
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
File: F3B716768F2F11EE86964D62C4F9AE02.roa (raw, json)
Hash identifier: XbLvpieZLxPD8FqUNOF2czHZzpbSV3R5GXAyN7YF/l8=
Subject key identifier: 9F:48:77:B5:5E:B8:B7:C6:AA:EE:86:5D:38:B1:F1:A1:5B:AA:D3:AD
Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial: 02D8
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
Signing time: Fri 31 Jul 2026 02:51:57 +0000
ROA not before: Fri 31 Jul 2026 02:51:57 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140721
IP address blocks: 103.152.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Validity
Not Before: Jul 31 02:51:57 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a6c0dcc-0bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:74:34:00:d3:20:b3:52:21:f7:a9:78:04:
29:60:aa:54:42:21:27:21:5d:94:a4:90:cf:a8:d8:
4c:1c:f1:99:d2:fb:e7:23:91:4e:79:94:4c:91:d2:
e4:f7:8a:a8:e6:cb:15:91:ae:31:9d:f7:22:86:92:
7c:17:14:46:c7:25:0c:6a:70:84:53:5e:d2:c1:dd:
f2:35:63:2c:c4:04:06:77:58:c1:86:d5:fb:31:4d:
2a:73:27:b5:ba:8f:96:d4:fd:0c:ec:b8:c4:ee:39:
bc:43:52:40:d4:ab:29:c3:c7:3c:3a:92:50:de:c8:
85:f0:71:ba:2f:bb:a3:3c:aa:29:07:0b:b7:f3:8d:
6d:8a:42:0d:89:eb:13:2a:2e:ec:14:da:59:da:66:
92:6e:d0:11:db:05:69:cb:af:25:09:fb:6b:b5:f4:
3d:e5:ae:c8:5c:86:d2:fe:dd:96:fa:b5:92:48:e9:
20:15:d5:ea:e1:df:93:77:5f:d7:f7:e9:7a:e3:a3:
87:d4:fb:1d:e6:8f:77:60:f7:0b:77:0d:cf:99:2e:
f8:f5:26:da:49:f1:6f:5f:59:15:d1:4d:72:26:84:
f4:4b:d4:93:ca:3c:57:da:92:59:2a:aa:0e:4f:a8:
ad:53:5b:e3:40:8f:cd:e7:18:72:8d:00:a2:c9:02:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:77:B5:5E:B8:B7:C6:AA:EE:86:5D:38:B1:F1:A1:5B:AA:D3:AD
X509v3 Authority Key Identifier:
keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.43.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c4:ab:b4:9f:1c:c9:cd:85:e4:02:ce:28:8a:a3:f8:2a:cb:
90:fe:af:76:11:4b:16:de:8e:de:db:6c:70:82:69:fc:bf:95:
08:76:15:ac:55:2e:a2:56:8b:86:69:8b:d2:a2:c4:f7:23:94:
cc:f7:50:91:bf:4b:59:ab:5a:4a:de:f9:08:2a:1f:dd:32:63:
6c:c1:8b:48:b1:7f:e3:7c:80:9f:21:fe:d5:5b:66:38:75:e9:
42:38:ca:6c:84:23:bf:b4:5d:1a:7c:fd:a3:69:f3:ff:53:d3:
b0:da:71:24:fe:17:8e:29:23:09:7a:b2:c7:a9:e2:56:4c:58:
a7:67:dc:64:c6:b5:be:7a:04:1a:57:8e:e3:90:aa:f3:15:2b:
ea:8c:c0:b3:36:d1:fd:4e:8c:06:94:74:f5:40:30:cc:2f:28:
cc:12:24:12:58:ac:a0:72:c0:22:10:9e:3d:53:ac:77:7a:00:
a7:f1:30:0a:4f:0b:e3:43:d0:69:51:a8:0f:ee:8e:ec:fb:23:
c7:25:3f:8c:8e:3a:1f:a8:b1:49:dc:a3:2f:8f:7f:d4:4e:39:
dc:3b:b4:fc:0d:70:5c:67:08:4e:75:ba:03:79:7e:98:92:22:
cc:a8:bb:61:5f:56:99:86:90:04:82:bc:95:f7:56:02:47:af:
80:9e:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:08:35 2026 by rpki-client