
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa
File: D78EA2DE44ED11EEA6685324C4F9AE02.roa (raw, json)
Hash identifier: l+wLTHIqrekcKTj0QKuQF0Rx57+DsEFBlDvziPYrkC0=
Subject key identifier: ED:1B:FB:36:1A:82:58:B2:0E:25:AD:BB:D8:4B:AA:36:63:F2:DB:2C
Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial: 0224
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:21:12 +0000
ROA not before: Fri 17 Oct 2025 13:39:08 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140443
IP address blocks: 103.215.228.0/23 maxlen: 24
2401:920:123::/48 maxlen: 48
2401:920:a31::/48 maxlen: 48
2401:920:1001::/48 maxlen: 48
2401:920:1002::/48 maxlen: 48
2401:920:1003::/48 maxlen: 48
2401:920:1004::/48 maxlen: 48
2401:920:1005::/48 maxlen: 48
2401:920:1006::/48 maxlen: 48
2401:920:1007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Validity
Not Before: Oct 17 13:39:08 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a43d48-a777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:bb:30:dc:d0:f5:ae:c2:aa:a9:2f:1f:fd:
ce:8a:9e:61:25:70:ed:3b:a9:0b:cd:74:ac:49:fe:
4a:33:ab:53:24:bc:09:8e:f8:68:88:2d:a1:0e:0e:
91:52:48:71:82:68:ac:d7:9b:9c:4e:68:83:d5:71:
49:65:79:e1:f3:6a:e4:e2:d0:46:6b:48:5d:a5:3d:
cc:ef:8d:ad:a9:59:bc:56:86:6c:67:cc:7e:e5:e8:
f5:5b:88:95:5b:55:98:78:ec:df:50:b8:ed:a2:f2:
68:5b:ee:61:19:16:2f:77:33:52:43:01:93:32:0c:
1a:81:36:5f:1e:db:95:24:cf:5c:c7:0d:55:85:2f:
37:f2:c3:ea:6d:83:fb:0f:e8:10:19:2e:7f:c5:d3:
5b:91:47:53:ba:28:96:97:ae:fc:29:a6:1f:58:db:
52:b8:9c:f9:5a:d1:8b:03:7b:f2:6a:fd:9d:31:d6:
a4:28:17:da:42:e0:cb:c1:ce:00:28:2e:23:01:13:
a5:b4:31:f2:10:70:17:9e:97:96:30:c6:28:93:9a:
5d:a0:e1:72:b5:10:6a:9a:08:86:ad:c3:cd:f5:b9:
c5:0f:f5:ad:82:6a:ac:c1:9b:2e:64:5b:01:5c:2e:
c1:71:ae:ba:d2:ee:c8:d6:ce:48:a8:d0:38:17:c9:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:FB:36:1A:82:58:B2:0E:25:AD:BB:D8:4B:AA:36:63:F2:DB:2C
X509v3 Authority Key Identifier:
keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.228.0/23
IPv6:
2401:920:123::/48
2401:920:a31::/48
2401:920:1001::-2401:920:1007:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:5b:c9:e2:33:29:36:f6:a9:88:03:16:e1:6a:e1:68:b2:c4:
60:25:24:6b:b1:be:72:a6:54:47:2d:cc:d2:52:b0:e1:bd:4e:
6d:2c:05:02:1b:f8:33:37:d2:ba:10:ee:93:52:bb:21:1f:b5:
09:5a:9a:7c:5a:5d:4b:e1:e1:7c:ec:1c:f5:d7:94:0f:51:16:
24:8c:6b:bb:1d:01:6e:32:54:0e:f8:7f:3d:3f:dd:3d:eb:6d:
0e:bc:97:69:b0:35:63:15:62:61:49:42:63:36:44:35:e6:87:
3e:e1:7e:59:3b:a2:66:0f:d5:53:28:1e:28:c8:43:23:72:0e:
99:d6:bd:02:91:e9:de:b4:10:9f:08:eb:6e:29:9d:f9:c8:32:
b0:35:7b:bc:52:f6:65:c6:a8:46:b3:ea:43:ad:ac:67:22:4b:
eb:b7:b1:c2:69:e6:c1:f8:30:80:0d:47:cb:59:94:41:2c:ca:
cd:b2:a9:e4:dd:89:39:2a:fc:c9:70:19:a2:ea:88:e5:08:99:
77:72:e4:41:5f:02:a4:af:84:69:77:2d:56:52:cc:ff:c2:f9:
f7:b2:80:fd:31:e9:94:94:89:68:f5:44:00:5c:18:ac:d8:04:
bb:96:29:50:60:80:00:1b:93:12:80:37:d5:51:45:84:29:e9:
98:e7:75:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:37 2026 by rpki-client