
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa
File: 743770A0C06011EE882BC34AC4F9AE02.roa (raw, json)
Hash identifier: XKeEDugKqgXjlFzU8CqpL1zdQUwmhnaqxG9HZMiOaa8=
Subject key identifier: 2F:78:68:1A:DC:56:B9:1F:51:0B:85:24:E6:04:83:6F:5D:BF:04:1A
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 1646
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa
Signing time: Wed 04 Nov 2026 17:28:14 +0000
ROA not before: Wed 04 Nov 2026 17:28:14 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9541
IP address blocks: 103.209.125.0/24 maxlen: 24
103.209.126.0/24 maxlen: 24
103.209.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 16:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5702 (0x1646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Nov 4 17:28:14 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aeb6b2e-3843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:21:39:71:53:b4:eb:f6:d9:09:e2:b3:c7:
91:7c:74:43:dd:99:27:42:63:ad:4c:7f:d1:27:3d:
7c:32:f3:fc:c0:a2:f5:26:0d:a5:d8:f5:0c:d0:0d:
11:07:c0:b7:fb:19:9d:fd:3f:b4:17:88:24:d6:ba:
d6:b9:60:32:0f:1c:4a:75:79:4b:f4:bc:c8:34:4d:
0c:4f:88:8d:e1:0a:ef:03:f9:7f:39:f8:ef:cd:a9:
21:e6:29:23:ba:49:0e:05:2d:a0:93:03:e6:c7:88:
56:9c:17:46:72:92:94:82:3b:07:f8:d1:ff:2c:a2:
61:5d:28:c5:8b:d9:79:b7:9c:9a:55:01:76:a9:ba:
e1:94:94:05:7e:b5:20:bb:9f:77:e3:d4:91:b0:97:
9f:bd:eb:4a:de:15:43:d5:fe:ed:3a:d5:8f:7e:5c:
73:12:80:2b:9e:f4:ee:b9:be:71:51:fa:cc:5d:29:
5f:05:f9:90:f6:97:c8:a6:c9:8e:8a:08:d6:06:83:
2e:63:07:2a:70:c7:c8:dc:0e:06:3d:f8:aa:70:f0:
db:27:61:e8:8f:7b:fe:a7:01:ff:3b:86:43:87:53:
aa:61:b4:34:d2:56:e8:eb:a0:fb:e1:b3:5a:b8:5c:
a9:38:ac:56:21:c2:3a:42:fd:54:c0:a6:9b:86:dc:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:68:1A:DC:56:B9:1F:51:0B:85:24:E6:04:83:6F:5D:BF:04:1A
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.125.0-103.209.127.255
Signature Algorithm: sha256WithRSAEncryption
14:b0:65:5f:81:7d:b3:46:4b:9e:a8:98:38:75:74:fe:e6:7a:
d3:5b:4f:92:be:e3:d3:60:a2:dc:25:1b:a9:89:98:89:ff:ff:
31:79:fe:a6:7c:f8:de:31:1a:41:dd:a0:ea:ee:96:6e:cc:d5:
16:0d:13:01:2e:6d:e6:e7:9d:63:5a:14:66:dc:16:ce:9f:8b:
0b:b9:47:83:46:c1:fc:cc:25:49:94:c8:27:ca:eb:1c:94:5e:
e1:41:f0:61:af:5f:46:ab:07:89:46:33:91:4f:5f:5f:93:ba:
e8:55:8e:b4:03:3c:c5:e2:15:45:4f:83:70:3b:d3:4e:34:35:
ab:ef:d5:fb:24:f9:a7:17:28:ee:87:af:d6:d9:19:10:e7:e2:
0e:dc:40:2d:c0:7e:60:68:50:f2:ed:42:ed:27:1c:ad:e0:24:
f9:c2:54:2b:3e:29:83:5e:bd:d7:f9:48:7d:31:cc:4a:5c:57:
68:f2:8a:8c:8e:3c:bc:8d:d6:df:de:d5:a4:bf:4d:eb:5e:95:
66:e6:66:fd:ce:31:84:85:7d:ba:e8:3a:af:e8:1c:79:92:a4:
23:17:9c:7a:f6:0c:9c:b9:2a:13:05:2a:07:89:bb:7f:56:e8:
db:98:e3:59:ce:10:e9:47:6c:04:0d:5b:db:72:25:57:1f:0f:
a2:9b:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:13 2026 by rpki-client