F27F74411F970.roa (raw, json)
Hash identifier: 5aXrUltK1sbllWaVM7r8xf99zFl7dor6gpvf7fFfZ14=
Subject key identifier: 37:86:53:36:A0:93:82:8F:7E:B7:E1:5B:ED:CC:6E:EB:62:B8:0D:ED
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 0656
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/43C84B26BD0911F1AB7F27F74411F970.roa
Signing time: Wed 30 Sep 2026 19:58:12 +0000
ROA not before: Wed 30 Sep 2026 19:58:12 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153641
IP address blocks: 103.167.162.0/24 maxlen: 24
103.167.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Sep 30 19:58:12 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6abd69d4-d629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:a8:fd:48:3f:b5:f5:50:a2:24:a4:66:a0:
48:42:2f:25:03:b4:24:19:26:b6:9b:c4:7c:7a:c0:
59:8b:90:27:73:7d:28:0e:2b:f0:16:dc:df:55:e3:
f6:2a:7e:fa:d1:58:15:a2:0f:b3:d3:30:d0:1c:06:
c1:41:39:3d:ae:41:95:4a:e3:80:32:ff:12:7a:fc:
0b:93:63:30:9c:81:04:dc:5e:61:ca:af:71:9f:df:
ce:00:df:3a:bd:95:ab:2d:e3:84:90:99:cd:05:c9:
64:01:89:c3:a9:b0:41:92:13:ec:fb:69:de:e4:14:
e3:d6:2d:24:51:d3:b6:82:d1:01:4c:55:11:c4:15:
10:82:ac:b1:88:88:5b:c3:10:aa:e3:c1:d5:b2:53:
f9:8d:7a:fd:84:e3:39:24:e6:96:3b:e8:49:af:22:
a2:7b:fd:e1:8d:a7:13:b8:5b:b4:40:43:c3:a0:d5:
70:0e:f5:03:aa:f9:c3:e7:99:db:80:4d:fe:3f:fa:
ed:db:90:3e:23:15:3a:64:e3:90:30:81:4a:c9:d3:
7f:d6:5c:72:26:17:e8:2b:c6:9b:d9:9b:b1:85:70:
e6:ac:d5:f8:f6:c9:bb:c3:d1:12:80:07:1e:5b:a5:
46:0d:56:e5:f9:3c:66:af:9a:33:8a:2a:d3:e2:50:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:53:36:A0:93:82:8F:7E:B7:E1:5B:ED:CC:6E:EB:62:B8:0D:ED
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/43C84B26BD0911F1AB7F27F74411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.162.0/23
Signature Algorithm: sha256WithRSAEncryption
90:9c:e3:8b:86:b9:6e:a3:ad:4e:14:54:79:6d:d1:da:1b:dc:
f2:f7:0b:9b:18:c8:77:8f:00:b1:f5:13:2b:4e:68:1c:92:45:
15:86:ad:11:b4:4f:9f:28:60:74:6e:40:54:64:fa:91:18:69:
d8:ad:45:a8:5e:e2:1c:fa:b8:5a:ed:af:dc:21:1a:20:8e:c4:
5b:77:56:99:d0:50:3c:44:72:9e:7e:03:4c:de:47:d8:f5:28:
e6:f9:84:d1:42:b0:2d:8c:42:88:6a:2d:9c:a4:9c:70:08:94:
d5:4c:26:51:17:dd:57:b7:06:96:c2:42:6a:6c:79:9e:da:be:
07:d5:93:a9:4b:d7:98:89:f5:41:5c:8d:76:a5:1b:86:a4:41:
d7:a2:4a:da:b8:69:b1:f6:b2:fa:32:76:b2:d1:24:06:33:ba:
5c:f4:84:46:f9:d7:f7:b7:7c:c3:92:38:43:5d:db:90:02:b7:
59:56:21:99:52:d5:25:bf:0e:9b:5b:8c:78:c4:e4:5b:f2:81:
37:34:6d:24:f8:6c:6f:d0:ce:d5:d2:24:0e:d2:f4:02:cc:74:
d0:c3:24:9d:95:f5:ad:b6:4d:54:1a:b2:f7:1c:ec:8e:c4:35:
0d:3d:d8:66:00:a3:c0:08:b1:66:24:77:21:01:2f:1e:c9:a0:
eb:4a:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 14:01:58 2026 by rpki-client