
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa
File: 7043D43679BB11ECB6D72266C4F9AE02.roa (raw, json)
Hash identifier: oGmQ2rN8oMQwi/Mb9M5b5FwgbGff4iWncx9xo/hE81k=
Subject key identifier: F1:94:B5:E5:F1:B3:CF:AE:74:ED:B1:9A:4D:52:CE:CA:D8:72:DC:1C
Certificate issuer: /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial: 0ECE
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa
Signing time: Wed 16 Sep 2026 18:35:20 +0000
ROA not before: Wed 16 Sep 2026 18:35:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133929
IP address blocks: 103.141.236.0/23 maxlen: 23
103.141.236.0/24 maxlen: 24
103.141.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3790 (0xece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Validity
Not Before: Sep 16 18:35:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aaae168-79a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:8d:fc:85:50:71:94:a3:9b:69:b4:c4:27:
66:f5:46:3c:39:be:c9:52:73:09:98:11:d7:f5:3b:
19:1e:48:68:ee:99:b1:50:2e:0c:39:cb:23:f8:68:
cf:a2:17:a3:72:80:fe:63:fa:01:93:86:46:a4:0c:
e5:30:3b:47:d4:2f:6d:78:3d:25:4f:ea:b0:13:0b:
f5:09:89:41:b7:20:4c:5d:39:a9:94:64:79:e5:12:
43:7b:66:50:09:44:e4:fd:bc:63:19:8a:07:68:b2:
f3:56:76:c8:bd:f5:a6:1f:1e:f5:1c:57:7a:66:31:
10:83:37:b9:07:17:0a:41:29:c6:3f:b2:a2:ff:71:
37:cb:9a:58:6d:48:bb:22:26:17:2e:1e:45:10:5c:
7e:76:c6:57:47:d1:df:fd:a8:b0:41:18:a1:1e:5e:
02:16:d8:38:84:16:db:41:c2:8e:92:4c:09:96:31:
b8:0d:ba:3b:38:a5:81:e1:18:7a:d1:c0:69:93:32:
8a:6a:92:3f:25:df:90:69:35:14:27:0b:cb:27:a1:
65:01:67:ca:d9:f7:a7:38:2f:64:bc:2a:7e:95:9b:
79:78:6f:5f:10:89:15:8a:00:fe:7c:d7:f5:c9:be:
3a:30:f0:c4:e6:ac:45:8e:76:42:5b:a2:91:97:51:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:94:B5:E5:F1:B3:CF:AE:74:ED:B1:9A:4D:52:CE:CA:D8:72:DC:1C
X509v3 Authority Key Identifier:
keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.236.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:49:48:c8:40:a0:22:eb:dc:85:a7:0c:1b:6c:d1:35:e0:fb:
f2:f5:47:3d:c5:eb:94:25:1c:5f:27:c8:56:f4:37:1e:f3:50:
c5:48:a9:ac:4d:26:aa:41:f6:01:40:f6:c0:eb:11:7a:49:71:
f6:56:20:e4:b0:bf:af:82:8a:3a:de:33:8a:52:53:13:bc:be:
13:90:cf:e1:6e:17:95:2e:de:19:2d:2c:4e:c0:9d:0f:00:f1:
d3:c9:88:9b:2c:d6:8c:1c:85:80:56:bd:6b:08:23:ca:95:19:
47:3b:bd:4a:f1:81:f0:0c:0e:84:55:be:a9:39:0c:fa:db:d5:
77:41:52:27:fd:65:5c:f9:22:be:8e:0d:3f:9b:a7:3a:1b:b7:
04:e2:d7:0d:e8:ac:77:1d:53:73:f6:83:ad:ed:2b:68:e1:e6:
9b:56:2d:c7:f0:f4:e9:f8:d1:77:c7:13:66:66:08:8d:b4:73:
fb:e8:a6:fb:98:60:b0:23:cd:69:30:9f:15:98:1c:8d:2d:3f:
35:af:b2:21:0b:63:ef:66:f2:f8:0b:35:74:74:09:c6:45:8e:
3e:e7:07:1f:37:40:0d:f2:30:c2:09:1e:28:24:93:12:92:32:
40:a1:f6:1f:25:be:4c:72:11:ec:a9:d2:33:cc:f6:24:91:5e:
8e:ca:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:06:21 2026 by rpki-client