
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/289652667B7511F0A2592A6EC4F9AE02.roa
File: 289652667B7511F0A2592A6EC4F9AE02.roa (raw, json)
Hash identifier: SF2C+YB+2OsCjgL1wRHHBqrGMEzPgqA1TH4Uv/sOgc4=
Subject key identifier: FF:8D:CF:7B:D6:47:64:6F:7F:0E:1D:B3:0C:8A:4A:FD:B4:03:79:BB
Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Certificate serial: 01C0
Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/289652667B7511F0A2592A6EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:04:53 +0000
ROA not before: Wed 15 Oct 2025 07:01:36 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141209
IP address blocks: 103.252.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Validity
Not Before: Oct 15 07:01:36 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43974-8de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:d0:00:9a:44:3b:7c:90:e5:ae:a2:20:ab:
91:dc:32:32:c9:0a:a2:66:b9:8a:f1:4a:5c:17:12:
9e:81:72:85:c2:5b:ec:69:ec:22:0f:53:03:fb:8e:
78:a2:9b:d7:1f:b1:16:d3:16:91:c1:4c:fd:90:c0:
5f:b7:43:23:a4:06:0c:f0:24:7c:ed:8f:4c:fd:fb:
77:d1:a3:61:92:7b:6b:bc:03:e9:3a:38:c5:46:7e:
93:9e:68:f3:8a:b9:f4:5d:c2:e0:05:dc:d7:98:26:
43:44:c2:fc:70:10:ee:27:a5:9e:99:08:e2:16:a8:
77:e7:25:9a:77:e3:b0:60:62:21:ce:fe:6a:5f:a5:
c9:1c:5a:bc:9c:87:51:4b:9a:13:1c:19:c3:f5:d1:
c4:b4:0f:48:88:5c:24:4d:6c:2a:7f:80:4f:94:03:
08:bf:fc:ed:26:42:1f:01:5a:06:c8:1e:45:5e:a3:
87:ba:76:85:7e:ef:97:cf:fa:40:9e:72:8f:7a:68:
e8:4b:cd:8c:a0:90:5e:bf:b5:c6:e0:ca:53:41:f3:
3f:9a:04:33:b0:dd:12:96:23:3f:a2:d2:72:79:c5:
4c:ec:be:6a:e9:32:5c:86:a1:4d:3e:55:02:92:8e:
48:1b:62:84:0e:9c:6d:5e:72:fe:fd:27:61:24:61:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:CF:7B:D6:47:64:6F:7F:0E:1D:B3:0C:8A:4A:FD:B4:03:79:BB
X509v3 Authority Key Identifier:
keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/289652667B7511F0A2592A6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.121.0/24
Signature Algorithm: sha256WithRSAEncryption
94:22:41:f3:05:28:ea:36:79:a6:2c:f5:55:f4:db:17:51:99:
53:4a:10:35:ff:85:0a:d1:13:42:6a:7a:85:1c:2e:e4:98:30:
a2:24:5f:17:46:78:5a:1f:3b:08:79:66:0f:63:6b:15:43:ad:
0a:22:04:38:22:1b:cf:0f:13:95:dc:9d:5f:ac:1c:ee:27:04:
5a:ff:cc:84:df:8a:e5:a5:c0:54:9d:80:8d:1a:ef:3b:5c:0d:
bc:0a:b9:1d:d9:7c:b4:54:f6:0f:94:91:b0:3f:07:68:42:98:
a7:08:fc:af:78:05:f6:63:f2:87:90:a2:d2:d4:9c:2b:40:84:
21:6f:b9:d9:82:06:05:43:f9:cb:f2:a3:ea:c9:ea:b8:a4:f0:
36:aa:d7:44:fb:a4:9f:94:99:d8:ff:cb:f3:81:a7:ba:7b:80:
a5:76:75:dd:d8:af:a7:6f:66:46:30:05:72:5e:ed:08:7b:68:
26:75:83:5d:fa:21:72:24:ae:87:3e:97:80:9f:6f:17:71:9d:
3d:61:f6:f9:81:d9:7d:35:6c:44:fb:32:3a:13:2e:b2:12:3e:
16:8d:76:1c:98:ee:2d:a6:ea:21:f7:e0:6b:c4:dc:4b:cb:e9:
c8:24:86:a7:e5:a7:19:82:e1:f2:40:32:72:d3:ce:96:66:48:
dc:22:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:46 2026 by rpki-client