
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa
File: 67818EF02BD911F09AF6B821C4F9AE02.roa (raw, json)
Hash identifier: KPvqeYEjrP3rW7z9OSGAJVN9ZK2zCwOeNm8vtT/hE1E=
Subject key identifier: 79:44:43:6F:85:36:73:A6:45:73:42:49:BE:0B:35:44:E1:11:AE:A5
Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial: A9
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:49:54 +0000
ROA not before: Mon 13 Oct 2025 11:04:20 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 212836
IP address blocks: 103.173.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Validity
Not Before: Oct 13 11:04:20 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a5a392-2e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:58:54:60:12:45:5e:b3:55:37:43:e6:b9:
a1:92:94:48:58:d7:e8:91:38:56:31:9c:26:df:61:
74:d2:ab:40:d7:03:4b:cf:b4:8c:7c:2c:cf:01:dc:
10:5b:1b:c6:b8:6c:d4:4c:1b:93:ce:f6:d4:6c:03:
fb:4e:88:bd:fd:f4:98:34:7d:cd:bc:74:7b:01:1a:
78:19:09:f7:0f:fa:ea:73:7d:83:b4:f6:97:87:69:
28:90:4e:6a:69:58:22:4b:c3:05:16:25:9d:34:e6:
a9:80:d7:27:ad:4e:8d:fc:1d:77:c9:35:d8:5b:83:
59:c8:ca:fd:d7:22:a6:0a:ba:21:55:96:a8:81:c9:
77:5c:29:fb:60:55:65:3b:16:67:c5:5c:5a:4a:c6:
3e:5d:35:25:c3:43:dd:2c:4a:85:c6:15:3a:9f:a4:
a4:16:2b:05:fb:76:f7:63:13:3b:59:0f:2a:49:3d:
1d:71:b7:36:73:60:31:5a:87:97:a7:f2:91:23:ae:
72:53:b6:fb:c3:cd:55:d4:a6:08:03:76:31:d6:0c:
57:bd:a4:71:31:bd:ec:6b:a1:bd:10:33:2b:c6:dc:
db:63:7c:4b:c9:12:25:8b:53:61:9a:48:cf:3e:76:
8a:e5:fe:59:52:f7:ce:9f:ee:53:30:ce:39:4b:fa:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:43:6F:85:36:73:A6:45:73:42:49:BE:0B:35:44:E1:11:AE:A5
X509v3 Authority Key Identifier:
keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.225.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ba:9f:8b:03:5b:e9:fa:3b:4a:40:ae:76:34:bc:7c:f0:67:
e7:8f:f5:6c:42:da:c8:fe:9e:43:ba:ce:4f:4b:20:d1:17:c2:
fe:67:6e:d9:7b:00:e2:49:48:d1:5f:3f:03:8d:1f:f2:64:10:
26:a7:f5:4a:ac:e2:96:57:b7:05:f9:37:49:fe:89:ee:ab:89:
66:aa:0f:a4:5d:40:d9:d6:f0:05:ec:bf:93:c9:77:6a:1c:e9:
29:0e:1e:2e:4a:f9:95:b8:56:e0:5d:bd:b9:60:73:7a:0a:60:
e3:4e:e0:fb:b3:d7:1d:4e:48:f0:1a:61:46:63:ce:59:dc:6c:
4d:98:9d:55:1f:64:17:0e:d2:ad:c2:c9:eb:5f:ee:0e:2f:98:
e1:e9:a3:a1:dd:13:05:9d:73:5b:9d:14:6d:48:13:84:01:8a:
2e:50:8a:80:89:17:40:5a:8d:01:f7:e4:16:3e:1e:e1:b4:0d:
fc:4c:f5:c1:90:1f:89:28:92:88:36:c8:01:5d:4e:c4:a5:0c:
8a:af:77:73:b1:d1:49:ac:4f:0e:fd:94:c2:e8:4c:7b:1e:05:
2c:1b:19:23:79:de:9a:4d:05:17:1d:b1:41:5c:92:8b:99:8f:
84:ff:39:b9:8e:03:e8:e8:e0:a1:e4:14:26:70:b6:be:de:10:
fb:5e:b0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:15 2026 by rpki-client