
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
File: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (raw, json)
Hash identifier: b4J/mYBm2hWS1nmxPAt6Hfta5HnSTHjYDCufGmuVc3o=
Subject key identifier: 67:BA:EC:FF:CD:FD:59:F6:EE:C9:1C:33:AD:B3:3F:8E:79:D1:4B:49
Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial: 0257
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:11:41 +0000
ROA not before: Tue 03 Feb 2026 02:22:16 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147303
IP address blocks: 103.29.180.0/24 maxlen: 24
103.29.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Validity
Not Before: Feb 3 02:22:16 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4653d-3afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:e5:47:eb:e3:41:fc:8f:e8:32:24:05:df:
4f:5d:6b:a6:f8:13:b5:56:4e:b4:e8:0b:57:c4:25:
d2:5e:7a:e8:d9:22:e5:7d:75:41:eb:3d:4e:ba:b8:
2d:8e:0d:40:c6:28:5c:75:23:98:07:a0:12:9f:48:
d2:b5:3d:fc:00:86:89:ae:92:4d:db:e2:59:52:e8:
6f:86:74:d4:bf:c8:c6:74:82:98:86:4a:78:b9:1f:
ca:0c:e8:76:3a:f7:5a:ed:0e:9c:85:36:3b:b0:31:
02:b4:5c:b5:dd:99:34:18:8e:ab:e6:dc:7a:71:33:
76:17:2f:c0:a0:0a:86:f3:9d:b5:71:3d:80:b7:f9:
d9:cc:8c:d9:30:c8:19:5d:0f:65:5b:be:f7:55:4c:
dc:82:63:cf:61:6c:a3:69:80:98:3e:ce:86:0f:0c:
c9:d1:b7:85:0d:c2:54:90:64:90:40:ff:7a:68:d6:
3f:18:26:59:f0:e3:2e:d1:af:b2:a4:ea:3f:a0:2d:
19:1b:ac:a9:5e:ac:23:c7:c1:96:d3:cb:79:5e:b9:
2b:b1:18:7c:d4:82:8b:5d:15:5b:af:0a:5e:5c:b7:
c1:ec:53:61:98:db:65:28:c8:e9:f3:1d:46:41:2d:
91:3f:6a:af:a5:9e:e8:a7:88:31:6d:2f:49:78:b6:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BA:EC:FF:CD:FD:59:F6:EE:C9:1C:33:AD:B3:3F:8E:79:D1:4B:49
X509v3 Authority Key Identifier:
keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.29.180.0/23
Signature Algorithm: sha256WithRSAEncryption
70:c6:03:6b:ef:1f:6e:6c:4e:7f:e5:5f:02:17:8d:b8:3a:d5:
43:ab:f0:f3:b6:09:29:76:68:8e:37:8d:b5:ab:65:d7:2d:e8:
f2:4f:df:f3:4f:f0:e1:47:a4:2a:ca:c1:68:97:78:5c:60:5d:
62:30:e2:cf:1e:09:28:1e:87:a8:c8:65:20:23:2f:c5:e1:91:
8f:e9:e4:84:59:bf:72:56:d5:45:25:bd:3d:ce:54:7b:40:19:
27:d2:82:6a:4f:02:ad:8f:c5:5a:e9:ef:45:0f:fe:ee:9c:d5:
de:e7:86:9a:87:38:95:17:ef:fd:64:8e:81:ea:17:4d:8a:a7:
45:bf:d7:e7:33:57:9c:ac:74:17:8c:d5:e0:ad:3b:0b:e2:71:
af:80:17:ca:cf:9d:6a:07:45:1b:2c:80:bc:ff:3e:69:d5:e5:
3d:91:59:df:e4:d5:e7:e6:84:fa:c0:d7:c1:3c:1c:49:65:0c:
30:ae:93:a1:95:e1:23:97:09:9e:0e:70:f3:60:07:3b:0b:e0:
c5:28:2d:6a:b6:03:98:ea:49:84:be:54:46:7a:c0:50:42:f1:
db:b0:a9:2e:9d:d8:4d:01:d7:0f:e7:0f:f5:d0:77:af:50:c6:
a8:9b:51:a7:93:40:d5:7a:95:43:55:f5:86:5d:a1:79:59:89:
5e:88:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:52 2026 by rpki-client