
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa
File: 43E43270A27D11F0862ABC17C4F9AE02.roa (raw, json)
Hash identifier: NZ2PR9JzupHRbIAvvTjexUgRAGHGGYmk/Ol3V3TWapU=
Subject key identifier: 0F:6A:98:91:BB:E8:D7:99:0D:66:4A:2E:00:94:86:2B:D4:B1:AB:D0
Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
Certificate serial: 4E
Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:14:54 +0000
ROA not before: Mon 06 Oct 2025 06:25:35 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 134349
IP address blocks: 103.95.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl
rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
Validity
Not Before: Oct 6 06:25:35 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3d95e-5a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:f5:28:98:3c:70:d3:f8:81:63:39:41:fc:
d0:07:eb:85:d5:71:6c:cd:9f:12:7a:c7:ce:70:95:
0f:e3:85:a7:fd:a9:d3:80:38:2f:bd:df:ae:ae:75:
f3:15:0e:56:15:6b:ba:9c:a2:2f:98:4e:28:72:17:
60:9e:d8:e8:cd:5b:3c:94:ba:9f:10:ef:41:e1:65:
14:02:7e:8f:d0:68:33:90:f3:d5:2f:b3:5e:68:ff:
8c:50:a6:db:7f:9b:09:2e:6e:59:e2:b7:29:da:7b:
3a:f8:6b:30:5d:a2:59:04:94:21:f5:2c:b0:99:58:
78:8e:7c:13:ec:d1:5f:4f:54:49:2b:da:fd:8e:0c:
bb:33:2a:c1:e2:38:cc:08:70:9c:66:24:c6:df:08:
29:8f:ca:3b:2b:94:57:69:7a:ce:15:71:ee:fc:a1:
77:b7:dc:3e:6d:0d:9e:f4:40:fb:82:7f:78:2b:85:
1c:f4:65:1d:c0:4f:62:e6:c4:2a:0b:94:3f:d3:c2:
72:b9:48:47:14:b4:52:e3:7f:26:0a:60:e6:f6:7e:
55:95:b1:45:c4:e4:93:3d:a1:b2:2d:9b:7c:2e:65:
6e:73:0d:d1:f7:f8:97:74:27:a2:14:87:26:5b:7c:
4e:35:b1:82:38:82:b3:c4:66:27:ed:ec:f8:25:32:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6A:98:91:BB:E8:D7:99:0D:66:4A:2E:00:94:86:2B:D4:B1:AB:D0
X509v3 Authority Key Identifier:
keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.95.76.0/24
Signature Algorithm: sha256WithRSAEncryption
06:04:6c:2c:36:31:92:c1:de:47:8a:de:08:1a:20:3f:5b:f8:
68:8e:36:c8:74:7a:0e:83:08:5c:84:75:ef:63:72:7a:32:d2:
08:a6:66:8d:7f:32:75:92:43:f5:10:86:ed:c4:62:d6:fc:71:
90:ec:12:d0:6d:26:1d:7a:87:a3:f7:98:9d:d1:9f:87:2a:dc:
10:de:e1:63:36:d4:91:04:d4:2a:cd:ee:4f:88:4a:a3:05:a9:
05:13:ae:fa:16:6e:27:be:0f:0d:7a:a5:36:3c:56:46:69:ac:
dd:43:74:6d:ac:f4:1e:57:54:93:81:b6:f9:51:42:20:ae:f6:
12:3e:65:c3:f1:3f:92:e6:27:bc:de:ec:7b:a4:9a:fa:25:6f:
27:dc:b6:4f:64:ae:03:c6:20:97:73:4c:39:2c:b7:73:ef:8d:
38:7c:e0:6b:8c:f8:f6:d4:8a:25:a5:5b:d9:f8:c2:79:02:03:
48:bd:f0:e1:d8:b8:34:27:26:f1:27:2d:2f:34:c5:c4:d5:ab:
57:04:a5:ad:47:e2:22:e4:c0:75:c8:fe:03:f0:f5:9c:84:7b:
00:78:e6:8d:ca:b1:ff:9e:c7:6f:13:0b:34:54:71:73:09:5a:
db:42:67:24:f1:7a:e8:3a:4c:6d:9e:14:0c:94:ce:84:f6:45:
e4:6d:6f:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:03 2026 by rpki-client