
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa
File: A87755B68BCD11ECAF9D1512C4F9AE02.roa (raw, json)
Hash identifier: ifR0e4G41P02z/k7ZWaiJIHay7kWxh+mWy3DBA66jV4=
Subject key identifier: CF:5E:BC:22:FA:A4:A4:C0:18:CD:F2:56:F4:56:41:11:B5:7C:03:53
Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial: 0458
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:04:08 +0000
ROA not before: Mon 23 Feb 2026 07:54:49 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149508
IP address blocks: 103.181.122.0/23 maxlen: 23
103.181.122.0/24 maxlen: 24
103.181.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Validity
Not Before: Feb 23 07:54:49 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a598d8-70d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:c7:f2:fd:be:ff:4c:e3:86:6f:db:2d:fc:
6d:14:24:a8:67:f9:ba:6c:76:6b:40:e0:3c:4a:54:
e7:de:02:60:3f:f1:fb:fe:cd:96:38:b0:45:e3:09:
7f:27:82:c0:f1:1a:83:99:da:2c:d2:63:58:59:b2:
da:31:5e:3d:36:8c:16:62:76:fb:d8:fd:a8:69:f3:
0a:ec:5e:5d:f8:7d:18:6a:9b:91:4c:25:ba:e3:51:
fc:9e:ee:e9:2c:a4:1f:06:3d:c0:f9:e3:9e:93:70:
9c:ef:4a:55:16:db:aa:fe:5c:8f:2b:c5:ed:1e:18:
32:87:61:20:9f:e7:2c:be:d5:aa:f7:0b:eb:49:80:
87:17:db:8b:96:da:d7:cb:05:25:56:e3:ab:dc:17:
8f:ca:ea:5d:f4:03:af:ef:ee:7c:82:c4:d8:7e:c0:
c7:f7:8b:70:c4:dc:20:93:b1:81:02:42:84:95:48:
f4:9d:b8:73:cd:45:d0:8a:45:6e:29:1c:a6:5f:f3:
96:3f:c8:04:1c:0f:aa:ca:00:7c:87:59:de:8a:d1:
59:2e:dd:a1:fe:89:cc:51:48:77:69:4f:8f:74:fc:
8b:e2:74:6b:66:2d:58:92:fa:29:71:70:24:0a:0b:
f3:90:2e:c1:23:ff:f4:b8:a1:b8:46:2b:6d:69:d9:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5E:BC:22:FA:A4:A4:C0:18:CD:F2:56:F4:56:41:11:B5:7C:03:53
X509v3 Authority Key Identifier:
keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.122.0/23
Signature Algorithm: sha256WithRSAEncryption
12:b2:5d:b6:7b:79:a3:ef:3c:34:25:a8:33:08:40:dc:00:16:
51:e6:d0:3e:ad:a6:90:78:48:00:65:99:b7:e4:91:c3:60:7a:
ae:d1:78:a5:bf:18:07:ff:00:54:57:8b:4a:27:fb:1c:cd:58:
80:38:06:37:ec:14:52:56:da:50:14:28:c4:bb:97:21:c5:bb:
8b:77:da:a6:85:14:fe:41:5a:04:7d:f9:4d:e1:32:d0:91:84:
3d:6f:3f:59:c4:a6:0c:8d:de:cb:01:be:f2:66:3c:2a:0c:66:
67:4e:8f:40:45:a9:cc:58:2a:8b:df:a5:54:b1:76:06:b6:a2:
ff:92:31:7b:94:51:e5:62:fb:ef:2a:fe:e5:f2:e2:84:44:5a:
fb:b3:6f:33:dd:1f:90:a5:33:7d:88:22:3f:a6:86:fa:c6:d8:
e4:ed:81:03:53:0e:e4:89:53:b0:d3:80:1e:a0:11:19:5f:64:
51:f6:6f:37:f0:b7:ac:ec:57:24:31:7d:93:29:0c:67:bb:ae:
bf:ab:ab:41:8e:d6:27:e6:81:2d:59:72:18:05:5a:3e:c1:89:
b7:44:94:e1:35:b7:ed:0b:68:33:0e:ff:69:9b:03:66:e8:b0:
7b:26:8c:45:0f:f5:b0:11:2e:7e:91:05:3c:80:e5:2c:1f:69:
e3:ca:cb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:48 2026 by rpki-client