
$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/FA3E8D68BA2911F0A4AFE171C4F9AE02.roa
File: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (raw, json)
Hash identifier: wvzSmGiBBAsDnd5ALgrVOTYDqqXOm9AnPF4Wak+3vdU=
Subject key identifier: B3:E5:95:DD:98:CD:81:35:9B:1E:A4:50:6D:2B:20:F7:94:D9:F0:EA
Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Certificate serial: 0427
Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/FA3E8D68BA2911F0A4AFE171C4F9AE02.roa
Signing time: Wed 29 Apr 2026 01:32:50 +0000
ROA not before: Wed 29 Apr 2026 01:32:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134806
IP address blocks: 103.185.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl
rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063 (0x427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Validity
Not Before: Apr 29 01:32:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f15fc2-820b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:08:4f:de:28:7e:3c:56:e4:81:2f:4f:2b:
66:5d:93:f5:48:d1:81:29:d2:a9:5f:20:3e:41:ad:
50:46:18:2f:c3:22:59:b0:40:d1:4b:fc:b4:eb:31:
9d:91:2d:3a:ca:63:5b:b3:e1:a0:35:a7:18:2d:e4:
5c:aa:7a:61:a5:ff:22:39:54:45:b4:c5:aa:25:88:
47:0c:43:94:a5:30:c8:6e:77:a7:33:b8:f2:c1:31:
6b:19:76:b3:88:bd:f8:32:dc:47:d7:71:98:44:a6:
ce:42:f9:37:95:1b:f6:9f:dc:30:ad:95:b9:b8:e2:
8e:df:fc:ec:1e:80:c4:c8:50:dc:4f:a4:04:94:e0:
d4:dc:df:6b:59:8a:51:50:d5:8f:cd:72:4f:c6:8c:
79:c5:2b:28:e4:fa:fc:65:f7:05:aa:c5:10:16:2e:
de:eb:b3:7b:5b:2f:29:d7:f6:dd:2d:e0:d0:d2:bd:
6c:b6:22:e8:c1:3f:5f:b2:b1:f7:b3:54:1e:c6:e5:
d1:18:24:8d:1b:53:69:7a:f7:85:fd:f1:13:f3:a3:
49:c2:d7:b4:68:90:0c:a1:56:f9:09:54:7c:a5:9c:
4d:c0:89:85:3b:8e:b3:f9:a3:bd:83:54:40:bd:7d:
9f:2b:26:a8:75:b7:4f:57:68:13:66:8d:5e:95:a1:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E5:95:DD:98:CD:81:35:9B:1E:A4:50:6D:2B:20:F7:94:D9:F0:EA
X509v3 Authority Key Identifier:
keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/FA3E8D68BA2911F0A4AFE171C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.185.21.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7e:8e:20:fc:3b:c0:8a:74:c8:5a:1d:7f:b6:6c:4e:93:2e:
de:bb:eb:e1:6d:72:67:6b:df:f0:7d:bf:61:45:bc:98:1c:8a:
b0:c6:08:fc:06:c1:27:17:e9:25:ed:0c:78:32:3e:7c:77:18:
a1:4a:8c:2f:be:78:d0:f2:84:7e:49:dd:c2:e9:06:bd:ac:ae:
e1:4c:a7:9d:c6:41:f1:9d:aa:16:ff:7e:cb:7d:39:7e:1c:a1:
c6:2e:ea:7b:22:05:cf:2e:6a:88:4b:6d:16:a8:3e:a2:51:43:
50:38:96:6d:49:dc:9a:16:55:52:5e:b4:41:17:77:17:20:7d:
39:2c:54:3c:5f:0c:50:09:1c:52:d8:56:aa:00:eb:a7:a9:9a:
e4:e8:41:28:bb:e8:a2:9b:df:aa:8e:64:10:72:0a:34:6d:e9:
35:91:bb:a3:7c:6c:aa:65:58:32:d9:e6:3c:a1:47:42:8b:f8:
2a:e1:5b:04:95:14:d2:c7:4c:47:e0:0c:49:5e:da:27:9f:b3:
83:c6:3e:40:a2:51:b6:bb:ef:11:3f:35:d9:60:6a:49:0e:f7:
4b:14:83:6c:c7:28:ed:1b:99:71:bc:1f:fd:ed:0c:72:17:33:
86:31:01:35:1f:b4:22:cf:2f:3a:9e:96:c8:7e:97:60:5c:6c:
20:b7:05:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:31 2026 by rpki-client