
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa
File: 234D0D6C500611F08771CE55C4F9AE02.roa (raw, json)
Hash identifier: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=
Subject key identifier: 56:73:2A:5D:C2:86:8F:9A:37:5D:3E:EA:90:9F:E4:63:40:ED:06:37
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D34
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa
Signing time: Mon 02 Mar 2026 19:23:54 +0000
ROA not before: Mon 02 Mar 2026 19:23:54 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9311
IP address blocks: 103.15.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 18:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3380 (0xd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Mar 2 19:23:54 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a5e3ca-a15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:56:14:31:90:1c:f1:63:1e:d7:6e:d8:e9:
f3:ed:4f:a1:8c:8f:74:3c:2d:3f:8e:43:05:b0:9d:
4b:78:4b:3d:de:21:cc:c6:73:27:37:af:3c:4a:44:
e8:28:e0:30:17:7a:d9:d2:8d:4c:69:e8:d7:79:dd:
d6:2f:7c:55:71:a6:d6:86:37:61:10:05:12:18:fe:
23:aa:f8:07:5b:27:b5:9f:af:92:de:da:21:71:2c:
01:f7:e5:d1:be:a2:84:04:21:71:e7:da:97:a9:3b:
6c:16:7b:0b:5d:fa:d6:e1:65:d9:7c:57:ec:90:68:
ec:29:06:a9:22:94:72:52:c2:a2:d2:5c:8e:35:91:
ca:f3:ac:08:61:ba:2a:86:26:81:02:5f:24:56:21:
a1:d5:3b:bd:3e:4f:d2:eb:5f:3b:d0:04:5e:a7:74:
79:45:00:87:60:e9:84:60:7a:6b:34:59:3b:44:c1:
45:c1:4f:9f:d0:7f:c7:b1:50:83:13:0c:9f:f0:80:
9a:3e:ff:39:60:5e:74:17:3e:15:33:74:41:8f:28:
07:3d:42:26:1c:c5:c7:10:c2:d5:b4:73:8e:60:d7:
db:b0:15:08:a3:73:ed:1f:1a:1f:8a:78:e2:81:1b:
da:8d:71:91:1e:e6:21:af:42:35:d3:d4:47:91:e6:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:73:2A:5D:C2:86:8F:9A:37:5D:3E:EA:90:9F:E4:63:40:ED:06:37
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/234D0D6C500611F08771CE55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.79.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4f:39:7e:44:5c:43:b5:c8:ad:b9:ca:3d:3b:71:4d:a5:88:
64:1e:bb:9e:7c:7c:60:99:1e:94:da:69:04:37:ba:35:cd:a1:
2c:e6:bf:a5:23:ec:6d:a8:29:f5:d0:1a:df:92:dd:a1:85:76:
fb:56:50:87:82:bf:ea:50:2e:cf:91:05:78:41:13:e7:bc:c3:
f8:61:7c:9c:95:60:25:b2:37:82:ec:41:ef:37:30:73:54:90:
25:3d:95:46:03:15:4f:c0:e0:c3:5b:3c:c6:a5:36:85:d3:b3:
c9:7b:11:13:d3:c2:6a:a8:4d:99:ff:45:7b:ae:57:81:dc:9c:
e5:0b:a8:7a:56:32:30:cf:e8:b0:77:32:93:6f:cb:c4:4e:8d:
b8:94:29:93:a9:f7:b5:17:89:1a:95:24:13:39:c6:95:77:60:
c9:fc:ff:97:14:10:3f:3f:6b:53:ad:e2:14:42:17:6a:88:8a:
e4:9e:d2:01:36:83:5b:c6:23:aa:fc:41:28:60:be:e8:b2:c5:
97:48:e8:a3:db:09:4c:72:46:f4:34:14:71:5d:93:63:45:14:
0f:49:74:07:62:f2:e2:49:0f:b8:17:31:31:ea:f6:43:54:cb:
4e:04:1c:66:2f:84:9a:2d:7e:9c:0c:61:de:82:7d:45:00:3a:
d1:9c:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 06:30:31 2026 by rpki-client