
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/803597528D5911F087734E0BC4F9AE02.roa
File: 803597528D5911F087734E0BC4F9AE02.roa (raw, json)
Hash identifier: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=
Subject key identifier: A0:71:C6:6D:38:45:09:16:A8:37:3C:F5:2C:E3:9C:26:97:CD:C9:E6
Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial: 0248
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/803597528D5911F087734E0BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:59:44 +0000
ROA not before: Sun 01 Mar 2026 04:22:51 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 401783
IP address blocks: 103.83.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 02:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Validity
Not Before: Mar 1 04:22:51 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a41c20-2c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:45:54:04:73:80:05:d8:36:cc:ba:80:b3:
79:ce:19:6a:00:f8:13:70:cd:82:bc:27:76:cc:95:
74:5b:2e:38:b7:a6:fa:1c:3b:42:7b:26:30:00:35:
99:21:3c:61:5b:cb:de:5d:81:71:3c:51:6a:91:60:
d4:ad:bc:dc:5d:30:63:5f:58:4e:f7:4e:1d:3d:ba:
56:1e:10:ed:c5:0d:9b:3b:4a:ab:ac:d7:7a:cf:e0:
38:00:7d:f8:ab:22:a0:8c:55:40:3c:49:22:27:e7:
56:20:c7:63:8b:8a:89:63:eb:95:0e:98:80:41:ec:
17:ab:e3:7a:58:84:b2:eb:01:34:44:88:f5:34:02:
c7:76:b6:89:80:05:bb:36:05:41:c2:39:f9:0c:f5:
ce:61:4d:c2:ad:b3:08:fb:a2:4b:14:87:0a:f8:e2:
9a:05:f9:71:ab:ef:54:30:30:a3:48:8c:42:8e:ab:
ea:c5:f5:e3:bc:45:6f:d8:e6:54:ed:22:e4:c6:c1:
5e:2f:2c:bb:85:db:c2:13:89:22:ca:93:ca:c0:16:
3d:31:e6:39:bb:72:f0:66:bd:0b:07:c6:51:f6:6d:
cd:d6:7e:58:68:b9:4c:0a:a8:3a:5b:dd:b9:3e:76:
8e:ca:b8:76:9a:1b:b3:fc:fb:06:4e:0c:1d:81:85:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:71:C6:6D:38:45:09:16:A8:37:3C:F5:2C:E3:9C:26:97:CD:C9:E6
X509v3 Authority Key Identifier:
keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/803597528D5911F087734E0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:12:32:0e:b1:62:35:a4:7a:77:98:92:e9:e2:37:c3:cb:50:
58:2b:6d:dd:10:da:99:40:d8:a4:89:ac:c1:60:be:a4:ad:41:
bb:45:8f:53:ed:0b:25:a7:79:61:7e:db:55:81:cc:b8:04:08:
4b:96:41:b9:75:d9:4a:c0:54:e4:cd:84:e8:03:35:39:b3:53:
b7:1c:5d:72:9d:a2:db:b4:6a:cc:29:5f:c3:67:fc:1c:5d:20:
08:47:c6:eb:b6:3e:dc:dc:59:0d:d9:3c:e4:49:8c:e4:b8:e7:
36:38:3a:89:5c:50:8d:bd:52:4c:02:d2:b5:8f:e9:e8:37:8d:
19:8f:ca:07:00:13:81:60:73:8f:bc:f4:f9:c5:34:e2:42:52:
80:e0:4a:8e:39:0a:d8:41:40:50:07:62:d2:a1:85:96:e9:4c:
cc:f3:78:5f:16:77:83:d8:3e:7d:e0:f7:d7:f5:c9:19:d2:dc:
a7:18:af:65:4a:9e:5f:9d:a9:82:fe:65:c6:92:3d:cd:94:04:
af:04:11:8f:07:2e:32:ea:32:83:c1:7c:18:40:7b:c5:1e:cc:
3a:64:42:97:25:05:dc:64:35:da:78:0e:f5:e6:62:2a:7e:ea:
a4:0f:5f:7a:f3:07:13:2a:cb:e9:18:c3:c3:17:d8:05:8e:ec:
d1:e8:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:03:37 2026 by rpki-client