
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/7E859EFEE60411EF89467057C4F9AE02.roa
File: 7E859EFEE60411EF89467057C4F9AE02.roa (raw, json)
Hash identifier: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=
Subject key identifier: 27:B9:DD:D5:66:20:14:E2:68:A9:F5:50:2B:5F:D6:B8:3E:16:62:88
Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial: 0698
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/7E859EFEE60411EF89467057C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:01:37 +0000
ROA not before: Thu 04 Dec 2025 21:35:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 932
IP address blocks: 103.158.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Validity
Not Before: Dec 4 21:35:49 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a519b1-34f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:27:ed:b4:68:9f:9b:4d:d9:62:df:63:71:
17:c3:13:02:5b:24:7c:79:4d:35:77:ce:78:13:8d:
31:9a:6c:76:e3:b2:26:13:ef:bc:32:ab:8c:36:08:
5f:0f:1f:1c:d5:88:c6:54:4e:79:3e:be:94:e7:e0:
80:62:d4:43:a4:a7:2b:e3:1a:7a:67:28:0b:73:b1:
6e:92:f3:85:80:32:54:67:de:53:0a:5c:6e:eb:91:
69:69:d0:f6:d7:25:91:07:b6:ce:02:ec:61:3a:0b:
9e:33:af:f2:30:ba:0c:49:84:39:de:13:6e:40:85:
7a:b8:92:8a:e2:c8:9a:6d:59:5c:b3:2e:81:d5:60:
e3:85:c9:4e:ce:ab:dd:aa:82:8d:1f:d9:bc:9e:6d:
77:58:35:2e:11:72:15:6d:da:66:c4:5e:7a:bc:9b:
9e:3b:0b:62:16:80:88:e9:50:58:ca:0f:78:36:06:
85:33:e2:70:b3:46:3b:70:82:87:bc:9c:27:43:8c:
11:a5:37:3f:e9:d6:d6:cf:09:09:9b:f6:c7:5c:4c:
f4:58:77:76:ba:6d:11:32:1d:af:e3:c2:32:45:0c:
a2:30:83:c2:ba:d2:9e:06:6e:5a:ba:77:46:93:bf:
22:57:74:34:f6:3d:56:65:59:bd:8b:ce:d4:62:db:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B9:DD:D5:66:20:14:E2:68:A9:F5:50:2B:5F:D6:B8:3E:16:62:88
X509v3 Authority Key Identifier:
keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/7E859EFEE60411EF89467057C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.190.0/23
Signature Algorithm: sha256WithRSAEncryption
16:9d:0b:0a:a1:8e:d3:11:a5:f4:1e:5d:51:a7:a6:2a:77:d8:
e9:be:8f:54:bc:1a:88:a4:83:00:4e:49:7a:1e:bb:54:c7:66:
64:cc:5b:30:c4:f0:f9:35:07:e5:1d:a2:41:98:f4:f7:9e:88:
3b:b9:41:50:c4:2d:90:31:49:be:16:00:1e:28:22:f7:27:0e:
fd:ff:7e:04:57:86:89:5c:6f:0b:32:fd:62:65:02:94:65:4c:
b4:18:f0:65:61:88:75:30:9d:16:44:8d:15:71:4f:f2:5e:64:
05:5d:ea:d1:66:2f:93:21:56:62:ec:ab:a1:58:db:8c:0e:33:
2a:2f:8b:93:82:0e:da:aa:f8:d5:db:a6:43:f7:e1:64:c6:58:
4e:4d:2d:70:33:da:52:87:e8:14:2e:31:0d:d8:3a:aa:c3:13:
69:92:77:75:82:45:37:af:f8:70:06:ab:15:1b:39:7a:64:61:
51:1f:68:d1:37:22:77:cc:25:85:25:49:62:b0:ef:3b:01:d4:
09:90:75:de:73:45:70:c1:e1:94:56:83:43:5f:04:be:dc:37:
76:d4:eb:f7:87:01:20:21:77:5e:e1:41:0a:22:f9:1d:a7:d3:
b6:99:26:bd:d8:f3:ea:4a:db:96:c4:f7:38:03:e3:92:6c:db:
05:c5:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:27 2026 by rpki-client