
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa
File: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (raw, json)
Hash identifier: iXUcdsv3ddU69YIhWzDFLhl35LQs6AD3EeqPaisI2Hw=
Subject key identifier: F6:AD:41:54:D2:B6:F9:51:5B:A7:73:1F:AD:68:1E:9B:A6:62:E0:26
Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial: 0971
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:32:51 +0000
ROA not before: Fri 22 Aug 2025 21:00:40 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 149010
IP address blocks: 103.253.24.0/24 maxlen: 24
103.253.25.0/24 maxlen: 24
103.253.26.0/24 maxlen: 24
103.253.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417 (0x971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Validity
Not Before: Aug 22 21:00:40 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a46a33-9ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:05:bb:e9:51:1f:ce:96:6f:2f:f3:48:25:
cb:35:27:82:e6:db:f8:07:9d:9c:7e:26:bc:7f:33:
56:1b:93:8f:cb:ff:89:f4:43:8c:20:3a:89:78:83:
d8:65:70:47:ff:52:65:04:c2:53:77:8d:5a:85:97:
dd:22:01:e1:1b:ed:8f:64:b8:e8:21:ca:40:ad:69:
27:47:14:ec:1a:f2:d3:f6:25:e5:04:61:f5:4f:d1:
1d:c2:7c:45:d3:e3:92:29:86:06:bc:50:6c:6a:37:
62:05:92:8e:1f:cf:25:48:e9:ba:7d:2b:61:cb:bb:
dd:e4:7f:45:94:23:48:e2:eb:cb:35:11:5f:5c:bd:
27:d1:55:55:fb:04:c4:51:e5:48:ad:39:6f:f3:1c:
88:1b:e3:e4:bc:6d:15:83:37:59:a8:7b:69:10:73:
b3:2d:3b:e7:f4:55:1e:c0:77:f4:fb:86:87:61:ec:
4f:b4:bd:da:2f:12:69:ae:d3:a2:a2:cb:ef:35:7e:
e8:37:71:41:c0:1c:f2:e2:f2:4b:cc:73:7a:5f:fe:
04:77:70:60:ba:fb:81:c9:3f:75:01:5a:02:80:56:
e3:b6:3d:6a:59:38:e9:11:d8:eb:29:cb:60:4a:a2:
88:4b:24:54:f1:db:e6:83:c9:73:b7:2f:45:b4:68:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AD:41:54:D2:B6:F9:51:5B:A7:73:1F:AD:68:1E:9B:A6:62:E0:26
X509v3 Authority Key Identifier:
keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.253.24.0/22
Signature Algorithm: sha256WithRSAEncryption
11:0d:34:d3:7b:3b:33:fe:13:a2:8c:14:7b:e8:d9:6a:ea:f6:
cd:0b:f4:d4:bf:21:cc:b8:71:4a:b8:b4:fe:be:bb:ad:99:ba:
5b:a8:67:69:b4:d6:7c:f5:61:d7:ed:49:00:4d:4f:38:c7:f5:
4c:af:39:8d:35:50:39:25:5f:d1:9d:f9:97:e4:cc:41:5e:2b:
9a:f6:dc:7d:19:ef:37:16:c8:d6:5b:8c:97:72:7c:87:63:a7:
6d:76:91:59:fa:ac:29:f9:22:78:ef:7e:fb:35:b7:61:5f:71:
27:a6:c4:c7:cf:4d:58:bb:e5:20:66:16:0b:e8:95:2c:d9:e1:
37:2c:eb:98:f4:86:6c:c7:11:ad:46:9b:63:2f:9e:e6:80:f5:
59:6f:0d:f3:d9:37:5b:54:2b:79:66:b0:13:36:48:60:58:44:
e2:33:73:d3:00:e5:10:8a:3c:61:ba:92:d4:ea:4f:5e:11:54:
7a:22:d6:2f:c0:91:08:fa:af:a6:5d:15:88:7d:48:36:94:e2:
d7:de:e2:07:46:b3:42:43:9f:1c:7f:8d:5e:91:13:df:a1:8b:
27:63:13:49:f7:9a:84:d9:1b:a5:0f:4a:fc:7e:c5:da:0f:97:
38:d2:ff:c4:80:77:e2:ef:03:a5:c6:09:ee:5d:8d:69:32:69:
34:01:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:52 2026 by rpki-client