
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa
File: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (raw, json)
Hash identifier: L0al7k74eWiWJ3CDPsdhftXr9mpgHroxqH7auSGrGNY=
Subject key identifier: DF:20:1A:B7:4E:FD:22:90:E5:2A:BC:12:CA:B8:F5:42:B7:32:03:D9
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 0253
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:59:10 +0000
ROA not before: Thu 29 Jan 2026 02:22:39 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138039
IP address blocks: 103.176.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Validity
Not Before: Jan 29 02:22:39 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4381e-544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:ac:1a:9c:84:ba:86:49:0a:f3:c2:75:65:
2e:70:5f:25:e6:a3:1e:55:bb:a1:b5:73:62:b3:59:
bb:4d:f7:5a:d0:a3:80:0f:97:37:0e:c1:f7:52:18:
f1:c2:f7:11:73:ae:5f:95:7a:f8:ec:d1:52:71:6b:
31:ab:78:04:14:2a:b1:33:31:82:e7:e4:16:53:ff:
2d:55:3d:7b:9f:b0:a5:36:c1:ac:bb:1e:b9:ac:27:
d4:70:bf:1a:93:6f:c5:cd:8b:a3:46:a1:9d:bd:ab:
9b:21:1c:37:0e:0e:ed:7b:6e:b9:f5:9a:f4:8a:2f:
f6:92:ed:cc:c3:01:ed:77:73:a4:8e:88:40:f9:ef:
f8:63:cd:96:50:4e:5d:ab:79:58:c0:d4:8d:48:f7:
57:d4:37:e2:fa:7c:2a:51:cb:cd:dc:d5:a2:8f:c2:
6e:56:56:d4:5e:e2:57:40:af:d9:34:a9:b9:9e:53:
85:c5:8f:2b:38:31:b6:76:bd:6c:2e:7b:9f:d4:5c:
12:1b:8d:9d:84:7e:1f:68:51:ee:90:85:a3:a4:b2:
23:77:d7:d5:a1:6c:48:6c:26:db:ef:8f:48:0d:af:
59:cf:f2:e1:c1:37:f2:cc:e8:3d:02:c0:da:a2:45:
e6:ca:4e:c7:ff:99:1b:5f:32:17:05:72:d9:b4:30:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:1A:B7:4E:FD:22:90:E5:2A:BC:12:CA:B8:F5:42:B7:32:03:D9
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:24:11:9b:7a:1d:bc:9c:a5:18:89:9a:3c:fa:4a:4f:cd:db:
e8:9a:f3:b6:58:40:ae:e7:aa:d8:98:bc:32:50:5b:50:27:81:
46:5f:16:9f:7c:5e:c9:3b:3e:e3:c0:7b:c4:c9:cb:c2:38:49:
c9:20:09:23:27:45:53:70:2f:fc:d0:53:1e:eb:0b:4f:56:c4:
f1:e5:08:00:90:ed:ab:b6:15:25:48:6e:a3:ab:97:ea:b9:d0:
f9:ed:43:07:fd:57:96:97:d1:dd:87:57:77:f4:76:b9:01:3e:
6a:13:fc:a8:77:04:32:d4:b3:e9:5a:fd:b1:e6:1a:de:9c:9f:
4f:f9:81:cc:1e:e0:ad:9a:20:b9:f9:8b:f7:1d:ee:42:c9:bf:
06:e9:01:19:5f:67:97:d2:48:b4:5e:93:71:6c:56:b9:bd:79:
96:d1:7b:42:c7:a4:e3:3a:1c:f2:78:f4:90:06:2f:0e:dc:aa:
6a:b4:56:95:ea:fd:8a:ba:90:d9:6d:70:1a:ca:a3:59:8d:26:
bb:40:cc:77:0a:6f:78:d3:60:0a:30:2f:4d:b5:97:b4:88:95:
e3:ea:a4:05:74:64:f8:e5:a5:48:24:e5:b0:6d:af:4a:b1:6d:
5a:2a:3b:18:81:41:57:0f:b2:05:68:7a:da:6e:37:0d:d8:ef:
c1:94:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:46 2026 by rpki-client