
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/DF277BF6108811F191FBC4DC323D8C67.roa
File: DF277BF6108811F191FBC4DC323D8C67.roa (raw, json)
Hash identifier: GPLuAK09BcP86+XfhkRdZtyHxCzeDMGoAXmawAnzwCI=
Subject key identifier: 66:27:B7:2C:A5:0B:D0:B5:F7:7B:B4:45:F7:B9:B1:F0:A8:D2:26:F1
Certificate issuer: /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Certificate serial: 0A
Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/DF277BF6108811F191FBC4DC323D8C67.roa
Signing time: Mon 02 Mar 2026 12:34:00 +0000
ROA not before: Mon 23 Feb 2026 07:25:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 38578
IP address blocks: 203.153.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Validity
Not Before: Feb 23 07:25:47 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a583b7-691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:52:a0:69:0a:c3:bb:89:c0:dd:2b:1f:98:
55:eb:c6:65:a2:5a:0d:2e:93:e1:15:ad:8d:90:ae:
65:74:f7:5b:da:8d:e1:50:a1:6d:53:a6:ec:a5:33:
87:f7:11:66:60:9d:a9:05:80:2c:a8:f4:ca:a6:c0:
74:66:41:4c:59:dd:c9:84:3b:00:03:fe:3d:07:7d:
e5:6b:54:86:de:76:93:9e:18:80:54:7d:5f:f0:c3:
9e:56:6e:f8:05:e3:66:ba:1f:53:45:6f:20:ca:a8:
fb:0b:fe:db:1e:63:6b:a3:53:0c:69:95:9f:c9:2b:
3a:ca:4e:71:05:13:99:98:79:ef:f2:04:11:8b:08:
39:4a:fe:da:86:2f:f5:78:98:24:8e:10:70:50:9a:
1e:7d:50:ca:ef:04:02:32:f1:34:39:65:5d:99:0d:
ce:78:db:d2:d7:a2:bb:9b:99:54:9c:9f:bf:11:69:
14:80:92:8f:24:dc:71:a0:a8:28:d3:7c:09:74:c4:
30:a2:34:27:15:d6:c1:4c:10:6e:be:e9:be:78:e0:
62:5b:a4:2e:e0:87:7a:3c:58:01:af:12:a8:28:23:
8c:99:61:6d:db:be:15:cb:52:80:4c:4b:94:50:ad:
8b:60:09:4d:54:8c:5a:0e:94:d3:a4:f9:73:5a:4f:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:B7:2C:A5:0B:D0:B5:F7:7B:B4:45:F7:B9:B1:F0:A8:D2:26:F1
X509v3 Authority Key Identifier:
keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/DF277BF6108811F191FBC4DC323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.153.4.0/23
Signature Algorithm: sha256WithRSAEncryption
98:c3:1f:ae:0a:41:fc:f9:66:a9:da:df:25:1c:85:c6:aa:6e:
53:bd:80:f8:88:fd:1f:77:16:6d:46:c9:23:f6:cd:f1:85:01:
0d:78:d9:98:22:29:d9:17:01:e5:33:36:bd:b9:8e:20:a0:04:
3f:9f:4a:2f:90:9f:be:5c:8f:bd:14:23:17:03:1e:cc:8d:a4:
69:fe:d1:d7:9a:a8:ba:6f:b2:fa:b1:f6:4a:f2:7b:b8:e8:62:
62:65:fd:dc:8e:c6:c5:9c:22:df:3d:7f:be:d1:cf:dd:33:ae:
a1:33:e2:b7:26:49:ad:c2:08:61:1f:27:5d:5f:88:74:8e:02:
8c:29:e3:f4:e4:d9:93:42:7d:67:c4:7c:0e:4c:98:75:c6:b2:
11:1b:86:51:a1:e9:0e:02:69:d0:98:33:ad:47:a7:8f:b2:7c:
57:30:70:2f:c6:20:59:f6:d6:86:1d:f5:c6:41:cf:4b:61:a1:
13:a5:00:c4:02:56:98:bd:61:fc:67:a8:90:30:20:ec:f6:c0:
ad:06:ab:94:55:00:0e:5e:48:6d:a5:7c:90:9d:cf:3e:7c:23:
41:ae:e3:0b:63:e8:c0:7b:6e:ca:f5:58:f4:2c:f6:6b:6c:b9:
c9:24:1b:a2:d3:43:75:86:76:9a:e3:58:0d:d0:97:56:f1:37:
0c:0e:33:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:26 2026 by rpki-client