
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
File: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (raw, json)
Hash identifier: 4jcjYW/0FMetLdx19LfkYx1V1hLHWxOLQGODOyvAQC0=
Subject key identifier: 2F:F5:79:0E:0B:99:83:A0:D5:3A:E4:7E:DF:92:68:A6:8A:AC:6C:A8
Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Certificate serial: 08E4
Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:05:08 +0000
ROA not before: Tue 02 Dec 2025 20:22:03 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134555
IP address blocks: 103.130.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276 (0x8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Validity
Not Before: Dec 2 20:22:03 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a44794-28ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:7a:c7:83:16:ec:bb:1f:82:c7:5a:07:e4:
69:67:b8:db:e6:b3:57:48:43:13:58:93:90:b1:3e:
d5:5a:51:41:65:a2:0b:54:a8:74:a9:1c:69:64:cb:
da:80:2a:63:03:ee:ce:4e:87:f5:36:fc:b5:42:45:
12:de:c0:e1:ca:13:9a:39:8b:e0:a5:24:76:8f:19:
e0:b0:fe:79:fe:28:f4:59:ca:8d:59:e4:f7:1f:7a:
28:cf:27:46:b6:13:0f:8c:fb:2c:bb:fa:5e:b6:88:
59:78:4b:3f:a0:0c:3d:66:e0:59:44:5e:a0:37:d3:
ce:d0:bf:90:92:41:55:25:04:26:74:b4:7d:c4:13:
5b:af:1a:93:77:96:ba:fd:7c:07:61:74:0c:ed:a2:
87:37:ad:69:80:69:78:0d:b4:ca:9b:94:f2:a9:70:
04:23:5e:8a:ce:b6:cb:63:06:c3:29:71:25:38:b7:
bf:4b:a9:8c:3b:be:92:e3:c1:17:96:ad:d7:d0:dd:
65:65:2a:b1:19:6f:94:ec:09:95:52:eb:0e:7c:a7:
cc:d2:fe:a8:70:52:ae:2c:db:99:e4:8f:31:1d:bf:
c8:7b:bd:3d:c4:c5:98:7a:05:9a:56:5a:89:a3:1b:
db:dd:09:6f:89:b0:a6:b7:19:45:cb:16:db:03:d2:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:79:0E:0B:99:83:A0:D5:3A:E4:7E:DF:92:68:A6:8A:AC:6C:A8
X509v3 Authority Key Identifier:
keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.130.244.0/23
Signature Algorithm: sha256WithRSAEncryption
73:ca:27:fe:fb:9a:b5:8c:7f:04:57:a9:8d:3e:55:f3:8d:33:
bd:fd:0b:1f:f6:b5:b7:7a:a1:c1:2a:95:54:27:f9:a9:07:03:
61:78:9b:60:ad:e3:0e:34:1c:26:89:99:a9:d0:16:f7:85:13:
40:f4:ed:3f:52:f9:f0:b9:b1:4b:0c:5f:a0:f0:62:20:a1:a8:
d7:b4:90:94:c3:d7:b5:3f:4d:3b:d1:8b:de:9f:9f:92:b2:89:
ad:f9:41:f5:e0:38:60:67:da:07:fa:90:40:8d:cd:f4:5b:e6:
42:91:83:5e:e7:06:a0:50:f0:64:a6:44:bc:9d:34:1c:a2:d4:
f7:10:d6:ad:5f:45:53:47:8e:25:6a:e1:83:a8:0f:8a:88:a9:
d5:60:a4:c0:fb:da:e3:de:8b:4c:40:8b:6a:47:9a:f6:b7:53:
03:6e:e9:7f:1a:09:3e:c0:12:56:5e:6c:6d:90:67:1c:68:23:
38:e9:ac:23:13:7a:05:34:d5:92:4f:d5:a5:c8:b4:98:bd:98:
2b:03:9d:f2:7b:a3:72:a6:dd:95:d9:0e:59:a9:06:f3:66:ff:
a0:fb:6b:b7:e1:42:58:df:9e:3a:17:b6:86:f3:ea:42:38:e6:
12:ff:4e:ae:5c:c4:9c:6a:b9:27:65:64:96:f1:96:30:93:7d:
8f:cc:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:59 2026 by rpki-client