
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/0C04EFB43C9811EDB6A25D4FC4F9AE02.roa
File: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (raw, json)
Hash identifier: 3EomuYTOYpdRonmxsDgyICA/moRstX6OW0zEPClInuY=
Subject key identifier: 16:F5:3A:69:8F:B6:DD:A7:BD:C3:17:C2:3B:57:6D:20:BC:46:01:FD
Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial: 02C8
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/0C04EFB43C9811EDB6A25D4FC4F9AE02.roa
Signing time: Tue 03 Mar 2026 01:35:12 +0000
ROA not before: Tue 03 Mar 2026 01:35:11 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 149446
IP address blocks: 103.179.204.0/23 maxlen: 24
2400:4ea0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Validity
Not Before: Mar 3 01:35:11 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a63acf-5821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:b5:35:24:f5:26:3c:61:7b:0d:fb:b3:a7:
6b:73:6b:c7:a7:f1:41:0f:3f:14:d1:93:a9:d8:13:
98:1d:92:02:11:6a:fa:8b:1a:0e:28:3c:84:f8:77:
8d:29:40:4e:3b:b5:46:c2:93:66:54:81:e0:ae:c5:
bf:c7:58:07:41:75:f0:29:ee:0a:af:c1:eb:b2:ad:
e8:0e:7b:6f:1f:52:6c:15:d4:3d:38:61:f5:8b:22:
b4:b3:f0:ec:10:8c:3f:26:17:4b:5c:1a:9d:45:62:
d1:03:cb:91:7d:31:ef:c7:e6:80:32:e0:ca:37:67:
d2:d1:65:59:8a:d7:1b:28:c4:7e:fa:b4:eb:5d:82:
80:f6:e3:75:de:1d:5a:5d:28:a9:88:de:d3:22:93:
e6:07:f4:04:ae:b3:bf:12:99:ab:e9:3b:bb:bc:83:
2e:1b:88:ff:8e:85:ad:71:9e:85:23:4f:2b:b3:7d:
e7:c2:b0:9a:2e:d1:cf:69:0e:0a:bc:a0:71:3a:c0:
a9:12:ef:1d:6c:01:15:3a:69:f6:cf:f9:8a:69:03:
d9:0e:1c:6a:9d:a8:7d:7f:90:1f:11:95:05:2f:87:
78:55:2c:66:7e:9b:d7:ef:3d:31:1f:9e:d1:b2:9a:
f6:1a:5f:c8:34:00:b5:86:a7:4d:80:c3:99:60:2b:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:3A:69:8F:B6:DD:A7:BD:C3:17:C2:3B:57:6D:20:BC:46:01:FD
X509v3 Authority Key Identifier:
keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/0C04EFB43C9811EDB6A25D4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.179.204.0/23
IPv6:
2400:4ea0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:48:51:dd:05:7c:5d:57:79:21:4e:36:bb:79:25:12:ea:13:
0f:ab:82:8c:ae:60:04:e0:a5:95:c8:d7:e8:61:9e:4f:c8:cb:
5f:99:7e:c0:28:3f:af:2a:5d:be:91:b8:e3:e5:df:95:8a:fc:
67:da:a0:7f:de:12:5d:ba:cd:55:0e:2f:52:b7:84:ae:42:ec:
69:f4:73:53:34:bb:6f:be:6e:1d:34:44:4d:13:d8:a4:10:e4:
fe:2d:55:da:22:a0:95:e5:4d:49:2e:7b:64:b1:9c:cc:e0:12:
fa:8d:85:1c:93:a9:6e:dc:27:b9:fc:19:7d:52:e6:f2:20:9f:
4d:b9:a7:76:53:28:76:d4:08:cd:2d:f8:8e:d0:e1:01:d2:7e:
c8:80:9f:30:4a:bc:43:af:e5:59:03:24:96:84:f6:ca:94:2a:
c9:66:16:83:50:4f:54:af:c9:14:42:34:96:35:94:76:48:0b:
13:fe:7a:2b:76:ce:ce:f6:c1:ac:d3:47:03:d0:c3:f9:8b:4c:
ef:0b:15:79:b8:5a:ea:af:84:d6:88:00:62:b8:37:86:20:c9:
ce:70:ae:4b:18:af:ea:59:fc:dd:56:5c:ae:ad:8d:a2:1e:30:
00:96:51:0c:1c:18:6e:34:53:6e:39:93:58:27:c1:fb:dc:85:
b6:20:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:55 2026 by rpki-client