
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/1879BE8A318411F0BC1DD041C4F9AE02.roa
File: 1879BE8A318411F0BC1DD041C4F9AE02.roa (raw, json)
Hash identifier: j2Keh6m8tIx7/TCOD6hIJ0OBGZazoatVXlizWriG7AA=
Subject key identifier: D3:C2:7A:8D:61:F9:56:B0:27:74:F6:3C:07:79:AF:A8:75:BF:D9:2B
Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial: 010A
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/1879BE8A318411F0BC1DD041C4F9AE02.roa
Signing time: Sun 03 May 2026 07:39:33 +0000
ROA not before: Sun 03 May 2026 07:39:33 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 40779
IP address blocks: 103.117.136.0/22 maxlen: 24
103.121.92.0/22 maxlen: 24
103.186.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Validity
Not Before: May 3 07:39:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f6fbb5-0b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:15:b0:2e:6c:7f:36:1a:70:d6:30:4f:a1:
3a:e5:f6:e7:3f:d6:5c:ed:d8:df:98:98:8f:63:e2:
a8:c5:80:aa:88:db:0f:24:28:07:61:30:c4:07:e0:
58:9b:05:d5:1a:f9:23:a2:d8:3d:80:e5:4d:f1:41:
b3:d6:d1:36:e1:6c:a0:62:76:07:78:ad:68:0d:a2:
a5:c4:bb:84:8a:2e:31:48:53:07:de:a9:93:57:f7:
04:f0:f8:6a:ad:b4:10:84:f9:9d:1f:15:87:cc:7b:
cc:95:ff:a9:72:7c:93:8f:c6:66:b9:a5:b5:33:95:
e4:c0:e0:26:37:44:7b:ea:88:85:96:e1:a9:84:23:
17:22:c9:e3:6c:43:5f:84:69:e3:98:e6:68:a4:19:
16:6a:2b:43:52:8a:65:25:24:7b:69:7d:5c:f1:bd:
ee:a2:33:dc:f3:ea:cb:4e:68:56:09:6c:d3:70:14:
85:43:09:cb:64:d3:78:ef:58:ff:e6:c8:eb:08:1b:
a5:dd:c7:07:d0:ad:d7:a2:aa:05:fa:7c:62:8e:55:
a4:b2:4b:b8:a8:41:e1:1c:68:af:66:c7:9a:4d:0e:
8c:58:06:df:b9:45:80:5d:ce:7d:88:84:d8:97:06:
e4:3f:20:cd:8b:b9:09:2a:ed:ed:2e:c1:28:a9:81:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C2:7A:8D:61:F9:56:B0:27:74:F6:3C:07:79:AF:A8:75:BF:D9:2B
X509v3 Authority Key Identifier:
keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/1879BE8A318411F0BC1DD041C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.136.0/22
103.121.92.0/22
103.186.214.0/23
Signature Algorithm: sha256WithRSAEncryption
97:f0:a5:b4:ed:f5:7a:65:bb:ef:6f:27:18:79:12:f8:cb:a1:
84:48:bf:ad:7e:74:d6:8e:0a:0b:ed:f1:fc:fb:59:0e:45:7c:
04:97:d5:2e:5a:f8:40:ef:57:49:93:9f:d0:3e:76:3d:cc:b3:
8c:30:77:d4:e8:dc:4f:a8:3c:7d:1a:06:00:a5:b3:d9:18:fc:
ac:0b:2f:0e:fb:16:2a:3c:fd:32:a0:7e:11:9f:cb:db:6f:23:
4f:c1:62:25:35:9f:26:e1:24:28:e9:55:c6:83:f5:9f:2f:2a:
ea:dd:d9:f9:2f:b6:4c:85:68:65:e8:6c:5a:ef:a1:ed:fd:4c:
c0:34:74:f3:ac:2f:96:09:6a:95:fc:f0:38:4f:9b:de:a5:53:
8f:b4:24:e9:0d:68:18:de:ea:e8:5f:7c:63:c5:44:d8:a2:be:
d4:8b:69:ba:ad:11:73:d3:76:a3:09:17:42:31:3b:08:80:2f:
e4:34:be:88:31:eb:63:aa:b3:3c:bc:a7:7c:46:b9:3b:c6:c0:
19:39:1b:91:a1:e1:52:88:07:6b:4f:41:4e:70:e6:50:36:2d:
7e:7c:75:0b:94:81:f3:01:58:7b:92:7e:42:b6:33:5a:05:bf:
1c:5d:39:4e:01:b2:4b:a6:d1:85:23:96:d2:88:1c:1c:19:1b:
b6:5b:f0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:07:46 2026 by rpki-client