
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2E7E25EA921D11F1B1C7D4CB6611F970.roa
File: 2E7E25EA921D11F1B1C7D4CB6611F970.roa (raw, json)
Hash identifier: NxHB5XBL7ve4r080JLtFWlK5r7K17fGRWsvt/Wn/coQ=
Subject key identifier: A0:1A:48:DD:80:D6:7E:5F:75:3C:5E:89:9B:25:8D:E6:72:0D:8F:EE
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0464
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2E7E25EA921D11F1B1C7D4CB6611F970.roa
Signing time: Fri 07 Aug 2026 05:02:26 +0000
ROA not before: Fri 07 Aug 2026 05:02:26 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 402475
IP address blocks: 103.243.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Aug 7 05:02:26 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a7566e2-7a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:43:46:cf:73:3d:dd:28:1e:7b:26:8d:d8:
4b:df:d9:6b:a4:8c:32:92:f4:cd:b3:64:37:9c:f1:
9f:5a:55:87:70:5c:60:6b:42:aa:47:88:95:ef:4c:
f6:b0:b8:c1:07:90:3b:ae:bf:bb:e1:6c:e3:f1:08:
75:13:04:03:f9:db:8d:35:fe:5c:e5:ed:a0:c5:c4:
cb:42:4f:ea:25:76:3f:14:08:45:c7:6d:82:04:74:
b5:06:2d:51:7d:67:9f:8f:cd:ec:a3:a4:b3:a2:4c:
2d:f6:e7:92:02:b7:05:0b:20:ab:b1:a4:ab:85:fe:
38:30:e8:09:b9:ab:5a:88:90:31:81:0b:97:18:9a:
11:81:65:f6:94:f4:77:fc:32:1a:41:a1:bd:1d:da:
74:b7:08:2b:f1:35:9a:71:f3:4c:7e:4b:90:0e:90:
f9:6d:c4:64:37:86:00:f2:9c:a3:d8:5a:f4:fc:3c:
d7:5f:49:a4:72:f8:f7:dd:2d:7d:5c:73:b3:6f:92:
95:a9:94:cb:1d:78:43:cd:af:b7:30:65:80:1b:23:
1e:50:ff:d6:e9:85:0d:e9:37:1e:c9:6d:35:a3:ca:
98:fb:95:82:87:28:ca:44:b8:90:09:05:24:41:af:
a4:e3:1d:6c:67:80:95:c9:b6:04:cc:0f:b8:50:94:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1A:48:DD:80:D6:7E:5F:75:3C:5E:89:9B:25:8D:E6:72:0D:8F:EE
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2E7E25EA921D11F1B1C7D4CB6611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.117.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4c:33:a5:9e:c3:57:48:eb:1e:57:23:e1:a5:ff:37:e5:a4:
2b:ac:1f:93:f3:ad:a1:a2:bb:12:ec:87:8c:c7:dc:f8:96:bf:
bb:30:24:5e:6a:4b:66:97:7c:05:21:3e:d7:93:b1:66:d9:68:
18:84:7c:84:06:84:a4:58:92:5a:20:80:c8:43:70:4b:df:e3:
2c:6c:91:5d:1e:c4:4e:d4:a6:56:ba:da:28:2e:19:2e:92:f0:
fe:0b:ae:6c:45:8f:c4:97:bb:ff:d0:da:12:5a:65:08:1a:c4:
6d:56:7b:5b:5b:e1:b2:c4:6f:1f:d3:60:e8:ce:4b:50:d5:75:
2c:c5:4a:6a:ad:6e:0d:1a:b9:ea:6e:e3:6e:05:19:50:92:51:
10:72:cd:b5:4a:d8:4e:8b:71:9a:15:9b:5b:d1:59:f0:06:cc:
8a:f8:de:ef:e9:b4:9a:b3:0f:1c:55:e8:88:27:c2:21:44:e9:
40:f5:d4:93:5a:c7:5e:a0:71:3f:33:25:8f:7c:05:bd:ee:b0:
39:0f:a8:43:3f:95:79:ff:12:50:d9:7c:51:8f:88:ad:60:5a:
a8:a2:9b:bb:71:da:a8:87:3b:47:48:db:89:11:0f:a0:ab:6d:
d8:80:cd:27:a5:f8:9f:05:00:f5:2b:7f:d1:77:29:37:40:88:
a7:99:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:34:09 2026 by rpki-client