
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/0C43C6FE115A11F1BB244A79283D8C67.roa
File: 0C43C6FE115A11F1BB244A79283D8C67.roa (raw, json)
Hash identifier: Hr8f5wSXDiXIDN08nc6DkGalC1po1ZdRf4mZ0WmsB/E=
Subject key identifier: EE:22:5B:E2:B5:E3:82:71:DD:EE:00:8D:4D:00:AB:43:96:6D:13:8A
Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial: 022A
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/0C43C6FE115A11F1BB244A79283D8C67.roa
Signing time: Tue 24 Feb 2026 08:23:08 +0000
ROA not before: Tue 24 Feb 2026 08:23:08 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 151629
IP address blocks: 103.130.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Validity
Not Before: Feb 24 08:23:08 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=699d5feb-1bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:87:34:7d:76:e0:82:9c:1e:7d:5c:97:61:
60:0e:35:fc:78:90:bc:42:9f:8b:79:65:e7:c6:11:
85:a7:f6:a2:ce:cf:f3:89:e7:6b:2a:60:d1:11:bc:
59:b8:b1:92:ab:68:c3:2b:a0:a8:da:ca:5c:f2:f9:
86:9f:61:a2:85:3c:9a:01:b5:9f:5f:4a:bb:28:13:
30:d1:6a:52:b0:23:fc:ad:01:ca:fa:da:12:7f:5a:
04:4d:15:b3:8d:51:16:74:a0:ae:4a:fd:be:8b:a0:
ef:28:62:3a:b6:ad:c7:73:47:15:81:e5:0f:9c:2c:
97:5d:1f:24:74:07:b0:45:fa:73:6c:7c:fc:eb:14:
41:f8:37:26:75:7f:be:09:92:63:40:0e:9d:2e:d4:
e8:11:1d:e6:b8:84:fa:ca:fb:ba:8e:ed:66:6c:cf:
88:22:40:84:97:24:cf:bb:e7:f2:3a:ce:22:3a:36:
81:b6:c6:71:2d:24:15:11:f3:a1:dd:96:eb:5b:d5:
79:06:e7:99:97:00:e3:53:0a:f5:58:7b:76:25:8c:
97:72:10:35:3e:0f:28:fb:1e:e5:8c:3e:df:8d:4a:
b3:06:88:57:c3:e0:ba:64:56:ec:c9:05:1e:f9:1d:
44:6f:ee:e9:ed:62:ed:25:a4:da:e8:cf:dc:73:8e:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:5B:E2:B5:E3:82:71:DD:EE:00:8D:4D:00:AB:43:96:6D:13:8A
X509v3 Authority Key Identifier:
keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/0C43C6FE115A11F1BB244A79283D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.119.0/24
Signature Algorithm: sha256WithRSAEncryption
31:60:2d:9b:45:d7:37:d6:09:b2:db:76:03:7f:3b:a5:3a:c5:
36:82:5f:08:77:6b:5a:f9:46:6e:27:e5:63:f3:12:57:cf:a7:
b5:c9:6c:8a:37:54:fa:49:77:58:39:2d:5e:35:0d:c3:04:d6:
d1:8f:1e:a2:71:b4:9a:f0:b1:5a:70:a6:d1:30:95:bd:e1:74:
cf:f4:2a:48:c3:99:b3:fd:ea:2b:2b:9a:e1:c3:b0:a4:7f:ec:
47:40:87:cc:52:e0:8f:86:3f:34:7e:02:66:e1:53:71:72:86:
57:b2:1b:dc:61:5b:74:38:98:f5:b4:00:c6:7e:3a:2a:79:4b:
ea:ac:5b:3b:6e:a3:3a:fa:f1:5e:0e:13:37:e2:48:eb:da:42:
84:ed:c3:bb:a2:78:fa:9b:aa:ad:14:c8:71:4b:a1:4e:00:f8:
b2:36:ba:2c:43:12:e7:6c:c6:7f:e5:ab:75:bd:7b:95:c4:28:
d3:34:e9:d2:cc:29:66:46:57:39:5f:b0:54:f6:b7:d7:b9:20:
d7:2a:ec:e9:c6:cd:d3:46:64:50:38:ee:5e:92:a8:a8:cc:99:
6c:f4:0a:92:4c:87:9b:34:76:f5:64:c8:94:4a:f0:2f:28:70:
64:07:57:22:8d:47:a1:e2:82:79:b3:52:ac:77:63:86:9d:3b:
33:8e:ca:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:14 2026 by rpki-client