
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa
File: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (raw, json)
Hash identifier: 0ui+SiQ/c3MRovj/aJJcziARwvWd2KxwKuQ6NFEu4OA=
Subject key identifier: EC:4D:F0:A7:23:04:6C:95:A5:6E:A6:F8:41:15:FF:50:86:E8:E2:BB
Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Certificate serial: 0CBE
Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:55:09 +0000
ROA not before: Wed 04 Feb 2026 18:15:37 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 139722
IP address blocks: 103.134.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl
rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Validity
Not Before: Feb 4 18:15:37 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a47d7d-677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:46:59:28:5b:3f:98:74:ad:ed:23:b9:c9:
14:56:a4:e0:1d:34:c9:0b:36:b1:4a:36:99:81:db:
c6:20:4c:de:66:73:29:5e:1b:a3:d7:bc:91:6b:cb:
27:67:6a:aa:36:4a:6e:b3:96:59:28:f7:ef:53:f2:
63:86:30:e6:ea:d4:a3:ca:63:d2:d6:a1:7f:a9:52:
82:19:1a:95:3e:56:31:cc:17:01:c3:0a:6b:57:aa:
7e:77:b3:08:06:1f:40:58:7a:10:cb:31:a1:3b:af:
75:83:b8:a5:2a:7f:7b:c1:32:05:cb:f5:6c:ec:b6:
35:c0:bc:36:57:95:c6:e3:56:7a:62:a6:74:ea:fd:
9c:b9:63:75:35:06:d7:33:bb:a3:80:5f:8d:c4:2c:
67:af:d2:73:5b:b6:83:ca:58:af:a2:46:d7:84:e8:
09:f2:6a:de:31:d4:0e:58:f3:df:c8:20:9d:df:eb:
83:58:ef:37:86:6a:6d:a2:78:a4:1b:5a:a5:e0:1e:
49:19:01:98:59:78:3b:90:b3:b5:46:c2:80:06:2c:
85:e3:87:18:b6:67:33:41:e3:5e:05:4e:e8:8e:36:
26:57:a1:d0:ee:67:a2:8d:a0:26:cf:6f:4f:57:c5:
87:88:62:eb:3f:79:2f:cf:30:9e:b7:de:e2:03:4f:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:F0:A7:23:04:6C:95:A5:6E:A6:F8:41:15:FF:50:86:E8:E2:BB
X509v3 Authority Key Identifier:
keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.43.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7e:f7:d7:15:ef:69:bc:07:87:91:18:92:34:d9:b0:bf:9a:
4d:84:80:9f:1e:09:ac:63:b5:26:6b:9a:67:43:ff:5c:2a:3d:
06:9a:f0:e9:90:30:33:fe:e4:99:2a:f5:c3:73:cf:bc:e7:2b:
3e:56:45:69:a4:4d:9d:45:51:09:b0:09:9f:fe:4f:c0:ac:50:
bb:18:2b:63:d7:98:c5:74:e2:94:3f:c1:15:9e:2f:41:d9:47:
31:a2:7c:47:1d:69:6a:82:5c:21:e9:57:e7:22:78:dc:8e:27:
c3:48:4d:d4:a8:30:e5:80:86:30:86:05:9c:46:cc:22:1b:72:
f4:5a:cb:22:ba:ac:68:80:58:61:36:22:e6:18:28:60:db:2d:
76:04:f4:2f:24:1a:18:e7:63:a3:01:5b:a4:d8:6d:26:ab:a5:
08:c8:e8:0d:ab:30:85:8c:db:43:0f:85:0a:13:75:1a:0f:f6:
d0:f1:db:99:31:63:74:d2:16:a7:d1:77:3e:0e:81:ba:83:8a:
cc:d8:0c:8c:00:ed:34:cb:58:b6:13:45:60:5b:bc:8e:79:2f:
f1:51:81:5f:96:7a:e7:36:9e:34:9a:03:2a:da:7c:c8:b2:6d:
98:f5:b0:3b:0d:a5:99:d4:63:58:2f:97:35:91:fe:e2:3a:73:
ab:94:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:19 2026 by rpki-client