
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa
File: B9F821D4462D11EC93DFE63CC4F9AE02.roa (raw, json)
Hash identifier: yi0VgSAjN66gkJV+9wYc7yVlKd9e31O0j4BnGT3v/0c=
Subject key identifier: 36:EB:4B:56:E8:C7:8F:54:6B:35:A2:07:82:F8:8F:FA:2C:07:56:E1
Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial: 1209
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:36:32 +0000
ROA not before: Mon 06 Jan 2025 17:45:32 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 63889
IP address blocks: 103.127.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4617 (0x1209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Validity
Not Before: Jan 6 17:45:32 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69a44ef0-bad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:ee:d7:70:42:f8:a4:ff:0a:50:7a:17:4e:
ac:37:6b:7a:86:ad:60:44:20:96:4f:fd:99:56:47:
12:4e:58:2c:22:97:fe:ff:43:5a:16:20:9c:63:d4:
4e:ec:44:ca:56:24:37:c2:56:50:2d:3a:f2:f5:14:
ec:9f:1b:ca:03:89:ba:10:10:27:77:42:8b:f8:d5:
af:be:c7:d6:37:c0:89:6f:4a:ab:46:3d:08:e8:d8:
96:dc:a9:06:a2:6d:32:06:8c:f5:32:2c:40:b3:5b:
fb:1b:ce:a2:7e:95:e0:28:0d:c6:45:df:46:03:c4:
94:62:fc:e3:4c:1f:61:27:9b:2d:11:ef:45:23:66:
28:ec:10:46:48:fe:72:0d:56:8b:7b:73:6d:2e:6b:
0e:18:68:d8:89:39:77:c5:59:e0:a0:17:60:f3:df:
09:24:35:4b:40:0b:26:ea:bd:c6:30:19:06:b8:84:
8a:b2:fc:6f:83:f0:14:f8:7a:20:9e:0a:2a:6a:68:
35:a9:b2:93:f2:6a:6f:bc:3f:b8:62:2a:a5:37:44:
c3:9b:2d:b1:01:e9:6c:ca:3e:6d:48:e8:74:07:ff:
2e:bf:9d:9f:54:ea:38:05:7e:6a:76:11:5b:77:a8:
8c:5d:29:1a:92:b2:a0:2f:4b:72:5f:59:5c:58:47:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:4B:56:E8:C7:8F:54:6B:35:A2:07:82:F8:8F:FA:2C:07:56:E1
X509v3 Authority Key Identifier:
keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:84:13:8e:e9:c0:95:8d:e3:b0:e2:90:91:b7:02:a3:e8:5a:
52:b5:ab:17:0d:b4:8d:15:eb:25:e1:32:80:c3:57:08:c2:0e:
44:5c:27:17:47:d9:d8:f3:8c:5c:31:8f:a1:93:b7:15:a7:a9:
6a:06:1e:12:ed:2d:ec:c6:56:eb:68:f8:a9:30:f9:0e:55:bb:
e9:72:0b:e8:00:f3:fe:b3:1b:4b:28:7d:aa:c5:20:86:ac:73:
18:1f:6f:c8:53:28:c2:2c:94:27:67:66:7d:03:a1:80:fb:8f:
1b:20:9d:bf:40:e7:1c:5b:5f:e9:44:61:76:c0:7b:67:96:ef:
cc:d3:62:b4:01:fa:f7:06:90:f4:2d:cc:e0:ce:ca:ee:ce:2c:
cb:4d:13:ab:8e:b6:43:39:4f:fb:4e:c9:2c:5f:84:8f:f1:0a:
1c:28:43:b1:0c:65:b4:c6:7a:74:30:40:97:ab:2e:22:f7:c2:
a0:2f:64:1b:d3:c4:92:67:ef:15:15:cc:51:cb:a5:c1:61:a9:
54:34:6b:f2:09:78:fd:5f:e6:ee:a3:0a:cd:9e:17:5d:a3:a6:
0e:ea:bf:0d:b8:2f:1d:b1:4a:8b:79:ce:c9:45:40:26:99:26:
42:df:35:fa:52:4c:74:e2:3b:60:c0:97:eb:c0:16:18:63:b0:
a8:1b:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:16 2026 by rpki-client