
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/82DA388A0F7911F1809984312C3D8C67.roa
File: 82DA388A0F7911F1809984312C3D8C67.roa (raw, json)
Hash identifier: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=
Subject key identifier: 9D:E1:71:0D:C7:39:27:42:17:03:00:77:32:E9:0C:D2:CA:80:EB:3F
Certificate issuer: /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Certificate serial: 14
Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/82DA388A0F7911F1809984312C3D8C67.roa
Signing time: Mon 02 Mar 2026 14:34:53 +0000
ROA not before: Sat 21 Feb 2026 23:03:19 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 2764
IP address blocks: 103.102.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 07:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Validity
Not Before: Feb 21 23:03:19 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5a00d-a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:ba:d9:70:1d:25:02:5b:4a:42:ac:bd:a0:
42:ea:35:73:69:aa:6e:f7:c0:32:4b:cf:48:d8:68:
60:8c:ab:62:20:8c:1c:2e:53:14:b4:a4:5f:6c:11:
f4:7b:66:88:4f:ba:29:28:c4:19:05:45:03:74:6c:
41:fc:da:97:73:69:0d:93:9a:9e:42:7f:72:fb:f1:
27:2e:8b:59:a2:9f:56:ed:94:75:a0:fa:98:c5:37:
cb:5d:06:ff:8e:39:0f:49:0b:dd:36:fb:08:ec:33:
94:e1:5c:45:81:8e:6f:67:26:9b:a3:8f:51:0c:89:
0e:9b:69:e4:89:a3:66:24:26:42:40:09:a2:33:93:
70:e2:6b:4c:24:88:5e:2e:6f:e1:13:b4:e9:67:e5:
1a:62:47:17:6c:90:e7:7a:68:e8:cb:b2:d7:00:e0:
be:44:a7:8f:b3:88:6b:4a:47:7c:b6:12:9a:67:eb:
02:87:b1:11:71:99:cb:40:5e:24:16:76:37:5c:2e:
41:55:3a:c9:2a:16:30:63:d9:ae:d1:a6:3a:a7:87:
05:b9:b7:44:2c:dd:f8:32:02:a8:9a:d7:97:fc:41:
b2:b0:7c:7c:94:25:35:6a:0c:67:59:c6:62:3c:db:
2d:f5:14:1a:c5:76:c9:6c:18:78:de:16:5d:99:e1:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E1:71:0D:C7:39:27:42:17:03:00:77:32:E9:0C:D2:CA:80:EB:3F
X509v3 Authority Key Identifier:
keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/82DA388A0F7911F1809984312C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.102.232.0/23
Signature Algorithm: sha256WithRSAEncryption
37:89:99:76:af:97:cd:2d:de:21:08:7c:2d:22:c0:cd:05:50:
b4:45:62:1a:29:30:4b:1f:4e:27:e9:60:42:ef:78:90:c2:b8:
9e:e9:c9:39:8f:ce:db:59:87:8c:d4:82:40:b8:77:fc:1a:5c:
42:f5:16:f2:05:0c:75:3a:9f:cf:73:31:24:d6:c8:75:0b:06:
4a:ae:24:59:ec:75:bd:9a:8e:24:0e:c5:07:e6:ee:26:d0:e8:
70:ad:18:b8:9e:41:af:32:37:16:a4:e2:2b:6f:1c:ac:9f:3e:
37:1c:2b:3d:ee:ea:54:ee:ca:5a:54:d4:85:aa:b8:0c:5f:67:
63:fc:a7:4e:12:08:b2:f4:9b:32:5f:f6:48:8a:82:0a:c3:99:
f5:e3:c3:7e:8d:2c:97:cd:38:30:58:fe:bc:ef:03:40:84:c5:
fa:cb:af:f9:be:fb:ba:40:d0:37:18:6d:62:05:44:6d:58:94:
9a:14:be:87:e9:32:be:30:57:89:c9:32:28:e9:ec:7c:cb:7e:
4e:fa:c5:04:45:bf:87:d1:c3:4a:bf:00:f9:bc:1b:0a:cf:18:
83:26:cb:37:9f:29:b3:39:f2:ad:c6:8c:ce:24:ac:60:f6:39:
93:9f:1d:99:d1:db:c7:ea:98:f2:bc:9a:9e:9b:53:53:01:d6:
22:fc:86:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:52:55 2026 by rpki-client