
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/0EF4DA3A38D011EC936A8C4FC4F9AE02.roa
File: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (raw, json)
Hash identifier: 5AtvjYv/5JBxLgDIDbG/ZJKbMg4yztkVNaeXKIlbHXg=
Subject key identifier: AF:C7:9F:5B:97:A4:75:29:D1:A0:62:E7:E3:30:03:29:46:E6:5A:0B
Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial: 05DA
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/0EF4DA3A38D011EC936A8C4FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:39:00 +0000
ROA not before: Sat 09 Aug 2025 00:05:33 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140499
IP address blocks: 103.169.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Validity
Not Before: Aug 9 00:05:33 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a43363-24f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:39:d0:2f:73:34:02:a7:16:1b:5c:1c:d8:
2a:a4:ce:d7:78:ef:56:48:dc:15:e2:c5:0d:25:b5:
b1:5d:a2:a7:b2:48:60:cb:38:65:8a:a6:cf:72:d0:
b4:0f:96:79:a4:4b:1b:17:2d:9e:ac:c0:2d:23:4a:
f0:e5:6e:64:65:9a:58:5c:8d:a0:0b:77:c6:fa:31:
17:40:4d:ca:ff:f8:31:2c:00:14:2f:4d:7d:f0:59:
96:17:17:85:20:8f:fe:96:67:4c:3b:3e:b5:a1:e6:
a7:7a:49:ba:3f:5a:0b:1c:7c:d7:3e:a0:fc:86:9c:
6c:00:6f:e4:0e:1f:12:55:3f:37:9c:7b:e7:45:8a:
17:ad:18:85:5f:e6:12:3a:e2:2a:05:d4:1a:03:95:
a5:7b:35:11:bb:40:eb:be:9e:69:61:6d:2d:aa:76:
4d:75:f1:2f:02:cd:c0:cc:e3:a1:3d:8f:19:e1:de:
ba:02:8c:3a:d0:bd:e9:0c:92:c2:77:d1:fd:4f:8c:
2c:78:07:97:fc:7b:e8:31:b5:81:a4:8d:1e:57:e7:
8c:f4:36:3f:a1:80:be:76:d8:b6:8f:eb:36:2f:e5:
f5:7c:68:6d:75:23:81:be:98:2c:37:e7:87:ad:c5:
df:9f:fb:b9:b9:00:98:3c:e4:ef:ff:bc:f1:fe:ed:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:9F:5B:97:A4:75:29:D1:A0:62:E7:E3:30:03:29:46:E6:5A:0B
X509v3 Authority Key Identifier:
keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/0EF4DA3A38D011EC936A8C4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:b6:eb:3e:26:3f:c5:1a:14:35:df:86:59:4b:49:0d:3e:ff:
fe:78:ed:26:13:42:62:4d:3c:d1:d8:0c:4d:a8:67:e5:0e:2d:
48:c3:23:3c:d9:64:22:cb:e4:83:69:0d:7e:ea:fe:2d:d7:03:
36:17:e7:7b:57:f4:90:4b:0f:78:7e:1c:7a:79:b3:e5:c4:b1:
1f:93:1e:d2:41:cc:ef:39:88:30:ba:31:db:8e:a5:28:ba:be:
a0:43:08:1e:94:5d:5c:29:a8:5a:c9:d5:99:9a:99:3e:d9:70:
58:ec:73:83:5f:d2:80:f0:0a:3f:81:fc:69:f3:8e:f1:b3:09:
31:16:a7:39:d2:5d:17:61:70:03:28:b4:6a:0c:a8:a5:6e:34:
f8:24:4c:8b:37:53:c2:76:60:44:69:14:c8:0b:2b:cd:86:ab:
41:0d:2b:4d:1a:0e:29:d5:e2:41:97:c6:4b:0e:d3:46:92:1b:
5b:db:77:89:b2:6e:61:27:7e:c9:b0:92:49:5d:5c:23:11:9c:
0b:de:54:9a:e2:2a:26:c2:e7:9e:e0:a1:51:62:7b:b7:55:61:
32:0c:ac:76:16:a5:33:3c:f9:62:75:20:70:70:15:bc:1d:d4:
9f:7e:79:39:f3:3d:8a:ac:8b:29:8f:2b:80:f0:c0:c0:e7:72:
e5:ba:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:29 2026 by rpki-client