
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
File: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (raw, json)
Hash identifier: 7QH1OiU8+y0kM0Xbew8STqzznYlr3akTS6fkDWFomuY=
Subject key identifier: A3:A8:42:22:90:CE:27:79:EA:E3:B7:29:65:13:C0:2C:D5:4F:32:CE
Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial: 0211
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:04:47 +0000
ROA not before: Sun 03 Aug 2025 04:10:37 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 138995
IP address blocks: 103.112.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Validity
Not Before: Aug 3 04:10:37 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a47fbe-582c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:9d:2a:0a:25:db:9f:36:ed:18:02:73:b5:
49:fc:d9:e5:3f:c8:ca:e7:53:ad:64:8a:ee:67:72:
8a:0a:a8:cb:0f:26:e6:58:2c:b1:ec:16:fa:0f:59:
de:fd:de:74:2e:76:09:d7:f4:f8:a6:1f:ad:ec:71:
40:af:cc:dc:03:1c:28:98:44:37:d6:f2:ac:4d:9a:
98:c3:27:a2:89:45:dc:1d:ee:f5:06:15:38:6d:fb:
4e:ba:62:7c:d8:90:53:1b:d8:cc:ad:ba:9d:c2:54:
e3:07:0f:87:ba:b3:4f:c4:b9:ce:00:12:ec:d2:1f:
d3:4a:9c:12:66:2e:b0:9e:87:53:b4:90:41:52:6a:
b9:10:72:5c:e2:db:2f:8c:c1:28:97:27:22:81:be:
0e:3d:6a:29:31:d7:9a:7f:32:cc:11:19:c3:a5:4d:
ff:00:0c:f9:46:da:16:ea:46:0c:49:ff:2e:8c:3b:
d7:7d:eb:6a:a9:eb:6d:e6:4b:c8:1e:3a:33:fb:63:
87:5f:16:af:52:be:92:d5:f5:a5:75:1b:ab:9f:63:
70:db:ec:ba:f2:69:3c:34:cd:b2:4c:b0:f7:b6:4c:
4b:95:da:53:41:e8:fe:21:f8:3c:b2:5f:4e:5c:ab:
a9:e7:37:4b:da:3f:57:27:3f:1a:b5:c9:af:f9:d5:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A8:42:22:90:CE:27:79:EA:E3:B7:29:65:13:C0:2C:D5:4F:32:CE
X509v3 Authority Key Identifier:
keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D2093EF4EC6E11EEAEF9610BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.96.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:2d:d3:7a:4b:04:a9:39:04:28:c1:f4:c4:8d:f6:40:e2:52:
38:1d:c8:fd:41:4a:7e:f5:1f:1a:e6:b2:72:e7:ab:e4:af:b8:
4f:61:fe:cd:73:55:83:df:99:3f:52:62:fb:7c:48:d7:eb:58:
ed:89:cc:09:a2:1d:23:d7:6b:d5:41:f9:29:17:67:d7:b8:05:
a5:3c:8c:72:ad:4f:bb:00:c3:b3:c1:38:a6:b8:3e:b3:48:70:
7d:7b:fb:3f:09:41:b5:24:5f:95:f9:8e:84:33:24:c9:5a:92:
1a:ba:fd:03:b9:0e:0b:59:05:3c:27:23:5c:f1:c5:12:94:a0:
83:29:95:17:4c:fd:c4:08:5c:81:74:21:7a:3c:12:62:da:95:
dc:f4:02:15:65:da:9f:c8:c0:e9:a4:a6:a6:de:8b:d2:3b:0e:
e4:9b:47:c0:86:88:cd:83:a5:a8:e6:f5:1d:ba:42:3d:c7:52:
f2:33:ac:02:4e:f7:83:28:51:e0:80:a9:fb:2a:10:49:99:0b:
8a:42:07:13:fe:01:2f:e4:52:64:e1:bb:3b:17:42:c8:a6:5d:
d0:2c:0b:53:a9:78:a9:11:1b:55:04:56:58:13:2d:13:95:17:
ab:4e:cc:14:52:4b:73:c4:25:a3:c8:6b:75:7f:0a:a3:81:42:
2a:e3:e7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:42:05 2026 by rpki-client