
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa
File: 17A27C7E116211EF8FC7E061C4F9AE02.roa (raw, json)
Hash identifier: 42UbjdZw7Q08/gaQScyA+qN17BhHhRMtwA7wjgjh4qE=
Subject key identifier: 80:1F:9C:3C:BE:4B:3F:FE:C5:59:45:A5:5C:8B:86:08:53:A4:20:9B
Certificate issuer: /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Certificate serial: 01DE
Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:55:43 +0000
ROA not before: Sat 17 Jan 2026 13:03:08 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 151844
IP address blocks: 103.249.114.0/24 maxlen: 24
103.249.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Validity
Not Before: Jan 17 13:03:08 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46f8f-b80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:6c:30:3f:c8:e6:94:ea:8b:26:d3:c3:4d:
38:a1:31:24:a7:6f:28:4a:6a:2b:b0:d5:8f:9e:21:
31:c8:95:27:58:e1:f6:3f:9b:56:d4:c7:3d:54:c6:
6e:a2:c4:93:3f:a1:88:a5:10:e4:ea:e2:40:0a:03:
70:d7:29:3f:5f:bf:79:2f:ae:f1:42:c1:a9:a2:88:
08:60:16:5a:b8:3b:6b:b6:e2:9e:ae:2f:ee:7d:87:
7f:77:2e:f6:c7:5c:2b:30:68:ff:86:e4:f7:05:f4:
e1:01:0f:5d:6d:a9:12:2b:91:76:05:fb:fe:8a:05:
38:c2:80:dc:fa:fa:26:4b:e3:df:61:23:fa:9d:f1:
01:7d:92:a4:ad:9b:9d:97:ec:b6:db:2e:f9:bf:0c:
42:88:5c:12:32:75:74:ac:ac:e5:bb:ce:3f:b4:76:
10:5b:bd:ac:12:2c:a1:4f:d6:cb:9c:ea:4f:a5:c7:
2f:cd:49:c2:73:ef:f4:8a:84:d0:7e:7a:62:36:36:
a1:bd:ed:9c:c9:9b:60:d3:9c:b4:25:e4:83:c4:f8:
84:63:8a:b0:a8:81:b4:7a:b5:c5:1d:03:1b:aa:41:
c9:ee:97:96:8c:57:f3:e2:72:2b:2e:99:f0:84:be:
b5:68:d9:99:47:93:0e:0e:a1:9c:e0:23:21:df:24:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1F:9C:3C:BE:4B:3F:FE:C5:59:45:A5:5C:8B:86:08:53:A4:20:9B
X509v3 Authority Key Identifier:
keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.249.114.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:39:4e:ec:7e:62:cd:eb:f5:11:b3:d0:c1:ac:32:98:ed:af:
60:a0:d3:30:5f:bf:3c:f9:2d:a2:91:2a:da:ca:d7:19:ff:bd:
57:37:47:0a:66:ee:4b:d1:8e:97:bf:f9:90:d8:34:87:93:6d:
05:ff:e9:3c:7d:71:b4:a1:bd:bd:be:c2:9f:65:4e:22:8f:48:
d0:58:f5:da:2c:0a:65:47:ee:83:67:b0:20:60:4c:89:dd:eb:
82:4c:13:e7:ee:a4:ed:68:b9:9b:b9:39:76:70:43:fa:c0:b7:
9b:e8:dc:c5:d3:95:98:46:38:48:aa:aa:4c:e9:23:5b:9a:8b:
7d:ef:6b:2f:86:ec:ad:ae:43:fd:41:c5:5b:08:6e:f5:f2:65:
c3:06:b3:93:15:ae:4c:43:47:7a:40:72:de:45:4b:77:c5:03:
1f:6b:a7:26:ef:15:27:a6:b3:5b:f6:61:69:9b:d3:49:a8:bb:
05:8c:2e:c6:d8:b1:4a:d3:0d:66:a2:d0:3e:ac:47:5d:77:84:
05:62:2c:45:28:6c:09:40:a6:91:9c:74:e2:24:7d:fb:2d:78:
cb:24:29:af:24:00:15:cd:e5:4f:74:bc:ff:b9:58:fd:42:8a:
52:50:1f:b2:ac:fc:de:7f:7b:0a:be:ef:16:fc:e4:ce:f4:c2:
f6:8f:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:34 2026 by rpki-client