
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa
File: B3250BC6307B11E989188B3BC4F9AE02.roa (raw, json)
Hash identifier: pyrX7ab07D2AUC+ToBp5oB94QBQi2cPxuMyTXzH9YtI=
Subject key identifier: 98:DB:62:0A:9F:7E:64:2E:11:1A:D6:8B:AA:8B:F3:24:EE:88:7B:AB
Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Certificate serial: 115D
Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa
Signing time: Tue 31 Mar 2026 17:22:03 +0000
ROA not before: Tue 31 Mar 2026 17:22:03 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 136260
IP address blocks: 103.85.134.0/24 maxlen: 24
103.141.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4445 (0x115d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Validity
Not Before: Mar 31 17:22:03 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cc02bb-a5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:15:63:34:54:e8:51:01:9a:73:bd:5e:5b:
39:a3:e4:d8:ab:68:94:fd:b8:3f:0d:4a:98:7e:ea:
0d:10:b7:53:2c:5b:d4:7b:cf:88:7c:2a:62:67:bd:
08:53:ec:59:83:a0:30:4f:34:f3:fe:9b:c0:84:14:
2e:1a:ea:c8:9f:32:4e:b3:a5:39:13:cd:3f:23:82:
2f:ed:d9:9b:84:24:e3:aa:9d:fa:a7:7e:3c:f0:1a:
8f:3f:9a:6b:a6:d4:12:42:f7:4c:7b:95:ce:ac:09:
97:fb:0a:b3:67:4a:cc:1c:4a:c2:2d:02:05:81:3f:
21:4b:73:4e:56:81:b4:45:55:d7:21:f3:0a:87:af:
42:23:60:c8:25:27:ce:80:6e:f7:ef:18:95:a1:8d:
88:33:5f:93:67:c5:00:b6:93:10:a2:7e:95:f5:5d:
1c:80:47:8d:63:8c:26:0e:91:a8:33:40:a8:f7:9a:
13:7a:13:4c:14:dd:bb:a7:59:37:38:7e:e6:05:34:
8d:5a:e2:2b:a6:5c:13:ea:d2:10:4a:01:67:67:79:
ce:16:25:b7:43:c3:b6:9c:55:47:f8:57:ae:60:b4:
99:30:24:cd:81:f1:a2:97:aa:00:08:1d:6c:bb:a2:
c3:e0:26:5e:93:03:c7:a0:05:4c:d2:49:d2:43:05:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:62:0A:9F:7E:64:2E:11:1A:D6:8B:AA:8B:F3:24:EE:88:7B:AB
X509v3 Authority Key Identifier:
keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.134.0/24
103.141.29.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cf:be:40:e9:0b:5c:0a:2e:56:d9:81:db:de:63:9a:e4:8e:
4a:07:dc:d4:56:5c:08:4d:e1:eb:de:34:41:6e:7f:17:37:0e:
55:e7:0b:90:eb:49:ea:3d:ce:d8:1d:74:be:cd:21:45:15:58:
df:3e:f4:1f:53:94:48:a6:46:b0:c0:32:50:64:02:f8:1d:2f:
02:0f:ac:cb:e0:ef:ff:3c:6c:5e:05:36:29:f0:bc:f3:33:bc:
5b:40:3a:58:ea:0d:01:76:a5:8e:ab:e0:c3:b2:98:ad:2b:95:
21:b1:44:5a:e5:17:b1:81:f9:ec:64:c3:28:c4:cd:fa:cf:6c:
35:10:3f:b1:00:cd:5e:e9:26:2a:7e:44:33:11:f8:2c:45:f5:
40:e3:ed:36:b7:c8:6d:f2:24:1a:2d:43:24:c9:bd:ba:aa:f1:
ea:6e:05:69:d5:eb:39:10:a3:3c:0b:cc:6e:13:85:fd:ba:35:
63:72:7f:c9:19:7d:97:02:62:1e:85:9d:58:7c:b9:d9:4f:b5:
04:4f:07:c5:d5:e6:88:83:c0:d8:95:c0:2c:de:11:2b:f6:02:
b0:a1:76:de:1e:bc:02:c7:ea:57:c2:be:40:62:19:9a:b9:87:
d1:0e:17:2e:5e:30:f0:46:56:95:43:f8:f1:5d:20:71:e8:96:
5e:cc:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:12 2026 by rpki-client