
$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/2FF9F3D63E1211F1A9349102AE833773.roa
File: 2FF9F3D63E1211F1A9349102AE833773.roa (raw, json)
Hash identifier: VWpcu8O6MRinpVbPmabr8oFyo8vRo6lsrBwyQBIngak=
Subject key identifier: 2F:5F:98:89:49:51:D7:57:90:E8:ED:CA:8F:DD:1F:17:41:42:BD:8F
Certificate issuer: /CN=A91390D1/serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5
Certificate serial: 02
Authority key identifier: 08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/2FF9F3D63E1211F1A9349102AE833773.roa
Signing time: Wed 22 Apr 2026 06:12:06 +0000
ROA not before: Wed 22 Apr 2026 06:12:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 103.54.128.0/24 maxlen: 24
103.54.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl
rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91390D1, serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5
Validity
Not Before: Apr 22 06:12:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e866b6-705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:ad:38:40:66:c3:ce:35:99:88:7c:7f:e5:
5e:56:0e:46:47:b3:f1:9f:8f:a6:1c:f8:e1:e3:25:
33:91:11:59:cb:0f:54:11:79:41:b6:08:cc:f4:ba:
08:75:0c:d1:80:7d:91:98:77:39:20:58:e8:84:8e:
48:5a:d9:d8:8a:03:9b:bb:ce:7c:ff:3e:d8:77:73:
8a:82:4f:85:34:ba:7d:c6:3c:52:b3:e3:b2:4f:88:
f1:25:b2:8f:08:a6:ff:37:c3:bc:02:7a:38:df:cd:
cc:f1:30:e4:ba:76:df:99:28:b8:9b:f3:7d:aa:3e:
e6:6a:78:d7:c1:19:8a:a7:53:d3:55:00:2b:f8:ff:
1f:46:ab:be:3a:af:db:41:73:56:a2:24:e6:02:e9:
5f:07:58:85:11:96:f1:e3:5c:9d:61:84:a7:ad:91:
22:68:43:06:f4:c9:9c:d0:4b:4c:18:a4:cb:68:33:
75:47:47:62:dd:8e:ba:f0:da:66:55:7f:f5:30:ee:
ed:25:f0:f0:93:8c:59:a3:fc:21:6a:50:21:3a:7c:
60:0d:8d:c9:ae:56:eb:7a:43:0c:a2:87:9d:c0:e1:
25:fb:19:34:8f:fa:0c:fb:78:4c:a8:ee:ad:1f:5b:
84:45:cd:4a:47:7a:7a:9b:a7:38:8f:9a:58:15:fd:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5F:98:89:49:51:D7:57:90:E8:ED:CA:8F:DD:1F:17:41:42:BD:8F
X509v3 Authority Key Identifier:
keyid:08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/2FF9F3D63E1211F1A9349102AE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.54.128.0/23
Signature Algorithm: sha256WithRSAEncryption
97:5b:3b:b9:84:1e:a5:be:d8:80:7b:0d:6c:f0:06:61:e8:86:
82:79:b0:0a:38:f0:8c:7f:c7:48:2d:79:2c:e8:96:54:c6:21:
22:73:9a:90:e1:da:02:cf:5f:56:ae:21:0f:8e:c1:df:2b:0b:
2a:94:38:0c:e8:63:fa:f1:89:5f:99:4a:6f:71:c0:c9:cf:c6:
1a:ef:a2:f7:ca:cf:1c:c3:f6:42:6d:c8:8e:05:de:e6:26:6b:
15:83:a2:7d:e7:f9:0c:9f:f0:2d:f9:47:11:51:dd:c2:0b:b6:
ab:2c:95:b5:84:b7:2c:51:03:c7:51:61:4c:46:50:24:bb:1f:
e1:c5:cb:d9:5f:1b:d9:ae:ab:53:47:24:97:36:c0:f7:be:b3:
4d:29:37:e4:01:f4:85:8d:84:25:f9:34:04:d7:0f:68:38:79:
56:78:b5:5c:b3:ff:57:0c:0e:08:2f:38:7c:39:6d:d3:80:00:
cd:b0:9f:b5:4a:b9:81:1a:86:74:54:cb:a7:4b:83:52:10:8d:
c1:99:17:d0:2b:b3:23:b4:8e:86:aa:a8:c1:45:ff:3c:29:29:
86:84:39:3b:fc:32:75:4d:59:2a:58:d0:9e:5a:fc:d3:a5:94:
fd:42:bc:8a:64:ff:12:9a:83:3c:ea:01:44:54:14:38:7a:60:
05:9a:b6:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:29 2026 by rpki-client