
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
File: 11330A4663F611ECB344F979C4F9AE02.roa (raw, json)
Hash identifier: 3M+74bn/sA2p4TiZmfBp8pwqRm0NY6QA2mPOgZx57gA=
Subject key identifier: 0E:D6:7B:31:A8:69:74:49:38:B4:34:17:48:DD:2E:10:02:C3:2F:C7
Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial: 0509
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:08:08 +0000
ROA not before: Sat 22 Nov 2025 22:45:12 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 17439
IP address blocks: 103.173.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1289 (0x509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Validity
Not Before: Nov 22 22:45:12 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a46468-7f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:49:97:db:24:88:42:0b:0b:53:ac:1e:f2:
54:ce:f4:0a:f3:c4:87:b8:fd:3c:c3:15:b2:84:5e:
4f:87:7a:fd:28:62:d9:45:6a:0c:17:a2:75:21:94:
cc:aa:66:89:73:02:c4:2f:79:a2:47:0e:7b:03:3d:
14:1c:56:a3:1e:12:c0:e0:d2:4d:a5:b2:a9:26:db:
02:50:09:49:d0:97:3f:43:b2:aa:21:3f:f0:3b:37:
57:a3:7a:78:5c:c2:b2:46:db:2f:51:17:26:b7:4e:
be:f3:4f:63:20:39:7a:ba:31:de:e3:92:d8:8c:2e:
09:e6:e6:c9:fd:83:e2:79:d0:67:cd:7e:b6:95:10:
0d:cc:5d:a4:1d:64:dd:16:73:02:a9:70:d9:f9:fa:
d6:45:1a:eb:5c:6a:eb:4f:b9:17:79:b2:2f:09:36:
33:73:c9:e1:b1:d5:fa:91:71:4a:81:73:04:1d:d7:
7e:b6:cc:52:17:8f:89:38:7d:a7:d8:cd:15:3a:6e:
c9:0f:48:54:a3:87:71:1b:dd:bb:8a:f2:47:95:7a:
a7:50:e9:23:c9:dd:62:23:9d:33:2d:ec:88:60:40:
c6:65:23:7c:0a:b7:ef:d1:5d:f9:20:e4:05:3b:41:
8f:86:26:19:22:53:a6:1c:b9:d7:64:f1:9c:3a:1d:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D6:7B:31:A8:69:74:49:38:B4:34:17:48:DD:2E:10:02:C3:2F:C7
X509v3 Authority Key Identifier:
keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.112.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7c:32:db:44:21:5d:ef:85:ef:ce:f5:a2:43:0b:7b:b5:69:
9a:e9:ad:25:32:9c:f0:64:a6:cb:7b:c2:16:6a:9d:2b:02:e7:
ff:14:cd:58:cb:4c:d9:24:1f:95:a8:28:56:22:63:58:a4:b8:
3e:9e:1c:b1:75:dd:16:92:a9:7c:2f:b1:e8:ae:0e:cb:4a:cc:
82:ca:c7:c0:31:4c:dd:a3:cc:a0:54:05:92:57:71:a0:da:3b:
ed:19:aa:fc:ba:87:1f:19:da:85:42:75:92:f4:c3:bd:d1:fa:
65:68:01:be:2c:e3:66:65:d2:a4:44:86:b6:23:dc:d8:65:3b:
90:82:3e:6c:3a:6f:64:f5:dd:9c:00:85:76:25:c6:c8:ce:6a:
67:18:b6:79:cd:e6:ff:d0:68:ab:5f:48:6b:e5:36:60:0f:5a:
a4:3f:a9:fb:5b:ce:97:cd:37:04:1e:0c:45:f9:56:a7:88:24:
73:1b:72:eb:3c:00:6e:52:b2:ba:e2:08:9f:b8:c8:54:bc:ae:
ba:12:87:e0:ba:ef:99:39:3c:89:1d:d9:46:8d:8f:d5:fc:4e:
aa:dd:5a:c9:61:32:33:34:ff:cc:74:65:41:d2:71:55:31:e5:
3c:f0:94:ac:93:61:e1:1b:10:b7:d8:ff:26:2e:22:24:da:1b:
ed:57:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:17 2026 by rpki-client