
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/1979A7C0586111EA9FC98555C4F9AE02.roa
File: 1979A7C0586111EA9FC98555C4F9AE02.roa (raw, json)
Hash identifier: DHpveC2DBL4gVq9gAp9i6p0IPtXQ+xG1GbXA8h9vNTc=
Subject key identifier: 79:31:D5:79:BC:E2:96:11:C3:AC:6E:69:3E:1E:F5:90:F0:C9:8C:EF
Certificate issuer: /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Certificate serial: 0B31
Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/1979A7C0586111EA9FC98555C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:45:47 +0000
ROA not before: Fri 16 Jan 2026 19:16:23 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138543
IP address blocks: 103.132.168.0/24 maxlen: 24
103.148.60.0/24 maxlen: 24
2001:df7:8100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2865 (0xb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F104D, serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Validity
Not Before: Jan 16 19:16:23 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a4511a-7f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:4a:22:5f:48:e5:4e:1e:9e:62:84:f4:67:
77:50:e5:8c:1b:b4:09:57:b4:c6:32:18:8c:62:be:
9e:06:84:af:4a:a4:38:02:7d:72:c1:c4:ea:db:e1:
86:b8:49:55:12:c1:5f:47:79:fd:53:a2:47:3c:82:
30:d8:b9:02:76:78:83:d3:71:5c:8f:4b:c7:8a:0a:
56:1b:53:f5:f4:5b:0a:f8:4c:38:e1:83:37:c9:14:
70:fd:31:fa:c7:df:e4:85:75:47:fd:e1:6c:c0:fe:
81:fa:39:e1:6e:b0:40:ed:a0:9d:1c:6c:2a:e0:0e:
c0:71:46:51:be:f4:5a:25:88:e0:9d:9b:0f:8e:85:
a5:b3:88:61:96:44:d4:d5:12:68:22:b0:0e:30:f9:
e0:17:75:97:85:2a:f7:bc:7f:4d:7f:03:a4:02:97:
15:45:ed:47:ca:51:21:57:12:82:84:a1:27:8f:27:
5c:fc:a1:f7:f6:fe:ae:8d:20:e8:3c:63:16:fb:78:
91:f3:dc:b3:a6:66:4d:a9:8a:b5:1b:9c:4b:f8:61:
0d:10:17:c7:36:eb:de:87:83:5d:e5:5f:33:b6:21:
d9:9b:16:57:7e:15:78:2f:fb:59:12:c7:67:f4:ea:
2c:3e:ed:6c:1d:cb:90:df:3f:18:39:04:f6:f6:73:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:31:D5:79:BC:E2:96:11:C3:AC:6E:69:3E:1E:F5:90:F0:C9:8C:EF
X509v3 Authority Key Identifier:
keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/1979A7C0586111EA9FC98555C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.132.168.0/24
103.148.60.0/24
IPv6:
2001:df7:8100::/48
Signature Algorithm: sha256WithRSAEncryption
3d:c5:e0:7f:22:09:78:34:0c:d1:25:95:fc:08:3b:d6:9b:15:
d8:1e:e3:73:35:7d:39:e5:2f:a7:33:c2:72:fe:b7:e6:67:5d:
9a:6a:ba:ab:f6:9c:3a:23:1a:48:af:8c:7c:10:f4:de:ba:55:
ce:b1:cb:90:9a:c9:26:cd:18:0b:da:0e:af:0b:31:a3:f8:63:
b2:71:5e:ee:e1:7c:7e:d3:7b:ab:27:c2:ab:79:71:20:87:a8:
0d:e0:81:26:68:0e:de:9b:6b:ba:b7:16:04:8a:a9:77:6a:56:
5e:40:87:02:d1:c3:91:b9:2f:83:cf:34:9e:ee:ed:9c:25:84:
4d:8d:27:c1:e3:24:7c:41:e5:f1:4e:97:a7:65:25:eb:3b:d5:
09:36:30:97:ea:25:e7:c7:29:ea:68:22:89:b4:f8:57:d8:a8:
ef:30:8e:33:ec:0f:85:1f:02:2d:d1:06:b1:b2:da:fd:9f:31:
8f:eb:fd:fc:46:39:44:fd:ee:09:e1:2b:c9:ff:c6:a6:cb:a2:
b4:17:fa:6d:24:4a:5c:1a:e0:dd:08:1b:00:54:de:61:2a:0b:
d0:5d:73:04:ac:dc:a9:e3:33:7c:0e:ca:32:5f:04:8b:ee:85:
8a:41:f5:e6:11:7a:d8:50:ad:32:b9:c1:5c:51:65:79:f9:e4:
53:b8:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:59 2026 by rpki-client