
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/267FE3681C4B11F082276911C4F9AE02.roa
File: 267FE3681C4B11F082276911C4F9AE02.roa (raw, json)
Hash identifier: 7yw2rVB0AyM3xlLHChI+9eH6QNQqAwz/hS/gm7AplhM=
Subject key identifier: D8:FD:BA:89:58:91:D8:43:80:71:C4:E9:31:9D:9E:EB:84:6E:D2:98
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 027B
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/267FE3681C4B11F082276911C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:36:46 +0000
ROA not before: Fri 05 Dec 2025 01:11:03 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 20473
IP address blocks: 43.224.151.0/24 maxlen: 24
103.43.174.0/24 maxlen: 24
103.43.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 02:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: Dec 5 01:11:03 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a5926e-263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:1c:06:6c:f0:5d:85:d3:95:c6:b9:d9:11:
ca:09:30:66:41:6a:24:d1:e6:83:af:36:82:cf:4a:
71:e2:0b:17:4b:ac:84:f6:8c:75:52:f5:d9:f1:8d:
90:af:16:fe:41:06:32:25:31:82:93:77:3c:11:56:
82:33:f5:d0:d0:f9:43:0a:f2:7b:27:8c:bf:cb:ac:
89:04:a9:97:ce:d9:c0:b2:4b:23:eb:d7:7c:1d:53:
59:a8:72:21:fc:1b:63:ca:51:12:fd:1c:bd:82:4b:
a9:9d:1d:24:e0:f4:52:16:89:d2:7d:54:e0:2c:e6:
8f:97:d3:e3:79:8a:ae:91:18:64:e0:88:0d:57:96:
32:4d:21:b0:75:95:ae:00:65:91:27:a3:9f:1b:ef:
27:aa:8c:6f:6f:b5:c8:78:26:bd:82:23:b8:c3:29:
65:cf:e1:0b:e8:17:93:2a:9f:55:6e:86:51:2e:55:
5c:dd:2b:d7:fb:64:e1:1a:6d:3d:67:1e:b1:40:1c:
5d:af:36:5d:52:ac:f4:87:f2:6a:f1:42:24:1f:97:
eb:1d:dc:85:25:47:0c:05:58:a7:5e:c5:e7:33:ff:
17:a5:91:0e:68:7c:06:f6:4e:1c:44:60:a4:1c:86:
3f:6d:31:be:18:c3:2f:35:29:64:e7:00:70:5b:c6:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FD:BA:89:58:91:D8:43:80:71:C4:E9:31:9D:9E:EB:84:6E:D2:98
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/267FE3681C4B11F082276911C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.151.0/24
103.43.174.0/23
Signature Algorithm: sha256WithRSAEncryption
92:fd:db:ad:db:11:55:6a:35:8e:91:fe:96:2b:f1:c9:64:ca:
cc:44:7c:cc:0c:36:42:3d:13:dd:5a:15:80:23:03:b6:3f:32:
df:4b:80:39:59:96:31:54:ac:03:2f:c8:8a:ba:52:64:f4:d3:
0e:c9:44:ef:cf:af:48:ea:c6:fa:c3:51:6c:8f:41:22:0a:de:
03:fb:83:c6:fb:d1:50:53:a5:21:df:f0:89:8f:91:65:06:3a:
64:9d:36:a0:60:5c:7a:c7:f6:75:99:32:33:d8:56:b7:17:4e:
22:ad:b8:2b:9a:4c:cf:1f:a7:66:d3:53:d7:90:4c:4b:ed:0a:
5a:e2:2d:0f:b5:33:44:6d:bd:77:3f:b6:0a:2c:7c:86:c9:20:
b2:ad:42:3a:14:b8:a8:72:eb:76:b6:1e:b0:bf:0a:38:39:8a:
a4:bb:01:fa:7c:6e:81:bc:49:c9:38:0e:4d:41:c7:49:57:69:
98:d3:90:a7:c4:42:16:c5:9d:41:c8:6d:65:55:fb:f3:09:31:
e4:b9:47:d3:97:39:97:56:63:8d:40:d5:76:ba:f6:db:78:67:
f8:e4:13:06:57:c0:d8:6a:55:1e:d0:75:9b:a9:a8:54:75:49:
06:0d:3a:7b:61:19:93:ce:42:39:03:a0:10:67:bc:6c:54:10:
81:53:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:27:44 2026 by rpki-client