
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
File: BDB203466B5D11EF84E04577C4F9AE02.roa (raw, json)
Hash identifier: IaL/27r4Dy/gX1kTRMSIJ7SMPPv2obxa5XypxjD+sxo=
Subject key identifier: 51:91:DE:3E:46:1C:9F:6B:DF:AD:FF:C7:FF:47:2F:3B:19:80:2A:B1
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 09F2
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:32:15 +0000
ROA not before: Sun 06 Apr 2025 20:30:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140627
IP address blocks: 103.112.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 19:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2546 (0x9f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Apr 6 20:30:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a46a0f-4eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:c2:98:40:ff:04:b1:1a:c4:f1:8b:32:10:
5a:68:bc:3c:aa:65:dd:bb:1e:ba:3e:db:77:d4:14:
5c:7c:b8:b1:f5:d6:a8:0c:4c:c7:e1:dc:0f:0e:29:
52:2d:c6:6e:2c:0e:68:1e:3f:a3:a2:c3:fc:ee:3c:
c4:6e:ed:3c:21:f4:b8:2b:6b:07:56:66:76:c0:7f:
c0:3c:fd:4b:42:66:c2:00:0f:ce:dd:f8:b9:e3:08:
36:21:da:af:a2:0f:b5:a4:b3:db:8d:99:47:b1:4a:
07:d7:49:6d:bb:cb:35:dd:ce:af:4d:0b:57:ce:1f:
eb:39:39:8c:61:2e:22:87:7a:b3:10:da:ed:8f:29:
9d:91:20:05:e4:16:82:d6:6c:2f:04:1c:30:d2:7e:
62:53:3c:50:34:a5:0f:05:75:da:c7:05:4d:34:ec:
4d:e4:cc:04:db:8c:f5:36:01:b3:e8:54:7b:3e:3a:
a3:9e:bf:8d:df:38:88:b3:d6:35:2b:89:44:a6:d4:
a2:e3:36:2b:4c:d2:d4:72:e9:5e:0e:02:a0:6b:da:
4a:4e:1a:b2:88:01:58:0f:5b:19:b2:55:a2:11:49:
d6:2d:b0:ef:b3:fc:e6:04:e7:ac:b9:7e:e3:4a:e9:
40:db:9a:d0:de:7e:eb:db:94:e7:98:5b:95:dc:04:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:DE:3E:46:1C:9F:6B:DF:AD:FF:C7:FF:47:2F:3B:19:80:2A:B1
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e3:34:be:9f:20:05:17:f9:da:51:cb:64:7b:4f:f4:54:10:
7c:81:3d:9d:dc:33:17:d4:77:1a:43:07:b3:f8:58:c7:1c:0a:
68:92:91:7d:e6:16:2b:10:ce:32:8f:48:b6:41:64:eb:b9:a9:
b3:ef:c8:71:45:a5:c1:6d:63:dc:cd:61:4a:2f:9b:d4:3b:d3:
f7:ce:ef:9d:53:52:a2:f3:4d:f8:86:e6:33:93:52:61:25:9a:
29:47:e5:ad:78:86:b0:2e:f6:ec:9d:1f:8f:37:26:ed:f2:56:
8a:47:3b:a2:45:c7:20:59:9e:13:44:aa:64:4f:7e:8f:e1:df:
4c:11:55:98:21:79:5e:2d:9c:a8:50:a0:e6:e3:78:d0:02:1a:
23:0f:8b:a7:ee:78:ff:04:cc:4b:17:1c:2a:ea:a8:aa:84:52:
52:d3:c8:a8:70:bc:73:c9:5a:3e:3e:5c:3b:e2:52:d4:9b:13:
0b:15:b9:3f:06:82:c4:b8:9a:21:35:6a:7e:9a:e6:11:6a:b8:
02:ec:6c:d1:d2:e1:7c:0b:18:d6:0d:31:6c:e7:11:b5:7c:5d:
8a:8c:67:1d:f2:8b:17:10:81:9a:1b:74:de:35:86:8d:08:47:
92:99:44:51:12:84:f0:94:1a:db:f5:7e:80:d5:15:39:6c:ee:
ff:c9:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 06:34:04 2026 by rpki-client