
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/FF41906ECD5711E9891EE882C4F9AE02.roa
File: FF41906ECD5711E9891EE882C4F9AE02.roa (raw, json)
Hash identifier: N1MxiNWDcRhs9V3+oDElXSu77YC7WZEZPRwCQu2D/KU=
Subject key identifier: 1E:71:86:85:CC:5B:C9:13:6B:3F:CF:EA:D8:C8:4D:0D:6B:35:B6:4D
Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB
Certificate serial: 0DF7
Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/FF41906ECD5711E9891EE882C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:37:59 +0000
ROA not before: Mon 18 Aug 2025 18:27:41 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 139622
IP address blocks: 103.142.170.0/23 maxlen: 23
103.142.170.0/24 maxlen: 24
103.142.171.0/24 maxlen: 24
2001:df1:4a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl
rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3575 (0xdf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB
Validity
Not Before: Aug 18 18:27:41 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a42517-219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:2f:8b:1b:61:54:2a:4d:cc:a4:5e:01:c5:
f2:39:c6:7c:08:7f:28:95:05:1d:c8:a2:b8:2b:50:
e3:ef:d0:1e:77:ba:0e:0e:ad:da:23:cd:0b:a0:44:
e3:6c:1c:b4:44:04:ed:6a:72:e8:57:5b:ca:01:e0:
3f:52:6c:f4:56:cf:65:c6:c0:ea:ee:bd:83:7e:59:
29:b3:10:f9:c1:4d:9d:bd:17:20:ad:8c:11:7e:39:
db:e9:1f:13:52:de:86:a3:c2:25:54:ad:c1:87:50:
a5:34:30:1e:48:1e:b2:04:fe:d0:53:b8:82:a3:f6:
c9:e0:eb:a2:ac:71:d4:9f:2d:9a:37:78:9f:ba:fc:
fd:e8:9f:8d:3d:6f:2b:6a:31:29:e5:13:fb:3c:95:
e3:0b:9f:7e:5c:a3:7b:a3:a7:5f:ef:48:d2:68:3a:
24:2f:dc:cd:2c:fb:1c:e6:cf:b9:0d:92:6a:25:41:
7c:74:0d:b9:ba:ab:43:fb:f8:a9:c2:d5:f4:dc:03:
35:a0:23:29:ba:39:0f:7a:d8:f8:2c:eb:1e:e2:c0:
38:e1:ac:d7:19:3f:d7:51:15:7b:07:95:05:75:5a:
ba:cf:db:f0:dd:40:bc:20:5d:5f:2a:13:bb:46:f6:
e6:18:00:d5:51:25:77:e6:3c:e5:f3:4a:2c:3d:b6:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:71:86:85:CC:5B:C9:13:6B:3F:CF:EA:D8:C8:4D:0D:6B:35:B6:4D
X509v3 Authority Key Identifier:
keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/FF41906ECD5711E9891EE882C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.170.0/23
IPv6:
2001:df1:4a80::/48
Signature Algorithm: sha256WithRSAEncryption
80:78:89:d2:93:41:11:c0:e1:2c:f6:71:05:68:bc:de:8a:18:
7b:89:33:18:2c:10:41:f2:c3:0e:e5:15:67:c5:1e:1a:90:49:
41:2c:11:e1:39:9c:19:df:e1:a8:5f:6c:0b:ba:2f:26:8d:93:
f9:78:7e:70:33:52:6d:79:ee:ec:af:27:85:e3:57:29:2c:26:
09:67:6a:0c:6a:e9:8f:95:4f:b3:1f:82:5e:b0:95:8b:4b:d2:
85:a8:aa:8b:fe:64:bd:86:a4:8a:ab:45:ce:bf:88:a4:66:66:
cb:32:22:95:78:ea:60:91:e3:98:a4:86:6c:46:c8:1d:5e:49:
61:1c:16:f5:18:88:0d:7c:70:ec:bb:8c:26:24:a0:5f:92:96:
06:ff:9f:a4:59:29:9d:40:dc:88:85:09:c0:74:81:0c:6e:c1:
4e:56:42:23:57:19:c5:00:4e:24:99:88:20:a9:e7:01:11:62:
79:21:aa:95:52:4f:b9:08:b9:30:15:61:d1:a6:4a:e3:45:e6:
21:b6:68:87:bc:7c:00:ab:9e:e6:7a:c7:9e:34:32:2f:00:97:
2a:62:68:ca:dc:91:c4:c1:7d:b0:8b:f2:88:15:ec:49:d2:a5:
80:ec:d9:8c:e2:66:42:3a:59:97:cc:c0:ef:95:83:fa:4b:73:
8f:48:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:33 2026 by rpki-client