
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/73DC435A39F511F09F296862C4F9AE02.roa
File: 73DC435A39F511F09F296862C4F9AE02.roa (raw, json)
Hash identifier: kSc2xHms3sPfHeZuP4LV3Eoyr2OjFjDeReRTh5WRY7U=
Subject key identifier: E4:CE:3E:DC:0B:2F:F7:28:3A:54:9C:33:87:FA:F2:A7:B7:76:A7:9D
Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Certificate serial: BF
Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/73DC435A39F511F09F296862C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:17:32 +0000
ROA not before: Fri 23 Jan 2026 05:25:47 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153518
IP address blocks: 114.129.34.0/24 maxlen: 24
114.129.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Validity
Not Before: Jan 23 05:25:47 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4204c-d227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:8c:1f:01:8b:e8:d2:e3:20:83:57:e5:36:
8e:27:2d:24:f2:d6:8a:91:c0:6d:2f:60:e5:8c:40:
0f:91:c6:e0:f8:09:06:39:76:ad:54:36:d4:40:c5:
99:9c:0e:1b:d8:b8:a9:c4:c2:30:bb:0c:c9:67:0b:
46:8d:20:9e:53:79:3f:b6:e4:3c:91:9b:64:dc:dd:
b3:b8:dd:07:d0:f7:01:5b:2a:38:ab:a8:45:07:17:
6b:68:de:a7:ec:5c:d2:ef:5d:8d:3e:8b:dc:fb:e0:
9a:b3:a5:10:1c:21:7f:c6:b2:e2:50:01:68:76:67:
52:fa:21:c8:4c:92:2d:f0:90:c3:44:d2:67:80:f1:
c0:6e:40:92:11:77:b4:af:64:84:15:80:bc:61:84:
e6:49:3a:02:04:ac:9e:bf:84:82:65:89:23:f8:a8:
93:80:6b:9a:d2:ac:09:ad:39:8c:ca:46:e4:df:de:
a0:a2:17:26:c6:83:1b:77:a8:f3:d5:af:d2:0f:4d:
d3:83:3f:e5:25:22:05:f1:a1:c4:b3:ac:c8:d1:c2:
28:32:4d:62:13:e3:c2:81:d4:ec:b5:91:65:90:b2:
bc:75:03:39:b4:1d:93:ec:d3:5f:96:54:09:bc:73:
19:f4:57:c6:a1:7e:8f:b1:aa:95:c6:6d:c0:08:e0:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:3E:DC:0B:2F:F7:28:3A:54:9C:33:87:FA:F2:A7:B7:76:A7:9D
X509v3 Authority Key Identifier:
keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/73DC435A39F511F09F296862C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
114.129.34.0/23
Signature Algorithm: sha256WithRSAEncryption
92:66:c5:60:12:0c:a1:ff:99:53:74:83:84:c2:17:29:7e:04:
09:62:ec:ce:62:31:fb:f1:f8:09:48:7a:66:53:44:e5:9d:40:
ff:4b:28:26:1a:de:9b:2d:d6:12:bc:ff:9d:79:6a:55:c4:66:
c8:00:63:2d:3f:af:3f:a1:79:cc:e7:33:9d:36:21:6d:04:1d:
2e:fe:65:d0:d5:1a:6c:92:5d:e6:6a:c4:a1:91:3a:74:5e:f5:
45:f3:42:04:84:c3:2e:71:55:a6:c5:45:51:39:ca:8e:1f:d1:
c7:98:b1:3e:2e:f0:aa:db:52:31:80:39:50:36:5e:74:4a:68:
41:4d:ea:2d:53:1c:14:5b:f6:db:32:89:e1:cc:a8:86:91:e0:
d6:6f:03:e8:be:82:dd:38:a1:d3:60:8e:54:c1:af:a7:ad:7b:
6f:ff:30:2b:dc:b5:35:51:92:1a:9a:28:55:69:d0:5e:08:7b:
13:fa:e7:ca:d5:2b:4c:f7:6c:5d:fb:33:84:f8:71:fb:64:1a:
bc:92:01:22:b2:0c:6c:b0:b6:1e:8e:6f:60:d6:eb:84:df:ce:
a1:86:55:a0:72:f9:2a:ba:5c:f9:96:66:46:5b:47:dd:09:3f:
18:e7:7f:85:8f:7b:ac:a8:cf:40:25:d7:09:cd:0c:e9:21:3a:
a4:a0:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:00:20 2026 by rpki-client