
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa
File: 838096CA3BD311EE84056461C4F9AE02.roa (raw, json)
Hash identifier: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=
Subject key identifier: 80:25:7A:B3:44:AB:C9:9A:31:6C:6F:F2:75:DD:13:1D:C5:FF:CB:74
Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
Certificate serial: 01FA
Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:08:35 +0000
ROA not before: Fri 31 Oct 2025 03:47:27 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134688
IP address blocks: 103.126.80.0/24 maxlen: 24
103.243.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl
rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
Validity
Not Before: Oct 31 03:47:27 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45673-af6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:2f:6a:86:61:e3:a1:66:fd:88:30:c1:70:
67:c1:e0:ef:b4:42:41:3d:48:52:a0:b1:bf:e3:73:
f8:5f:7a:8f:b6:00:20:9a:71:5b:34:10:6e:eb:ef:
19:0a:42:a0:07:5b:1f:50:cc:a4:d0:ac:60:f2:54:
b9:cc:f4:74:a2:e0:af:86:8a:4a:56:8e:9e:df:9f:
65:83:91:50:9c:ab:78:f2:ce:75:21:ec:bd:fa:2c:
3d:76:7f:03:d1:93:83:4f:8b:b6:b9:d8:4b:fb:52:
10:0e:5e:2e:2c:c5:71:f0:14:50:0f:58:81:bb:67:
35:34:c0:06:01:d5:a2:23:4d:8b:b3:cd:8b:45:5f:
d9:bb:90:71:be:5e:7c:6c:66:ac:98:70:b9:3d:79:
6d:d5:68:db:40:26:c9:93:e8:53:02:66:21:10:f2:
1c:b4:ce:32:94:9a:7f:8d:7c:d8:01:50:e3:1f:1d:
38:e0:9b:1f:1f:4c:4f:9c:c5:3e:22:c8:46:71:cc:
2d:25:f0:af:8c:e2:73:a9:bd:46:7b:4b:ee:ee:0a:
90:11:c0:64:22:7c:f1:fb:9d:47:a5:90:53:9b:65:
d7:cb:56:b3:1a:ff:a6:ff:eb:cf:da:9e:9a:5d:42:
ed:c9:7e:9e:47:66:f1:46:8b:d1:51:4a:6d:6d:21:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:25:7A:B3:44:AB:C9:9A:31:6C:6F:F2:75:DD:13:1D:C5:FF:CB:74
X509v3 Authority Key Identifier:
keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.80.0/24
103.243.17.0/24
Signature Algorithm: sha256WithRSAEncryption
96:10:84:17:21:72:f7:d4:d9:09:d3:d8:79:37:f7:56:4b:19:
0b:48:13:09:83:53:d7:04:57:cd:53:7d:7b:2b:37:6e:92:5f:
21:55:85:bf:69:fb:5a:97:10:b8:b8:83:af:72:da:1d:7a:a4:
a9:b8:91:88:b7:3e:76:b5:59:4d:0a:db:c5:6f:40:90:a0:4b:
42:fd:1d:86:cd:e0:d2:8e:98:26:9b:fc:76:b1:a6:3b:db:71:
65:1a:48:8d:27:dd:37:2d:cd:b7:74:26:01:5d:bf:29:28:bb:
5f:73:78:d4:c4:98:a1:f3:46:9e:b4:e2:93:b9:f4:e5:0e:c9:
f5:67:ab:87:cb:f8:06:e7:23:30:db:89:b4:64:7a:90:60:d6:
c4:65:29:0f:95:6b:70:25:68:b4:00:ea:42:45:9d:2f:57:71:
71:51:9f:76:18:ad:76:f4:c5:4d:91:4c:38:8b:e4:06:85:a3:
69:90:60:3c:fe:5a:0b:65:10:f2:eb:0a:37:79:db:e8:01:fe:
0d:62:96:ee:16:eb:5d:1c:49:4f:5d:cb:97:8d:9c:4d:2c:92:
20:9c:af:fe:78:9b:d9:36:50:93:1f:a9:cd:61:1a:9c:50:c1:
e9:e7:c1:42:e8:ef:6a:04:be:50:6c:61:e5:37:36:21:c6:cc:
be:9d:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:20 2026 by rpki-client