
$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/F30B07CE705011F0A5A44E86C4F9AE02.roa
File: F30B07CE705011F0A5A44E86C4F9AE02.roa (raw, json)
Hash identifier: yqzH+VRJDdIn8v1i8jejnoTV03RvjOrdo0NsV1Hhxj0=
Subject key identifier: C5:2A:8A:E4:31:57:4F:25:9D:E2:47:8B:5E:9D:71:87:C6:10:AD:AE
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 0812
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/F30B07CE705011F0A5A44E86C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:13:04 +0000
ROA not before: Mon 02 Feb 2026 21:18:41 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138397
IP address blocks: 103.124.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Feb 2 21:18:41 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a481af-6696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:a7:1e:98:9e:9c:42:44:2a:a0:83:56:cd:
c8:29:d3:13:51:64:3e:f9:00:0d:c1:97:1d:5d:3c:
40:e0:b0:52:09:39:ef:c9:06:db:03:2f:bb:18:3b:
66:ca:de:72:f0:64:b7:aa:24:47:52:b1:08:3f:80:
d8:7d:63:31:6b:e1:06:1a:00:9a:ea:28:73:93:96:
d9:1a:e9:e0:10:49:9f:37:10:85:c4:9d:69:99:42:
ef:dc:8f:fc:61:b3:78:63:3f:a9:97:48:ed:bc:1b:
53:54:df:58:a7:ec:9c:61:a8:20:c4:90:6d:19:13:
a6:ab:d5:fb:5a:fc:87:5a:9a:56:86:c6:69:d4:f2:
5f:28:45:9b:55:59:30:ca:86:1c:91:7b:d7:02:d6:
01:5c:eb:86:84:23:d8:a5:18:4e:95:cd:65:4f:c9:
e6:06:08:b3:69:00:34:c7:ed:77:36:fb:1b:ef:92:
89:f8:47:f5:95:7f:76:58:3a:15:d5:60:ae:52:4f:
96:a2:16:2b:6f:a5:9f:ca:1d:48:4c:54:b2:1c:e5:
26:92:93:ea:32:e8:d9:0e:d3:e4:0a:c5:ec:99:9c:
63:ff:03:7d:fd:28:0c:0c:e2:db:77:e4:9c:89:b1:
4b:7d:7e:e6:54:bb:c3:f0:27:84:84:39:15:9f:1f:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:8A:E4:31:57:4F:25:9D:E2:47:8B:5E:9D:71:87:C6:10:AD:AE
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/F30B07CE705011F0A5A44E86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.111.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d1:a1:2c:ab:e8:dc:5b:4e:36:3d:e9:8e:0e:95:75:47:60:
fe:5c:b7:75:16:ae:24:a8:6d:6c:fc:8b:8a:75:0e:98:a7:e2:
c3:e3:9c:f5:25:21:d0:32:62:3f:ec:48:13:5a:3e:41:f4:02:
88:ca:de:1d:b4:e7:02:c4:52:31:d2:4c:d1:a0:0e:b7:c7:2d:
88:82:fe:99:cb:2b:89:76:6d:a9:ce:64:f9:89:db:ef:6b:61:
4f:3b:52:1f:42:21:6d:d6:64:2a:41:f2:75:1f:11:db:ff:0b:
f1:49:ba:f8:8c:19:e4:4e:20:a9:47:4c:26:5d:ee:d7:e3:70:
28:67:1a:8c:fb:31:97:f3:fe:03:f1:99:45:34:74:61:d1:90:
18:94:44:39:6d:46:87:ea:c2:8f:cc:df:31:cf:78:fe:6c:92:
58:c4:07:19:7f:da:ba:60:b1:5a:05:6c:98:57:59:93:48:bc:
02:a4:96:eb:cd:7b:f1:b5:5e:5b:54:04:bd:09:d4:9c:9f:1b:
5b:d4:00:49:b9:64:35:c5:2d:b3:7a:2d:24:15:f1:95:36:66:
00:a4:9a:9e:0e:57:1d:1d:cc:28:9f:76:f4:b7:5e:32:93:eb:
eb:33:6a:da:f6:d9:dd:4d:1d:7a:2e:c9:3e:55:a7:8b:7b:9b:
20:94:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:10 2026 by rpki-client