
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa
File: 0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa (raw, json)
Hash identifier: Ny314IGo19wl8MjOcZI74Zy4zGs2+uD6dX7RODZKGgw=
Subject key identifier: 13:BF:75:3C:EE:B1:68:23:E5:E7:B8:21:7C:5E:68:80:05:0D:AA:D8
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0C26
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:48:36 +0000
ROA not before: Wed 21 Jan 2026 07:34:04 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 5065
IP address blocks: 43.239.106.0/23 maxlen: 23
103.23.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 18:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Jan 21 07:34:04 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48a04-2674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:91:75:57:a5:25:55:6c:25:9b:0d:6c:ea:
cb:ee:c9:ac:05:0c:a8:8b:56:7a:30:1b:05:bc:2c:
2d:82:77:17:d2:4a:21:0b:7a:95:24:ce:11:52:f6:
04:55:32:63:65:54:50:96:08:d8:51:0e:d9:7f:cd:
af:b4:d7:99:c8:84:85:f3:ab:57:a9:0f:fc:a4:f2:
a0:43:2c:fc:e5:2c:d2:4e:50:05:2b:b9:cd:3e:55:
19:a4:ef:8b:3e:63:17:7a:8d:7d:7f:fa:3c:f6:da:
03:a1:c5:aa:90:da:0d:ae:8d:7f:c8:65:28:08:6b:
dd:44:22:f6:df:9b:76:97:25:54:e0:de:72:27:c3:
16:f9:a9:11:01:14:11:a0:b8:45:98:86:cc:fb:8a:
ec:05:61:7e:3e:73:fa:9f:32:8b:a0:b6:19:bb:48:
44:2e:78:0e:7f:ad:9c:f1:d3:9a:65:70:67:fc:7f:
4c:c7:a9:2f:1c:44:7c:82:78:d6:46:1a:13:d8:78:
ae:fe:81:99:24:9b:6a:83:92:9f:a6:11:f8:99:56:
ce:8c:3b:60:c5:fc:7b:db:1c:44:e6:d0:66:eb:b4:
b8:8f:06:f2:cc:56:4c:c3:ed:ea:eb:b7:04:51:5b:
9d:d6:b9:cb:0d:5e:12:bf:7a:4d:4e:bc:c0:ad:6a:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:75:3C:EE:B1:68:23:E5:E7:B8:21:7C:5E:68:80:05:0D:AA:D8
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.106.0/23
103.23.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f0:53:c3:54:d5:55:a4:75:b1:9f:b7:22:c3:b8:da:eb:21:
b2:31:4b:8d:e6:8d:17:a7:89:85:4a:23:e7:46:a4:8f:37:db:
41:dd:3d:c7:f4:5c:0e:82:68:af:39:07:20:46:85:bd:e0:29:
61:b8:72:6c:e2:f0:d1:3f:65:05:af:96:a0:52:d8:a4:c9:b6:
88:39:85:47:99:fa:9d:e0:88:ac:34:75:78:41:46:ac:9f:53:
60:12:bc:d3:18:73:c9:21:c1:8f:16:b1:63:9e:79:fb:2d:95:
7f:f0:d3:25:dd:59:09:ed:0e:53:fc:86:0f:6c:81:50:a2:52:
fc:d8:21:0c:13:39:4d:98:79:65:5b:97:0d:d6:78:81:2e:aa:
7f:90:e9:cd:71:6d:a4:43:5b:bd:0a:68:ae:a9:19:9e:a0:b5:
e9:37:af:b7:41:3c:a3:14:51:fc:7f:ea:f9:a3:ff:a3:79:8e:
64:84:41:f2:22:96:d9:04:b1:9e:6e:af:8e:c6:00:11:00:a9:
b5:c1:da:11:48:6a:08:d4:13:60:9a:08:40:af:a3:1a:f3:21:
70:f6:aa:56:be:d8:e2:6f:81:e8:a6:de:70:24:04:b5:7d:25:
7d:b8:46:c3:90:3c:70:62:9d:6f:0e:e4:ce:c0:b9:da:ee:0c:
12:e3:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:02:57 2026 by rpki-client