
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
File: A2EF68E66EAD11EC8796A251C4F9AE02.roa (raw, json)
Hash identifier: ZPYz03pw0KhMVBOPetBCRC/K+PV0o0wm8Fle12gB1bY=
Subject key identifier: C0:67:24:B9:62:34:7F:64:99:7B:58:15:F6:C2:B6:2F:26:0E:76:DC
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 0779
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:45:07 +0000
ROA not before: Wed 31 Dec 2025 21:17:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138623
IP address blocks: 103.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Dec 31 21:17:55 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45f03-773e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:b9:94:ef:4b:eb:25:34:9f:11:b0:54:7e:
44:f1:93:98:35:7f:92:f1:c0:f3:96:d8:c3:92:79:
f5:89:ba:d5:ee:09:03:5b:3e:09:16:fc:09:58:39:
4c:db:d0:69:1b:ae:43:c1:e0:37:6e:22:b3:f1:56:
64:e2:d6:a3:6a:f3:c4:86:b2:83:e6:c9:9b:87:79:
dc:e7:ac:9e:16:80:93:57:88:25:00:41:2d:f8:20:
b7:37:47:80:a3:10:b7:4c:8d:a1:82:16:bf:5c:8a:
6d:85:81:61:0d:2c:a8:89:22:41:ff:01:d9:f4:38:
ac:d4:32:fa:2e:87:4a:0f:7b:dd:97:ce:72:8b:ab:
09:cf:5c:be:db:f9:28:20:d2:02:19:dc:b7:87:84:
9f:f1:de:08:1e:9b:b2:00:2d:ec:d6:c3:e3:1c:b6:
51:f0:ae:54:0e:83:01:cc:7c:9f:25:e4:9f:62:d0:
74:91:86:3f:16:4d:5c:97:46:78:cc:6b:5b:f4:47:
39:8a:13:89:e8:21:9f:c4:a6:89:2a:60:55:04:2e:
dc:cf:b5:25:cc:71:14:94:c4:84:71:ab:73:46:2d:
b4:30:f8:8d:8d:a6:fd:e4:c0:1c:6c:0d:39:22:f9:
f5:52:16:c3:02:9f:61:aa:87:80:f0:0a:5c:b7:26:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:24:B9:62:34:7F:64:99:7B:58:15:F6:C2:B6:2F:26:0E:76:DC
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b3:40:6e:5c:6e:89:23:12:2e:33:c6:65:b2:32:fd:cc:1f:
fe:be:c1:e3:ae:2e:e0:f2:45:5a:5d:63:af:45:16:95:bd:96:
5e:71:f1:32:4e:60:d9:05:8e:08:de:2c:61:b8:48:ae:ce:00:
01:b7:3b:0f:1b:17:96:9c:12:f3:cd:0f:f6:b7:8c:86:4b:86:
2a:8c:a0:52:88:35:35:e1:43:5a:44:e9:5a:32:3d:e6:63:d0:
e4:4b:e1:f0:06:68:12:15:49:73:44:f3:b2:3e:a5:92:81:eb:
cf:63:61:c0:9a:65:a0:2d:4e:c5:95:f1:cb:6b:d2:65:2f:9f:
09:fe:80:45:b5:96:2c:1d:6c:bc:e4:7c:3b:ef:25:b8:21:7f:
93:43:5e:86:f3:64:d6:1d:05:27:e1:9e:3e:3e:83:8b:89:26:
ab:48:4b:9c:81:b1:77:6b:65:46:74:8f:64:7a:71:1f:89:2a:
2f:6a:89:df:67:dc:6f:36:cb:65:1e:8f:2b:0a:9c:66:c6:2f:
05:95:1d:a8:15:28:b8:4d:d2:f7:5a:ca:a1:31:f5:50:31:5b:
f6:bf:65:45:9b:11:52:aa:03:ee:ac:1f:0f:20:d1:46:e0:1e:
47:16:92:c6:f8:52:c8:30:f6:34:b5:ce:dd:95:88:b7:22:88:
22:97:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:30 2026 by rpki-client