
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/BAD2356E153411E892E6D468C4F9AE02.roa
File: BAD2356E153411E892E6D468C4F9AE02.roa (raw, json)
Hash identifier: Uh0ufQqszTK1hbj5HShNIOMuiOfZ3FBUNVqfFJVggoM=
Subject key identifier: 67:00:EB:C3:67:A6:B7:E3:B2:59:E9:3D:FE:71:5D:2B:60:D4:81:8B
Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial: 1752
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/BAD2356E153411E892E6D468C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:55:47 +0000
ROA not before: Wed 14 Jan 2026 17:14:15 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137244
IP address blocks: 103.105.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5970 (0x1752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Validity
Not Before: Jan 14 17:14:15 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a46183-a755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:93:56:3e:76:cb:83:69:e3:55:7f:b1:03:
d7:2f:82:16:75:14:1c:de:fe:e4:fa:57:53:b3:08:
b8:c0:fe:89:0b:b4:61:e8:c0:44:bb:65:19:b2:98:
e4:df:af:f0:c0:09:15:ec:17:66:90:6f:85:96:f0:
a1:54:f9:16:b8:fd:39:6a:c3:33:65:2e:4c:a5:b6:
7b:01:75:8b:64:46:0d:1e:70:1e:64:8a:27:80:05:
c5:2c:69:03:1d:6a:14:22:cf:62:a7:50:c1:8f:e7:
39:62:4c:09:8d:8c:a1:4a:d9:f2:8b:d4:b2:e7:03:
54:b8:b5:d3:c6:c3:92:83:7b:5e:ea:94:69:f4:3a:
65:6a:8a:36:13:bf:f2:2c:00:e4:3b:a7:49:d5:fe:
4b:18:8d:66:7f:9c:85:bd:46:cc:e8:79:cc:3e:5c:
f3:0e:af:1d:cf:dc:82:4e:22:f2:ce:24:4d:96:77:
5a:73:c4:00:87:cc:cf:8f:82:22:0b:71:62:01:36:
1c:8b:b1:f5:21:35:d2:be:80:a1:79:ef:b4:c9:2f:
17:b6:07:b6:ff:a5:d5:ff:60:c3:26:0f:ce:2c:ec:
f3:6a:14:23:18:e8:14:69:69:ab:5d:f2:42:cf:17:
93:12:92:5e:e3:d4:1f:c7:4e:78:7d:22:a0:77:df:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:EB:C3:67:A6:B7:E3:B2:59:E9:3D:FE:71:5D:2B:60:D4:81:8B
X509v3 Authority Key Identifier:
keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/BAD2356E153411E892E6D468C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:35:7a:e7:6e:c1:68:15:41:e2:07:f0:23:6f:d9:5f:3a:a6:
89:a8:a6:41:2a:13:fb:92:18:de:16:16:cb:d9:3e:78:47:03:
f8:d2:4a:e4:e1:c1:3a:9d:7d:40:0a:c1:38:d5:c5:f2:6c:90:
31:0e:09:84:93:0a:17:fa:37:ee:66:d9:e9:87:c8:9b:88:26:
e4:55:aa:e2:49:c3:b1:28:a8:e0:3b:12:35:06:42:61:ed:6f:
3f:1d:0a:d7:15:ae:48:8f:99:a3:ca:1c:0e:b7:37:d7:0c:f8:
34:5a:74:71:36:a1:d8:98:5e:64:f2:55:95:34:07:4a:b2:8f:
d3:25:92:e3:8d:90:ab:d5:43:2c:45:4c:9b:eb:cf:31:ed:0c:
ae:1f:85:a4:9a:47:9f:4f:30:b2:01:ca:5f:36:b5:e0:17:52:
62:2d:33:96:12:5c:e9:b0:fb:b0:c3:91:94:c7:f3:b8:89:5f:
ec:41:fa:a9:f3:20:25:05:40:25:5e:d3:c4:00:68:3f:54:d4:
55:5a:e0:f0:7d:e1:a3:08:2a:97:69:35:e2:6d:1f:44:4a:cb:
4c:39:d9:7b:79:12:91:1f:c5:bd:da:0d:55:08:fe:ac:e3:1e:
82:43:1a:89:31:44:08:39:03:7e:63:cb:0c:63:91:3e:7a:89:
b0:32:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:02 2026 by rpki-client