
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
File: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (raw, json)
Hash identifier: EzVOB6yND65vVPlC6Th54TO2UcRfGpLytU4kXAiilIU=
Subject key identifier: 5E:4C:D2:36:ED:42:C9:B8:12:4D:FA:A6:A0:BE:13:A4:C5:B0:8C:B1
Certificate issuer: /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Certificate serial: 0B80
Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:26:44 +0000
ROA not before: Sat 24 May 2025 19:34:44 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135311
IP address blocks: 103.213.240.0/23 maxlen: 24
103.213.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl
rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2944 (0xb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F88F4, serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Validity
Not Before: May 24 19:34:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40654-0e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:02:30:52:c5:d9:49:f5:67:1c:ab:5c:22:
91:a9:92:61:1b:b2:9a:82:3a:c8:26:9d:23:fe:77:
25:dc:72:68:b6:50:91:52:75:ef:ec:bf:5d:f5:39:
9f:2c:9e:54:c6:cd:18:1b:57:d2:dd:de:36:80:4e:
17:a6:16:03:4a:d9:3c:da:17:96:47:d6:42:82:a0:
33:41:73:1b:69:bf:1b:89:5a:48:a9:cc:50:47:63:
17:bd:4f:fd:26:7c:3d:78:e4:95:89:2a:8c:b7:36:
3e:2a:80:bc:b5:34:1b:98:42:d8:cb:ef:1a:48:0a:
35:6d:79:67:99:c4:36:6a:f3:16:b1:66:01:ad:b4:
f5:c2:be:32:81:bc:25:dc:e6:65:de:6b:40:3b:17:
11:dd:75:a1:3c:a1:18:e3:4e:ad:02:d4:5d:1d:c0:
47:79:3b:8e:a6:5d:2e:21:e1:4f:96:7b:10:5d:75:
84:31:4a:3c:58:fc:fd:6f:05:a8:0c:89:a4:45:ea:
b9:2e:b2:b8:91:a7:0d:c2:e4:9b:e1:67:0f:94:c6:
f5:41:85:b0:3a:b5:0d:56:c9:88:5c:2f:99:25:f6:
6c:ef:93:d7:27:fa:e6:fc:42:dc:22:29:95:5d:4e:
6b:21:49:d9:0d:8d:ff:2e:92:27:f7:4a:6f:6a:f9:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4C:D2:36:ED:42:C9:B8:12:4D:FA:A6:A0:BE:13:A4:C5:B0:8C:B1
X509v3 Authority Key Identifier:
keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.240.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:76:dc:b0:cc:75:55:9b:5c:76:29:49:34:14:5f:15:f6:f2:
f1:c7:7f:2f:99:75:87:7b:65:64:bf:29:a5:b9:39:4a:f0:03:
cc:fb:d3:08:2d:e6:77:d0:c5:ab:5e:3b:b4:c3:67:50:bd:c3:
48:44:9d:4a:18:91:72:be:03:03:99:af:05:f8:38:0b:5b:2b:
81:8e:ec:53:57:fd:66:f9:60:f1:b8:7d:4b:67:37:c2:57:46:
46:d3:ed:55:28:0b:a8:47:fb:e5:b4:54:95:a7:1e:eb:49:a0:
e2:6b:d7:bc:ae:7a:a8:73:f6:8f:0d:6e:1e:31:fa:b1:33:c0:
8a:85:fd:6e:0a:11:5b:5c:b1:f4:c3:bd:1f:a8:e2:e5:08:e7:
c2:32:2e:8b:c3:2e:48:37:60:75:ff:61:9a:57:9e:90:a4:14:
e9:37:d0:e7:1f:e5:c6:48:62:b6:f9:85:c6:79:c1:b2:e2:f3:
4a:b3:c6:9a:74:aa:2a:ce:8a:d4:ab:7d:d2:c6:23:c8:89:2c:
82:42:8c:4e:bd:05:8a:e7:0f:2d:00:88:c8:85:2e:ca:ba:e5:
25:26:26:2e:0a:cd:dc:8c:4a:a9:53:37:9d:62:8f:25:28:fe:
c4:e9:04:9d:f5:c4:ac:f4:60:e9:aa:e8:f7:6c:fc:73:d1:47:
31:68:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:16 2026 by rpki-client