
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/273538D8CF7A11ECB4E21125C4F9AE02.roa
File: 273538D8CF7A11ECB4E21125C4F9AE02.roa (raw, json)
Hash identifier: sR9Q5gYhaXUrEJZM9cQm1+qd48doSCgPOC0vCQhvpRw=
Subject key identifier: 89:A8:DA:F5:B3:3D:80:56:F6:F4:B7:0E:3A:EE:4F:69:35:B7:A5:2D
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 12C5
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/273538D8CF7A11ECB4E21125C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:08:43 +0000
ROA not before: Thu 04 Dec 2025 16:46:52 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140096
IP address blocks: 103.200.112.0/23 maxlen: 24
124.108.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 16:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4805 (0x12c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Dec 4 16:46:52 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a480ab-a9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:c6:ef:c3:6a:e4:1f:bc:5d:52:fe:20:ad:
09:4c:a4:e5:39:1f:41:46:96:68:76:05:9c:38:11:
42:0c:4d:6e:3e:5b:3a:48:c4:d2:cd:fb:00:01:42:
1d:a6:f1:97:6c:35:b3:40:9e:ac:ac:27:6f:f3:57:
75:b7:27:20:1e:0f:88:09:69:7a:26:94:db:9b:27:
47:0d:3f:82:de:c3:4b:36:a8:38:43:c1:f4:81:ea:
f3:17:0b:97:4a:4a:3e:85:e4:f4:4b:99:91:5a:42:
9b:43:f1:a6:9f:fe:86:3b:fa:f9:1b:12:d4:2a:23:
5f:f5:d9:a1:53:fb:62:06:08:bb:b9:36:86:79:95:
08:9d:83:87:06:4c:c0:5e:98:3e:f3:3c:4c:92:90:
1c:55:24:5a:3d:f5:fd:d4:70:7e:0b:cb:6f:fe:04:
6a:0d:08:24:88:00:88:7c:71:23:d5:a3:94:ac:08:
2a:68:2b:49:e4:1d:62:9c:ee:44:54:68:1c:d9:3f:
72:28:48:2e:7f:0b:74:ef:3f:ad:f8:df:91:f7:e9:
ca:5b:69:21:79:e9:63:8c:86:3a:98:f4:3e:5a:ec:
1f:b1:db:ae:6e:e7:a1:93:c4:b4:54:8c:a1:fd:06:
85:4c:22:24:17:4e:b4:1f:0a:72:ac:00:3b:96:2e:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:DA:F5:B3:3D:80:56:F6:F4:B7:0E:3A:EE:4F:69:35:B7:A5:2D
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/273538D8CF7A11ECB4E21125C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.200.112.0/23
124.108.20.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:78:93:d5:04:8d:00:8a:c8:d6:eb:86:93:90:64:1f:6a:02:
c1:6e:85:bc:24:33:d0:10:89:54:f7:ba:4b:f0:81:52:7c:c8:
bd:a9:83:4a:23:15:47:e9:59:bc:2d:a5:a9:f7:0b:22:8c:6f:
8e:13:c8:ac:cd:b4:2c:aa:29:39:b4:2a:e9:f7:fb:6c:a5:20:
04:b8:5e:d6:a8:70:66:1b:10:04:59:5c:c6:4c:af:09:d0:91:
d0:4f:7b:0c:5c:c6:d6:19:44:0c:4d:75:f9:03:61:a4:0a:73:
ed:8a:ac:48:98:23:bf:a7:82:da:84:1e:fd:c1:d5:5e:fc:c0:
be:ca:a3:c4:1f:55:21:17:7e:c9:e3:f5:49:90:01:14:6b:55:
93:ec:26:66:3f:ed:17:00:41:4d:cd:ea:9a:a7:b5:ed:7f:74:
83:a6:45:ad:6a:f8:9c:43:f1:62:9b:cb:ea:8d:7b:fa:a6:77:
e7:f4:9d:7c:4b:2b:d0:ae:54:dd:12:bb:b2:1f:2d:2a:e6:b1:
6e:aa:f9:53:15:11:d4:10:5f:8a:c9:80:7a:f5:b4:dc:ae:78:
43:6c:a3:a7:e2:5c:ed:8b:11:33:ff:a4:95:cd:dd:0c:24:17:
b0:79:9b:36:05:b1:ff:a0:f7:be:78:1a:c7:26:67:dc:cd:6f:
98:7e:0a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:02:04 2026 by rpki-client