
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa
File: 6714424C3C9111EA9416CA78C4F9AE02.roa (raw, json)
Hash identifier: wM4jTVSXdRa49wS3QCPAkcV9PaMIwDAgOcfWtEI5Jsg=
Subject key identifier: 01:D0:03:FE:2B:DB:C7:CE:D8:FE:4C:E4:B0:D3:C6:8A:A9:C5:09:86
Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8
Certificate serial: 0DA7
Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:51:14 +0000
ROA not before: Thu 30 Oct 2025 18:07:03 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139675
IP address blocks: 103.143.126.0/23 maxlen: 23
103.143.126.0/24 maxlen: 24
103.143.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl
rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8
Validity
Not Before: Oct 30 18:07:03 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44452-f785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b4:40:31:f4:5e:3d:fe:67:00:1d:d2:16:92:
89:3b:87:0e:01:f6:3a:11:cf:77:8d:81:5c:59:a0:
07:b5:f4:11:63:68:7f:d5:7f:1e:59:ac:1b:f4:55:
d1:87:49:a8:3a:56:00:4b:29:ac:29:55:af:e4:46:
2c:4f:fe:28:99:4a:22:c8:11:8f:67:4f:46:43:c7:
75:02:f1:d1:f0:1a:58:37:22:57:70:6f:a7:8c:60:
d8:cb:8f:80:1a:4b:74:d2:84:3c:8a:eb:18:54:84:
67:0c:96:77:02:70:bc:f4:fb:ff:33:5d:ed:7f:55:
3e:bc:01:7a:f0:5a:9b:1a:b6:69:29:c1:e5:df:4d:
93:3a:71:95:ae:1f:75:c7:a7:4a:6c:85:8d:e7:19:
b7:03:bb:7b:db:40:ab:40:be:2f:91:4c:2a:bf:58:
02:7a:f9:7c:26:ea:91:5a:99:24:14:fb:c7:86:c4:
b9:20:a2:4f:77:8b:8c:1b:2a:52:95:77:d5:98:5b:
8d:50:94:31:ed:83:f5:22:64:08:b6:b8:14:0d:29:
2a:04:f0:87:35:99:3c:b9:1d:63:6a:e6:63:1d:79:
00:7d:50:c6:62:02:d6:73:9b:b1:81:32:e3:f2:3c:
81:4f:82:9b:21:76:a4:dd:44:b9:64:fb:53:cc:07:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:03:FE:2B:DB:C7:CE:D8:FE:4C:E4:B0:D3:C6:8A:A9:C5:09:86
X509v3 Authority Key Identifier:
keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.126.0/23
Signature Algorithm: sha256WithRSAEncryption
19:94:13:3c:51:c5:07:5f:d2:3c:b2:83:2f:ff:4b:f5:0a:52:
44:bc:5b:c9:ac:7b:a7:97:86:d4:81:cb:a2:48:1a:49:7e:71:
e9:2a:52:d0:74:95:d4:ec:44:e9:d7:26:c2:5e:fa:cd:a0:7a:
fd:69:b2:83:90:a2:f8:5c:b0:9b:fe:a0:a6:d2:b5:a0:62:21:
01:95:0c:46:27:f6:ca:cf:f9:45:49:d7:7e:7f:f4:a2:b1:f2:
8b:61:b5:cb:c7:f2:88:47:bb:5b:c9:2e:86:3b:de:b2:33:36:
55:f0:53:28:51:6f:46:30:16:e6:35:ad:74:1d:3f:ae:13:16:
20:df:a4:9c:1a:f7:e8:5a:3c:b6:e9:c3:fd:08:a2:12:e7:15:
b5:3c:58:28:cc:4b:f3:68:e7:5b:aa:68:c1:3f:e7:94:e4:24:
dc:c4:06:c9:4d:fa:5f:22:3b:a8:68:fb:85:f6:0a:0e:6c:93:
8f:40:b9:3a:41:f7:e8:2d:14:f6:49:3f:60:08:3e:f8:5c:19:
35:47:cf:8f:cf:90:6c:a8:8c:93:c9:f3:9e:44:77:ee:f9:a1:
c8:87:87:75:5a:81:5d:af:19:6d:04:27:02:45:6a:7a:90:1f:
9e:22:d9:e1:6f:18:4c:37:ac:11:c1:9c:ee:71:84:19:fc:bc:
75:3f:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:03 2026 by rpki-client