
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa
File: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (raw, json)
Hash identifier: rShfJxqE0h5coYqcR6ikXPA4HtTIMuqnQcLhGpxQm7o=
Subject key identifier: 50:F2:A3:3F:D6:80:4F:AD:BE:F0:C8:38:23:8F:ED:6C:9D:2A:8F:F7
Certificate issuer: /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial: 4F
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:54:11 +0000
ROA not before: Fri 17 Oct 2025 02:59:12 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 38562
IP address blocks: 103.175.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Validity
Not Before: Oct 17 02:59:12 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a48b53-91fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:02:e5:e6:77:39:a3:74:a7:f9:de:c1:fa:
8f:a4:cc:27:ac:3b:75:a7:59:d7:02:a9:9b:94:75:
7e:a1:6b:58:8b:e3:8a:42:ee:f0:93:cc:3d:07:62:
92:7c:fa:be:8c:5d:c8:11:d3:ce:bb:43:2c:7c:bf:
54:aa:d9:f5:5e:2a:d9:66:56:6a:b9:07:d5:f5:f5:
fe:1e:2c:2b:1b:ed:40:72:6e:ed:64:94:78:2e:4c:
b8:5b:d0:2e:ff:fd:1b:49:d1:28:ed:31:a1:31:bd:
2e:33:ff:f7:51:fb:bf:cb:a1:1c:d1:5d:d7:20:ed:
fc:24:b4:9f:f3:15:16:6c:fa:ca:dc:58:fe:4c:d8:
9e:c3:43:28:4a:f2:50:29:38:e0:b5:a7:4c:89:03:
57:4c:ff:e5:05:61:88:0b:05:1e:9d:5e:94:c0:ff:
84:38:2d:d4:d3:cc:55:15:71:52:88:8a:f3:46:d8:
43:36:76:e5:77:e0:52:bb:e0:44:c2:0a:06:dd:f5:
77:be:c8:b8:74:ad:48:03:2e:65:4a:4c:06:1a:44:
e3:87:5e:67:02:b0:3a:82:f5:31:5a:c9:2e:f4:07:
8f:6e:f7:c1:51:c9:66:3b:d1:df:99:5b:a3:6f:0e:
3f:66:6c:ed:79:c1:92:15:98:ba:f0:46:5d:aa:06:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:A3:3F:D6:80:4F:AD:BE:F0:C8:38:23:8F:ED:6C:9D:2A:8F:F7
X509v3 Authority Key Identifier:
keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b2:e8:01:cd:c7:c1:78:c8:17:11:e8:d7:2c:04:30:a3:7b:
0b:9d:2b:8b:7c:cd:c6:de:b6:4c:09:93:12:1e:80:9a:95:08:
03:8c:33:22:8f:f6:91:3f:a7:d4:97:01:d8:dd:d6:87:fd:bf:
c2:34:43:4a:46:34:ec:bf:29:fc:f9:e6:23:14:6e:f7:57:a3:
12:e1:47:18:d6:ba:46:0a:97:a8:40:57:a3:3f:62:e4:50:b4:
1f:eb:70:bb:5a:64:27:7e:39:10:99:e0:e6:09:ee:32:9c:ab:
bd:ec:2b:b7:1b:9e:16:7f:3c:77:76:3d:3a:0b:18:c3:0d:39:
42:0e:ff:f2:ba:14:87:df:04:2e:14:77:ef:b4:6f:52:6a:52:
c5:ad:18:54:1b:b8:0f:dc:b6:22:fc:e4:e9:11:65:89:59:18:
53:46:14:af:73:63:7d:d4:f6:27:e1:0a:f4:d7:02:81:31:fc:
aa:be:66:66:c6:1f:bb:9a:72:78:b8:2d:a3:17:77:a0:5b:4e:
1d:0e:70:38:7e:1c:cc:dc:c8:d2:67:66:78:aa:a6:4b:5c:ef:
e9:de:62:d2:50:31:30:54:da:77:76:a2:ba:0a:5c:64:b3:69:
5d:48:9d:ac:00:0d:1a:91:24:2d:f7:c6:a6:ba:6c:2b:92:e7:
b7:58:6a:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:23 2026 by rpki-client