
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/F85D97D8278411F0B46E4A7FC4F9AE02.roa
File: F85D97D8278411F0B46E4A7FC4F9AE02.roa (raw, json)
Hash identifier: NDb1B6PZCJBf2fRK/qRZGkVfT4s79ZM1HP5X452K/f8=
Subject key identifier: 4E:AC:5C:23:CD:4D:AC:9C:80:EF:8D:60:BB:13:C6:F6:96:76:96:31
Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial: 0425
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/F85D97D8278411F0B46E4A7FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:02:35 +0000
ROA not before: Fri 02 May 2025 18:40:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149633
IP address blocks: 103.183.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Validity
Not Before: May 2 18:40:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40ebb-c89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e4:bb:2e:73:ae:28:00:75:ea:19:96:41:4d:
3a:0a:49:cc:36:1f:61:d3:6c:61:ab:c2:b5:1f:48:
3f:65:0c:d5:fd:8a:63:40:04:2f:ab:de:dd:60:1d:
a6:aa:db:90:b2:a8:2a:b5:66:96:9a:f4:a6:ba:b3:
7e:3f:20:5b:68:a2:9a:1c:08:3f:47:53:5e:55:e3:
10:ae:aa:00:b0:fc:b5:03:32:19:ec:a2:00:52:04:
58:2c:91:4d:d7:f2:95:c3:db:f6:89:b9:15:dc:b4:
4c:c3:d9:a7:d7:1b:b2:01:b7:c2:12:1b:91:98:15:
be:cc:70:e1:14:eb:be:61:ca:28:f3:ec:85:3a:59:
f2:53:80:5f:3b:b2:09:19:cd:f9:e0:2c:95:01:2b:
ec:73:2a:16:b9:c2:48:d8:cb:58:69:c8:2e:ff:52:
c7:34:a3:99:df:2a:b8:90:82:49:71:bd:e9:5e:06:
24:b6:a7:23:ec:01:77:79:92:26:c1:bd:6f:71:47:
90:50:db:b6:a5:b6:20:91:3c:55:55:cc:21:02:a7:
bb:92:54:69:b5:7c:fa:2f:83:07:ed:c8:b9:73:fd:
4b:d5:5e:f8:a6:15:cb:2f:d0:e4:ae:65:ba:ae:90:
93:d6:8a:ff:51:96:9f:c7:67:05:0f:69:8b:f0:76:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:5C:23:CD:4D:AC:9C:80:EF:8D:60:BB:13:C6:F6:96:76:96:31
X509v3 Authority Key Identifier:
keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/F85D97D8278411F0B46E4A7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f4:15:c6:7c:1e:b9:fa:c0:63:0f:14:99:66:98:67:d8:05:
26:85:d6:47:34:25:91:46:27:39:45:2a:89:d8:24:92:d7:c7:
17:9f:98:c4:c1:14:8b:49:b0:43:da:e8:29:4e:0d:3e:ea:7d:
03:d9:54:1a:44:d7:6e:94:85:cd:71:72:7e:97:68:bc:9c:cb:
9e:8e:1f:82:fe:dd:dc:20:bb:66:c3:e2:93:0b:ff:51:24:78:
b0:4a:c6:74:db:8d:9e:8e:34:dd:cc:37:6f:01:cd:2d:10:d1:
2a:37:2a:92:1b:27:6d:c9:a2:b6:fd:3e:85:7f:8d:33:9f:1e:
7a:d9:b1:d3:80:0e:3f:cf:74:02:61:c4:23:30:f2:3b:25:d6:
a1:c6:95:f1:d3:29:a0:b1:56:8f:f8:4c:da:31:6a:89:9d:c7:
fd:7d:06:ea:8e:5d:b7:14:39:36:a4:c5:a5:2b:d9:d5:bc:20:
fa:24:e9:61:4e:52:6e:31:82:94:ce:72:a3:21:08:79:0b:a9:
e1:2c:03:81:00:35:42:de:45:43:2a:55:ce:5a:3a:a5:f0:c3:
af:b5:79:83:f9:28:8e:2a:e2:26:db:ee:c3:1a:d8:d8:57:af:
cb:cf:55:3d:42:9d:89:38:77:6c:f0:71:1d:e5:e6:eb:59:58:
05:5d:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:21:26 2026 by rpki-client