
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/947595301D1B11F1B62EA9A5103D8C67.roa
File: 947595301D1B11F1B62EA9A5103D8C67.roa (raw, json)
Hash identifier: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=
Subject key identifier: B6:DE:80:94:28:62:9E:77:2F:90:05:8B:28:9C:2C:E9:8C:8D:32:E9
Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Certificate serial: 3A
Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/947595301D1B11F1B62EA9A5103D8C67.roa
Signing time: Wed 11 Mar 2026 07:26:12 +0000
ROA not before: Wed 11 Mar 2026 07:26:12 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 13335
IP address blocks: 43.226.20.0/22 maxlen: 24
103.45.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Validity
Not Before: Mar 11 07:26:12 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69b11914-e76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:cc:e4:9b:46:ab:60:a0:9e:50:f8:ea:a6:
86:85:71:6d:35:1b:9c:12:ca:c5:b3:38:ee:20:e8:
c3:83:c5:c7:8e:60:1b:44:71:b5:c6:c9:90:f6:f2:
8e:2f:6c:6f:c0:4a:23:18:07:0c:26:55:eb:8d:8d:
73:b0:a7:33:80:9c:99:e0:4a:52:88:1a:fb:5e:23:
91:c8:89:5c:02:d3:30:e1:db:9e:6b:2d:e9:e4:8d:
67:48:61:ba:ce:4e:46:0b:4e:5f:38:58:d5:e3:eb:
c0:e6:eb:fa:58:ac:b9:05:b4:81:4a:06:14:99:d1:
ee:3c:6b:61:86:3b:de:00:f6:90:e6:be:fd:d2:90:
4b:9e:31:ce:69:88:1c:5b:cb:bb:75:0c:f5:92:21:
4f:96:b1:98:16:c1:51:29:c1:d1:e5:94:75:15:89:
af:f3:88:e3:8c:30:22:cc:fc:cf:ad:ba:a9:ee:24:
eb:e0:4a:67:eb:11:36:ea:a2:bc:1e:d6:3c:aa:64:
21:68:4e:2d:09:56:30:31:d1:0a:bc:b8:87:09:27:
73:26:33:07:2f:2d:dc:ae:01:de:64:0e:8a:17:24:
88:5d:94:a8:c9:f6:1d:6f:f0:91:e1:fa:b6:73:4d:
76:79:09:0f:7e:21:4e:b8:3b:d0:6a:ec:83:1b:ed:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:80:94:28:62:9E:77:2F:90:05:8B:28:9C:2C:E9:8C:8D:32:E9
X509v3 Authority Key Identifier:
keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/947595301D1B11F1B62EA9A5103D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
43.226.20.0/22
103.45.68.0/22
Signature Algorithm: sha256WithRSAEncryption
29:ff:a4:73:43:a7:db:e9:7c:dc:02:c0:49:79:da:db:40:0c:
43:fa:c1:ea:1b:d6:07:23:64:f3:d5:bb:a9:59:b1:d4:c3:38:
be:02:b8:63:1d:e2:89:43:09:8b:bd:cd:e8:87:7f:e3:b2:35:
6b:92:f9:8b:32:fc:10:2f:e2:51:06:0b:a8:0a:49:61:98:3f:
7f:07:4a:03:ab:44:84:5b:cf:7c:67:3b:95:be:52:47:94:b3:
70:23:ba:c7:5e:5a:16:a7:39:6b:f5:e9:8d:34:39:80:51:f5:
d7:7f:ca:52:5a:7a:e9:4a:1f:f6:7f:09:89:2c:31:92:72:c6:
75:40:e7:87:a6:d8:0b:4b:ae:6a:e6:2a:04:15:aa:a7:63:16:
27:f0:6d:2a:84:57:c3:df:a5:45:29:8f:0d:0d:f6:fd:26:86:
0b:92:0d:eb:d8:bc:7a:ab:51:84:d8:c1:c6:f4:83:5c:da:df:
75:3b:a9:51:3d:41:54:49:39:f1:2b:d8:1d:a9:5a:e3:1f:f5:
2c:57:ad:63:cf:60:95:8a:c0:85:c8:7f:6d:22:66:5f:4d:18:
e3:21:2e:27:b0:27:e6:bd:ca:39:69:f3:39:c4:b3:b9:b0:bb:
1e:23:36:13:9e:fc:80:bd:5f:c5:88:8c:0f:31:35:ff:74:5b:
9a:29:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:21:15 2026 by rpki-client