
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa
File: 69308C200A9611EABF034172C4F9AE02.roa (raw, json)
Hash identifier: 7uEkOkpTo9y1kKysxWynbguqtnnBrncpRtQwiyFCV0o=
Subject key identifier: DA:D7:03:A9:93:AE:29:3E:69:5B:0D:A7:0A:0B:06:E8:DF:9D:5C:7B
Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Certificate serial: 0CBA
Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:40:52 +0000
ROA not before: Sun 02 Mar 2025 19:37:24 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 132489
IP address blocks: 45.126.72.0/23 maxlen: 24
103.84.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3258 (0xcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Validity
Not Before: Mar 2 19:37:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a425c4-3eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:17:e9:d4:f3:a2:da:9e:9d:48:59:13:d9:
09:79:68:65:0a:1a:67:52:cb:5a:b2:88:f2:f3:9e:
aa:7a:9e:78:00:ad:f8:37:2c:bd:e2:f6:bc:a7:fa:
b2:e1:83:70:33:3f:ea:81:b2:c5:20:cd:cf:01:9c:
19:9d:c6:4e:eb:c5:06:e6:ff:a7:5d:e9:da:22:62:
6e:f7:df:a7:f6:09:ca:4a:d5:c9:4e:f6:3d:81:8d:
11:6b:d5:3e:b0:45:52:3a:a0:73:43:9c:52:eb:25:
29:f5:04:f2:ab:36:89:18:08:18:73:41:bc:f8:65:
ce:7c:11:f7:5b:89:eb:f1:58:90:97:78:1d:fd:a7:
04:30:ca:32:c0:f4:f3:0e:ab:0c:47:a0:c6:a1:ff:
f4:dd:eb:10:93:97:89:5c:cc:86:af:53:43:ec:db:
a6:02:d4:b8:aa:f4:f7:4c:d8:b6:a8:6c:c2:e0:0c:
be:af:63:b3:4e:2f:67:f0:ee:e6:ef:a8:bb:0e:49:
dc:cb:eb:f9:10:8d:0c:3d:04:5e:54:77:0a:82:01:
f8:a4:82:0c:2a:2a:94:40:00:1b:7d:b5:a1:af:46:
9c:b6:98:11:dc:b6:04:04:fd:dd:17:d3:07:45:29:
c0:b1:a0:42:b6:18:05:07:e9:2f:64:00:6a:d9:06:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:03:A9:93:AE:29:3E:69:5B:0D:A7:0A:0B:06:E8:DF:9D:5C:7B
X509v3 Authority Key Identifier:
keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.72.0/23
103.84.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:ce:85:15:68:03:60:78:63:f7:cb:81:b3:07:2c:c4:6a:96:
00:c9:62:16:eb:3a:b4:f9:3a:d6:a4:7b:53:2a:f3:59:41:87:
89:1c:b2:16:67:99:fc:00:58:57:52:bb:8f:b7:9b:0f:f9:18:
fa:61:97:90:ff:81:c7:ae:da:96:9b:37:7b:97:2c:e1:7b:09:
27:02:03:fc:30:68:f6:04:0f:a8:09:44:dc:0d:0f:18:58:c6:
4b:91:02:71:82:ca:10:1d:e7:33:66:4d:ed:7e:6c:b9:ad:db:
5b:a1:87:b0:2a:bd:9f:b0:32:3d:6c:74:83:c1:cc:3a:d2:5d:
27:a6:4d:53:58:76:70:8f:94:c3:45:7b:e6:b3:8e:25:87:f4:
94:14:b6:58:87:b7:d0:b4:ff:e2:01:4b:98:c4:32:de:19:71:
7b:23:de:1f:2c:4f:da:a1:82:fc:26:89:f1:23:48:c4:e8:37:
0c:c1:f4:9b:63:af:b7:d8:7a:c8:c1:c2:b3:22:b4:e4:aa:90:
e8:c3:8f:c5:0d:80:10:a9:4b:93:bd:f8:de:4a:66:92:73:5a:
20:3d:cd:c0:91:1b:b1:2d:44:8c:10:4a:3a:6a:4b:f3:82:83:
09:07:63:48:ec:00:4f:49:0f:0f:fa:fc:ab:27:03:20:0a:45:
a4:0b:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:58:56 2026 by rpki-client