
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/212691F85C8A11F09D065A67C4F9AE02.roa
File: 212691F85C8A11F09D065A67C4F9AE02.roa (raw, json)
Hash identifier: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=
Subject key identifier: 8C:58:C6:38:B4:5F:96:9C:CF:86:7C:6A:3C:7F:02:74:C7:22:51:61
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 03F3
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/212691F85C8A11F09D065A67C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:46:16 +0000
ROA not before: Wed 09 Jul 2025 06:01:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.26.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011 (0x3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jul 9 06:01:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a48978-0b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:3a:9b:fe:92:cd:51:49:96:4d:cf:50:65:
d3:d7:51:3f:50:4c:61:6a:09:ee:2a:ee:ce:e0:f7:
ff:02:dd:a7:fd:d8:e6:90:8d:cf:19:9a:94:e3:27:
67:2a:40:24:8c:2b:a3:64:ee:88:50:a0:d2:ba:4b:
e7:cc:d6:6b:bb:44:c9:4d:e9:c9:5a:55:48:11:a9:
d3:d0:38:a8:a1:f7:6d:24:d8:01:78:4c:f7:e2:d6:
45:0f:d4:41:bf:ff:df:31:d7:b8:0f:2e:41:3f:cb:
ec:b3:f5:ab:52:fe:db:d6:b2:70:1b:b4:9f:8e:7f:
d1:0e:fa:62:1f:31:5d:a6:b1:be:bc:33:78:86:18:
5c:b1:e1:09:73:0d:88:c4:25:7f:bf:0c:ee:df:3a:
b1:fe:43:95:ee:17:85:9e:fe:fb:cd:57:4e:c3:d4:
eb:0a:5d:ec:0e:53:eb:bb:6e:73:38:5f:0b:89:e0:
25:c4:49:e9:49:58:d4:ad:b7:31:4d:b7:22:8e:23:
28:29:30:36:5b:e2:98:33:07:9b:2f:1a:6e:fc:df:
2a:13:a2:27:eb:be:ba:f5:d3:d7:8e:01:c4:8b:bd:
6d:70:16:24:48:98:57:52:3b:75:07:31:1d:4d:05:
ce:80:f5:26:d2:a3:92:fc:92:36:1a:9b:6b:88:16:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:58:C6:38:B4:5F:96:9C:CF:86:7C:6A:3C:7F:02:74:C7:22:51:61
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/212691F85C8A11F09D065A67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.9.0/24
Signature Algorithm: sha256WithRSAEncryption
31:93:08:45:ac:01:57:32:a9:61:61:4b:36:5d:22:90:5b:25:
6b:32:ff:87:a1:2f:db:9e:00:5c:ab:dd:17:86:b5:e5:25:76:
eb:2b:e1:d3:ac:6a:03:2c:b8:e5:2e:9b:64:1c:06:71:70:0f:
a9:da:9f:c1:c9:9b:70:b8:80:7c:7d:65:f6:6e:71:42:07:1f:
31:46:c1:22:5b:be:6a:a2:85:76:14:a3:43:0d:31:3d:68:56:
69:40:e9:26:30:24:a9:7c:35:c0:ae:82:0f:6c:54:9a:a6:b1:
01:fb:71:53:b6:05:1f:bf:88:51:1f:d7:33:89:db:e1:0e:cf:
21:e5:70:36:ab:75:b6:1e:3d:fc:c4:61:4b:af:a1:8b:be:2b:
fa:7f:0e:41:e4:17:14:86:17:c1:62:d6:7f:70:74:ec:91:b7:
51:9e:7d:57:68:4a:f6:3c:15:20:47:1c:ea:a4:c0:83:4f:46:
bf:7f:52:fd:4b:77:b2:30:51:f4:c0:ac:97:b2:a8:dc:ba:eb:
72:de:73:f7:bd:84:3a:36:2f:aa:54:5e:67:10:94:5a:ee:43:
7d:9d:e8:75:b3:f9:4c:91:2b:5b:af:db:e1:28:29:df:f5:1b:
e6:67:36:2f:c2:6f:59:24:68:21:f2:ff:fd:17:c2:64:d7:4d:
07:7f:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:53 2026 by rpki-client