
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
File: BDB203466B5D11EF84E04577C4F9AE02.roa (raw, json)
Hash identifier: ktr77GGT9fUMH7Uwa9KLHv2apdlBRjzWDQ3Us8CVMz4=
Subject key identifier: E3:A8:2B:14:22:B6:C7:27:A1:3D:30:20:D7:B1:6F:D8:75:DC:53:7F
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0A11
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
Signing time: Thu 16 Apr 2026 20:26:16 +0000
ROA not before: Thu 16 Apr 2026 20:26:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140627
IP address blocks: 103.112.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577 (0xa11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Apr 16 20:26:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e145e8-c88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:d7:6f:1f:e1:be:7a:5c:c6:05:fe:b2:a0:
00:7c:f8:93:af:e4:10:44:45:14:78:78:37:f2:65:
4d:80:fb:0f:55:8d:af:4e:1e:32:ab:b9:5c:be:88:
16:63:82:dc:86:48:0e:2b:6e:2b:48:90:03:31:51:
74:cb:03:64:3d:27:69:49:e0:78:97:b6:43:41:18:
2f:a6:0b:48:91:c2:e4:ed:03:4a:9c:b7:b0:e0:21:
67:49:a9:bd:ee:ac:7e:de:f8:93:a6:fd:2c:f9:03:
82:df:5a:b6:50:c0:7f:02:80:59:15:a0:bc:6a:35:
3a:10:f3:36:37:b1:d0:84:e7:18:26:4d:49:04:e5:
9e:6a:f1:af:28:97:c6:3f:78:0e:df:6f:cb:47:c3:
cd:06:fd:d8:87:e5:ab:37:e6:63:74:45:4f:70:2e:
dd:8a:2b:33:99:b7:bc:2c:2a:de:ef:d4:58:3b:24:
e2:8d:6f:68:ac:f2:10:52:28:4f:c5:94:af:a7:8e:
8c:19:ab:10:4d:cd:e9:68:b7:79:30:7e:0c:54:59:
8d:d2:37:bb:4c:7a:42:d4:b4:60:d0:c2:33:03:66:
d5:14:59:38:ff:ca:58:a1:18:e9:1c:67:41:40:8d:
e4:f5:fc:fa:cf:e0:53:5c:43:82:df:24:dd:56:a5:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A8:2B:14:22:B6:C7:27:A1:3D:30:20:D7:B1:6F:D8:75:DC:53:7F
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ca:06:35:1d:cf:d7:63:77:37:45:b4:30:d0:05:7d:10:13:
08:05:72:3a:37:d6:fe:8e:50:86:4f:30:7f:ad:57:f3:c5:1c:
d7:d1:b6:07:04:a9:de:41:1f:f0:98:5d:1c:1c:43:48:70:6f:
57:52:ba:3a:d4:91:20:a0:77:bb:cc:4d:65:e5:f9:ed:e9:c1:
55:27:6a:b6:80:c7:74:94:72:05:e8:cf:08:09:3a:be:85:a2:
f3:1b:f9:30:2a:69:76:51:d3:fe:30:5b:b8:2f:53:58:33:64:
fa:cb:ff:88:42:4e:ee:a2:4a:59:c7:2d:17:42:9e:a4:79:f3:
51:bb:ca:1c:72:14:49:fb:02:de:32:ba:4e:fc:b1:5c:f0:5e:
62:e4:3b:17:c9:5d:f5:82:dc:72:37:df:c4:57:e3:a0:04:de:
3b:c9:51:2b:79:60:3e:49:2f:36:92:0e:e4:f7:f0:d2:6a:45:
78:44:27:7f:e4:0f:4d:fa:ec:70:ce:fe:8b:51:68:8f:55:76:
19:34:64:5b:8c:6b:46:81:89:43:75:c7:28:e2:00:85:53:4b:
b5:29:31:82:4c:60:57:a7:f3:19:0a:f3:22:28:8b:be:7e:f9:
fc:c3:37:a1:06:f6:72:9e:58:04:9f:08:fc:b8:41:55:39:b3:
36:72:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:45 2026 by rpki-client