
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/1C7AB64E21BE11F191732FC01B3D8C67.roa
File: 1C7AB64E21BE11F191732FC01B3D8C67.roa (raw, json)
Hash identifier: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=
Subject key identifier: E3:2E:5A:EF:AB:57:00:0A:46:AB:6A:03:5D:EB:B1:9B:6E:17:47:3E
Certificate issuer: /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Certificate serial: 02
Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/1C7AB64E21BE11F191732FC01B3D8C67.roa
Signing time: Tue 17 Mar 2026 04:59:43 +0000
ROA not before: Tue 17 Mar 2026 04:59:43 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133198
IP address blocks: 103.38.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Validity
Not Before: Mar 17 04:59:43 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69b8dfbf-9ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:2a:fa:70:3a:b3:ee:53:5a:5c:60:1e:b9:
e4:ef:b9:2d:13:8c:96:77:45:bb:f9:a4:ee:18:b3:
63:a8:4e:62:69:0d:87:a0:fe:77:db:77:28:c7:65:
ef:08:64:d1:88:6f:08:67:1d:1e:a8:49:9d:10:07:
fe:fa:dd:1e:38:1d:43:b1:6c:23:c1:93:a6:94:8d:
2e:b7:d0:50:2f:a0:a9:78:7b:ae:81:ca:42:23:9d:
74:03:8f:16:bb:cb:b8:d3:5a:cd:d4:f0:01:30:99:
99:b5:15:51:06:00:24:dc:f4:14:39:b5:7a:df:f6:
f9:63:04:ea:d4:d8:da:2d:aa:1d:75:d4:af:b0:49:
c1:cc:9d:ad:14:d2:50:e3:58:5a:b7:59:3a:9b:6c:
af:83:68:ad:e9:8f:99:99:b7:ed:01:7b:6c:9b:7b:
91:ab:e1:08:c3:4d:52:30:c8:c1:35:25:fa:20:7b:
0e:fa:08:f6:41:15:ba:d4:59:81:33:cd:44:c9:14:
d4:f6:19:0e:8b:b1:c3:8a:fc:94:f0:6b:1c:f2:7d:
98:1a:a3:e0:3f:30:4c:68:73:0b:75:9e:7e:d0:d4:
45:45:2a:f6:bc:48:04:90:22:df:b3:f3:f6:7a:8a:
aa:99:d0:30:7b:57:56:58:25:fc:63:7e:5c:5f:f5:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2E:5A:EF:AB:57:00:0A:46:AB:6A:03:5D:EB:B1:9B:6E:17:47:3E
X509v3 Authority Key Identifier:
keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/1C7AB64E21BE11F191732FC01B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:63:52:57:19:59:04:b8:40:22:9b:a9:81:c8:1b:56:ff:18:
e6:d7:0f:0a:3e:ce:c0:d3:4f:56:85:d1:d2:b8:5e:2a:60:26:
40:1b:f4:8c:ac:6f:1c:2d:5f:6f:75:3d:45:9b:5d:a2:ab:28:
4c:2d:5c:fc:a8:eb:d1:20:47:47:ef:c1:28:38:ae:b1:d2:68:
32:ce:ef:ab:85:e6:01:0b:11:84:66:95:1a:c5:04:b9:64:21:
d3:5f:98:ae:e5:1b:67:dc:7e:f3:8c:96:32:ef:b2:ab:21:05:
81:d6:36:83:a6:dd:c7:c3:36:e4:0c:29:5f:4b:6c:67:ca:19:
bd:87:37:f6:c9:b2:95:82:78:41:5f:e1:b5:77:a6:7b:bb:03:
02:1d:50:7d:ab:8a:02:22:8a:96:6b:19:3d:d1:e5:97:37:b6:
9a:76:41:1a:16:70:b8:e9:b1:88:80:7a:8d:26:e3:3a:78:3a:
62:2d:38:9d:f8:7b:5c:c0:1a:cd:12:e8:04:94:7d:1d:51:6b:
54:55:7f:6c:6d:27:67:fd:e4:df:22:17:b0:96:3d:9d:fb:c2:
97:d9:be:9a:8b:cb:b3:3e:65:a7:ba:ea:11:d9:d0:d3:28:0f:
8d:24:ff:fe:c0:d1:ec:6e:41:77:bf:64:92:f8:59:07:14:15:
41:a3:ce:14
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NzhFNTExMC8GA1UEBRMoRDhBM0M4NjcyNzZENDdGQTZEMEVGMkU4ODIxRjBGQjNE
MzE5NzFCRjAeFw0yNjAzMTcwNDU5NDNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YjhkZmJmLTlmZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTKyr6cDqz7lNaXGAeueTvuS0TjJZ3Rbv5pO4Ys2OoTmJpDYeg/nfbdyjHZe8I
ZNGIbwhnHR6oSZ0QB/763R44HUOxbCPBk6aUjS630FAvoKl4e66BykIjnXQDjxa7
y7jTWs3U8AEwmZm1FVEGACTc9BQ5tXrf9vljBOrU2Notqh111K+wScHMna0U0lDj
WFq3WTqbbK+DaK3pj5mZt+0Be2ybe5Gr4QjDTVIwyME1Jfogew76CPZBFbrUWYEz
zUTJFNT2GQ6LscOK/JTwaxzyfZgao+A/MExocwt1nn7Q1EVFKva8SASQIt+z8/Z6
iqqZ0DB7V1ZYJfxjflxf9dX1AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU4y5a76tX
AApGq2oDXeuxm24XRz4wHwYDVR0jBBgwFoAU2KPIZydtR/ptDvLogh8Ps9MZcb8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3OEU1L0NCMkY4RUE0MjFC
RDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9wdER2TG9naDhQczlNWmNi
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMktQSVp5ZHRSX3B0RHZMb2doOFBzOU1aY2I4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzhFNS9DQjJGOEVBNDIxQkQxMUYxODEzMTY0QkUxQjNEOEM2Ny8xQzdBQjY0RTIx
QkUxMUYxOTE3MzJGQzAxQjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnJq0wDQYJKoZIhvcNAQELBQADggEBAItjUlcZWQS4QCKbqYHIG1b/
GObXDwo+zsDTT1aF0dK4XipgJkAb9IysbxwtX291PUWbXaKrKEwtXPyo69EgR0fv
wSg4rrHSaDLO76uF5gELEYRmlRrFBLlkIdNfmK7lG2fcfvOMljLvsqshBYHWNoOm
3cfDNuQMKV9LbGfKGb2HN/bJspWCeEFf4bV3pnu7AwIdUH2rigIiipZrGT3R5Zc3
tpp2QRoWcLjpsYiAeo0m4zp4OmItOJ34e1zAGs0S6ASUfR1Ra1RVf2xtJ2f95N8i
F7CWPZ37wpfZvpqLy7M+Zae66hHZ0NMoD40k//7A0exuQXe/ZJL4WQcUFUGjzhQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:04 2026 by rpki-client