
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa
File: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (raw, json)
Hash identifier: VRl3r6QA/RiXbXiIjyAheH1mdihJQ/86RScyJbRxe14=
Subject key identifier: CC:8C:1A:70:D8:5C:41:CF:1D:58:4B:2A:2D:12:79:B2:CE:CB:7F:6D
Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial: 120F
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa
Signing time: Mon 02 Mar 2026 17:21:08 +0000
ROA not before: Mon 02 Mar 2026 17:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136897
IP address blocks: 103.127.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4623 (0x120f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Validity
Not Before: Mar 2 17:21:08 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5c704-4a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:e5:3f:43:a7:96:43:91:6c:d9:89:a8:66:
ad:ec:96:b2:bc:90:ba:a5:89:c6:ed:3f:e4:e2:86:
5d:7a:ae:08:a8:27:03:9e:11:cd:7d:48:ab:3c:72:
c1:78:59:89:20:f9:e9:4c:88:15:33:ea:98:1c:c4:
96:27:7e:c2:da:7a:4b:17:da:9d:3f:fa:3f:81:98:
e4:2a:5a:6b:5e:73:96:ea:26:0a:34:97:9f:d6:bf:
58:fa:b6:3c:9b:69:4d:89:44:62:ec:11:b8:66:00:
8e:94:8e:59:f2:19:03:56:7f:57:c1:16:ee:78:44:
31:4f:5b:72:e3:b0:6d:4a:30:ea:3e:2b:5b:10:6e:
58:1f:48:9b:69:d6:54:6b:0f:17:b2:79:7f:4e:a1:
c7:96:7a:6e:1d:11:77:aa:98:57:cf:41:94:ab:c7:
e6:77:82:ff:22:2f:83:38:07:93:b6:12:88:a8:e7:
69:e7:8f:1f:c1:65:ef:7f:2f:62:8e:38:25:95:8a:
6e:68:e6:9e:d5:93:6a:cc:d8:24:7b:75:0c:dd:d6:
44:a5:7f:49:27:f6:7d:4e:30:9b:0b:25:c6:91:ba:
e4:6f:f8:dd:4c:57:7e:29:2d:b0:4e:a6:90:e9:e0:
07:23:e3:7b:6e:59:14:d0:e5:7a:88:a9:6b:7f:e6:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:1A:70:D8:5C:41:CF:1D:58:4B:2A:2D:12:79:B2:CE:CB:7F:6D
X509v3 Authority Key Identifier:
keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.249.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d9:2d:30:92:95:1a:62:98:a0:f9:3e:1e:c7:22:38:db:e5:
e0:94:15:d5:9e:08:75:7e:80:04:04:16:b3:87:b4:12:ca:8d:
bb:53:22:41:5c:7b:c3:e6:b1:49:10:37:22:a9:38:02:bd:a2:
43:45:a2:a2:cc:b2:92:73:33:df:97:79:86:75:19:9e:3a:f9:
1a:5c:d0:0f:df:49:64:f2:7d:6a:0a:d0:68:fe:20:62:13:96:
70:bd:0f:c7:98:98:3c:65:7d:20:3b:51:80:36:6c:6f:98:92:
30:4a:a7:f4:fc:b4:96:5d:17:e1:3e:cf:2a:01:02:56:42:8b:
db:1a:f6:5b:98:37:16:89:b2:39:2e:8a:bd:b7:ba:4a:1a:e0:
40:6a:84:b2:61:20:54:c1:43:a8:a6:3f:bf:6a:04:83:f0:79:
a4:64:ff:77:cd:d6:58:3b:dd:b3:2f:0b:04:47:12:97:a2:aa:
61:7f:8d:c8:51:75:f9:cb:f2:92:47:69:0e:a6:07:96:0b:42:
30:9a:06:5d:4d:f1:8f:8e:76:52:c1:d7:22:2f:f9:bf:2a:d2:
9a:c6:33:d1:32:70:e4:64:b3:30:a5:ab:04:da:d2:f3:16:e0:
38:c5:3b:46:e2:97:b8:59:4f:df:c1:c5:f4:a4:be:1d:82:57:
5f:72:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:38:14 2026 by rpki-client