
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/D30098F6413111ECB71E086AC4F9AE02.roa
File: D30098F6413111ECB71E086AC4F9AE02.roa (raw, json)
Hash identifier: yrbFlXX+Q20ODJMbiysSXJ6ACMYRj3dlttqVySrHsBg=
Subject key identifier: 27:58:07:BF:DA:14:53:54:12:50:6B:60:82:5E:E8:88:0A:6D:BF:22
Certificate issuer: /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Certificate serial: 0514
Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/D30098F6413111ECB71E086AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:45:15 +0000
ROA not before: Tue 28 Oct 2025 23:43:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 23747
IP address blocks: 103.143.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CAE, serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Validity
Not Before: Oct 28 23:43:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a434db-a42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d3:10:1f:1b:16:89:bd:14:15:42:99:ad:86:
30:9d:b5:5d:43:60:43:51:cf:75:03:69:26:a1:1a:
dd:b3:62:56:1b:24:2f:1e:87:c0:59:54:4b:44:66:
2a:de:b3:d0:51:dd:06:75:6d:23:a2:75:b2:8c:38:
41:4a:fb:bc:0b:8c:7a:de:14:e7:34:44:e8:d9:d2:
06:e8:a9:67:71:4e:af:8d:e7:57:3a:4e:32:4b:2e:
50:26:5a:f3:95:5a:4c:fb:e5:80:77:b7:60:40:19:
0e:58:1b:20:e2:99:78:00:4a:2d:3c:84:d1:93:76:
24:9b:1b:ba:8a:e6:b5:e6:f5:24:6d:a0:ab:8d:f3:
d1:b7:3d:51:79:57:62:c5:3a:4f:37:9b:2d:42:b3:
da:ef:02:c0:6e:5e:87:5b:65:38:4a:16:ec:17:d4:
db:9a:be:43:40:a9:72:8f:2a:f2:12:4a:07:94:79:
94:85:eb:56:a6:0e:88:f3:d7:fd:42:f4:4b:04:01:
11:b5:29:33:87:6e:64:86:30:d0:03:26:3e:df:09:
73:78:ba:3c:6f:85:99:db:56:af:bb:61:b9:dc:96:
60:40:ad:a5:4b:21:f8:57:ce:70:1b:f0:84:64:4a:
92:58:59:d9:35:42:ce:32:e4:78:87:1b:43:79:ec:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:07:BF:DA:14:53:54:12:50:6B:60:82:5E:E8:88:0A:6D:BF:22
X509v3 Authority Key Identifier:
keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/D30098F6413111ECB71E086AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.216.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:aa:6a:9e:45:c8:31:be:df:7f:a6:d7:ca:3e:2d:12:10:aa:
b5:d4:41:00:81:5a:52:50:c9:fa:0e:32:72:37:bb:24:1f:89:
c4:ba:09:c4:7c:77:34:1d:1c:49:ff:c0:5b:ca:3d:44:0b:1b:
85:62:bc:75:3d:92:20:5a:7c:24:30:9a:4a:07:0c:58:68:6d:
62:34:03:e8:71:61:7f:d1:3d:20:4d:96:8c:55:e9:70:1b:ac:
4e:79:0a:ec:6f:3d:57:48:d0:00:11:10:63:9f:91:b0:c3:e3:
fa:02:41:01:e1:70:eb:aa:01:2d:05:e4:ba:e3:5e:7f:46:57:
37:58:9b:f3:57:cb:fb:e9:9f:25:0f:33:9c:44:e2:84:20:1e:
25:d8:73:e7:48:09:4c:d4:49:e5:2b:94:1a:55:d8:4f:28:aa:
d5:ad:f4:58:9a:9a:3c:f9:4b:fc:ba:54:6c:39:d8:84:d5:c6:
0a:f0:84:8e:a9:68:92:cf:0f:9f:b8:26:a1:06:27:b2:57:2c:
b7:dc:3d:aa:f4:92:10:73:67:82:0c:51:b4:48:43:9f:63:78:
ca:fb:07:ba:4d:8a:56:57:ec:c3:cf:c0:50:69:8c:78:ef:a5:
71:d3:5a:54:8c:c8:37:42:40:8c:3a:62:42:e8:ae:29:fe:4d:
75:7b:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:14 2026 by rpki-client