
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa
File: CE751320B9D511ED89A5B11FC4F9AE02.roa (raw, json)
Hash identifier: f/BUsgYAhkNh1wPi/Yncazl1ahCQTWo+tZlrMOar91c=
Subject key identifier: DF:1B:F9:9E:48:23:68:30:30:73:0F:6A:45:C0:19:88:B8:64:0B:4C
Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial: 05EF
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:13:13 +0000
ROA not before: Fri 15 Aug 2025 00:05:29 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 976
IP address blocks: 103.170.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Validity
Not Before: Aug 15 00:05:29 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a473a9-8a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:61:92:87:74:ef:be:d2:2d:c0:c0:e8:ad:
ea:c7:b7:01:f0:cd:68:db:ae:cb:9f:af:b1:2c:1f:
a2:2a:d6:27:c7:0c:53:e5:b5:1e:b5:ba:3e:d2:74:
00:7d:20:25:dc:fa:8f:22:a9:56:4e:3c:36:c6:ab:
52:22:da:ef:92:99:9b:c7:a9:e3:04:50:9d:71:17:
6e:4f:ac:c5:a8:95:7e:b4:b1:b6:64:89:3e:48:49:
1b:c9:93:44:c5:5f:7b:01:75:a3:f1:9a:7d:27:ea:
24:d7:06:54:7b:25:a3:a3:93:b6:d0:57:af:c0:21:
fb:92:50:76:dd:31:c1:e6:0b:07:02:eb:4b:9b:d3:
2a:52:35:dc:a2:be:f4:bf:70:27:77:87:1a:14:40:
82:0b:3c:c9:80:f9:d8:b1:1b:6a:e9:6b:20:73:f1:
09:e3:a8:49:31:9e:71:47:b8:94:57:dd:9f:48:2c:
20:a0:04:40:2e:d9:f2:d6:77:a6:94:95:b2:41:e3:
9f:fc:c1:0c:75:05:37:68:b4:c4:82:f0:14:a4:6c:
cd:30:66:80:f0:af:94:1a:d6:ea:06:3c:fc:3c:65:
dd:12:4f:8b:01:85:af:4a:16:27:a3:6e:06:93:4b:
2d:c2:99:cd:4a:e7:fe:64:9b:65:d2:f3:5b:a5:77:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:F9:9E:48:23:68:30:30:73:0F:6A:45:C0:19:88:B8:64:0B:4C
X509v3 Authority Key Identifier:
keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.72.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c6:cc:16:34:29:ce:74:94:77:50:af:88:5c:a9:8e:6f:9e:
f6:4d:f5:89:53:33:3c:c2:b5:1b:e3:9b:e7:81:d5:71:80:eb:
50:7b:e3:29:b4:b5:cd:a3:18:3a:84:78:c1:9e:cc:c1:c8:f4:
9b:4c:2e:42:82:25:df:e4:9a:68:32:88:9b:15:69:d2:2d:1b:
16:b8:2d:2e:98:7c:f0:ab:f4:1e:12:64:b6:3b:9a:33:0d:11:
47:dc:b1:a8:60:1d:4d:7d:37:a0:3b:c6:50:23:8d:d9:bb:35:
d7:2f:e5:57:0c:9a:6e:a5:4b:8a:ce:aa:76:58:a3:2d:74:7e:
df:a9:9c:12:42:5d:e1:58:a5:c7:98:ed:7f:5e:a4:35:94:bf:
3a:49:3f:9b:09:e5:fb:9f:22:16:a6:e4:33:f1:00:68:aa:80:
c0:2c:69:03:23:37:ab:69:de:a4:b8:73:46:ff:87:9c:83:3a:
33:44:09:e8:69:c6:c8:bc:b0:9a:20:62:cc:8b:f5:fc:14:9e:
18:a2:24:9d:fd:20:e3:0a:7c:26:e0:68:ed:ac:d7:33:7b:b1:
e6:04:c0:d8:c6:21:f6:2c:b5:68:73:7b:36:57:cb:9f:68:07:
c9:92:6e:12:36:de:13:39:17:6e:aa:a4:63:ed:14:54:ef:ad:
f2:dc:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:34:59 2026 by rpki-client