
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/B0B587222FC911F0938FE136C4F9AE02.roa
File: B0B587222FC911F0938FE136C4F9AE02.roa (raw, json)
Hash identifier: WvMUKRJ/MQUY3SrJVfsFmoPrpWN0YytCs2JWNp9BnBw=
Subject key identifier: 12:4D:61:49:4E:16:E7:26:4D:B7:C0:76:E7:54:94:E8:FC:AF:B1:B5
Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Certificate serial: A2
Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/B0B587222FC911F0938FE136C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:45:24 +0000
ROA not before: Mon 17 Nov 2025 04:53:06 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139785
IP address blocks: 103.40.224.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl
rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE
Validity
Not Before: Nov 17 04:53:06 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a58664-36f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:4a:bc:c8:03:ad:fa:23:72:d7:e0:74:c7:
17:35:71:e0:b6:c2:4a:32:3c:cf:b6:c8:c1:6f:23:
e2:4d:68:28:0a:b7:35:a6:e5:c6:0c:68:f7:16:e6:
c5:2d:19:48:bf:1b:94:58:53:2c:77:bf:44:9e:9c:
63:76:f3:dd:b5:5d:9e:f6:be:a4:c8:9f:3b:a0:a9:
58:f0:aa:eb:4a:8a:f7:3f:22:4c:f8:8f:10:05:d2:
e0:18:b5:7d:62:80:fe:ef:70:cf:85:46:2f:d0:89:
25:1f:ff:ed:ec:d4:df:66:66:ba:25:3c:b6:db:71:
46:a9:c0:33:51:0d:89:4b:7b:5e:52:71:7b:10:22:
a0:bb:b0:c5:ea:20:30:94:e1:82:29:14:bd:da:75:
8a:1d:ba:81:51:d2:59:a2:4b:5b:c4:96:2a:d4:fb:
2c:37:0f:ac:e5:10:ce:fe:3f:b0:3f:84:55:ef:5b:
b8:14:d4:2b:19:ec:5e:b0:29:de:5f:83:dc:79:69:
2e:7c:e5:d7:3f:9f:d0:57:a0:af:e0:34:5f:7e:d7:
e9:f9:59:91:29:da:63:7a:10:59:5b:f7:e0:8a:2f:
e4:c7:71:d7:66:53:32:e3:b9:51:75:35:45:47:44:
84:dd:7e:ee:bd:25:8e:98:49:34:25:b0:7d:73:6a:
ee:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:61:49:4E:16:E7:26:4D:B7:C0:76:E7:54:94:E8:FC:AF:B1:B5
X509v3 Authority Key Identifier:
keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/B0B587222FC911F0938FE136C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.40.224.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e7:ef:57:b0:3c:3f:15:e1:9d:33:7b:9e:68:a9:10:d9:ee:
6a:34:f7:08:86:7d:54:60:e0:82:a8:bd:25:c9:c5:ed:c3:b9:
ce:c7:61:22:87:ef:0e:11:a6:d0:b0:50:e6:82:cb:56:4d:94:
3a:36:32:a0:a5:40:05:12:09:79:04:47:7d:99:84:24:4e:07:
9e:a9:53:24:38:b1:4d:60:57:d0:6e:bd:d6:78:19:9b:35:fd:
a5:b2:03:e4:20:f1:49:ad:3f:51:b5:fe:69:c1:2a:64:75:60:
72:6a:c9:68:3b:24:80:b0:97:74:d9:e2:2c:c4:ba:64:e2:db:
ce:69:e9:36:24:78:b1:07:7c:de:51:7b:b6:7a:10:ef:09:2a:
95:c3:6d:8a:d0:dd:38:36:f3:f6:b9:6d:5d:40:b4:af:8c:57:
d3:0a:93:34:4d:b8:45:2b:92:11:2e:e5:71:a3:cc:be:1e:ec:
01:da:69:de:cc:9e:d4:4a:7f:e8:36:f5:27:16:ba:88:fc:3f:
68:58:61:bc:88:f9:72:01:0f:9a:43:a8:27:8b:ef:c9:d1:54:
6b:e4:4c:ae:c1:f2:ec:63:a6:fc:d9:ee:76:9f:c5:ff:31:28:
6b:10:5c:64:f9:f0:de:d7:57:9e:ea:62:93:6b:96:73:d5:cc:
8d:7c:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:28 2026 by rpki-client