
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
File: FF4EB6B2395811ECA422C462C4F9AE02.roa (raw, json)
Hash identifier: 1EXMwCZdlr4n5uu1XLxW00w3UXh6JZwNTcRYA1sNXNA=
Subject key identifier: 4F:09:CF:D2:DF:67:08:81:7F:04:E8:6D:2E:18:93:3B:E4:12:81:A3
Certificate issuer: /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial: 0523
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:44:26 +0000
ROA not before: Wed 01 Oct 2025 00:26:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141004
IP address blocks: 103.171.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Validity
Not Before: Oct 1 00:26:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a434a9-4440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:39:30:66:96:72:4f:eb:91:31:5f:83:3e:
69:3a:d0:2f:23:16:cd:e3:be:37:ad:6b:2b:09:b6:
83:64:3c:28:e0:77:97:10:91:dd:48:18:ea:02:5e:
af:18:fb:cc:3c:45:41:11:78:26:13:f8:78:c0:42:
6d:26:21:92:8d:95:31:02:36:32:b9:94:e9:78:b2:
fb:5d:26:a0:30:04:76:12:ae:7f:fa:17:7b:d8:e6:
e1:f5:db:5c:a5:c3:27:b4:df:01:3c:74:3a:8e:c8:
bd:70:58:39:45:be:7a:d2:7f:e0:5e:47:ea:a6:02:
96:36:4f:e9:26:29:94:05:61:d3:45:29:d8:57:f8:
0f:56:f2:93:3f:51:21:ec:38:93:43:0d:da:c9:0b:
ab:37:66:db:bc:bd:f9:5f:3c:bc:72:81:80:5c:d8:
01:6a:7d:fa:d5:de:88:ef:98:9f:92:18:56:99:db:
e2:5c:78:a1:7e:90:cf:64:f3:65:c4:2a:fa:99:8c:
16:0c:3c:5b:50:c5:92:97:24:20:5c:3e:e6:bb:8d:
53:c7:c9:03:1c:ed:ff:d0:62:d4:1c:7f:3a:19:a5:
21:af:d0:4b:f9:75:ef:d7:dc:2d:3a:5e:7a:fb:61:
61:0a:21:70:87:9b:2a:4c:8e:15:8e:93:64:c2:6c:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:09:CF:D2:DF:67:08:81:7F:04:E8:6D:2E:18:93:3B:E4:12:81:A3
X509v3 Authority Key Identifier:
keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.180.0/23
Signature Algorithm: sha256WithRSAEncryption
49:cc:2b:3e:02:ca:a7:ea:6d:06:1a:1d:4b:d4:56:b3:6b:39:
1c:dc:f8:bb:22:92:7b:44:b5:99:74:85:d2:ba:c5:7b:f5:ff:
a8:a3:53:d8:9f:3a:88:b1:aa:5f:e3:8e:7a:04:98:71:ee:37:
a8:2b:0d:6f:19:71:f1:e9:2f:ad:a7:46:28:0e:78:60:93:d7:
a1:dc:84:95:3c:ab:57:8f:f4:a2:8f:99:65:89:c3:c9:37:ed:
5d:d2:c8:84:c9:61:d6:a8:cc:ba:da:66:ca:48:51:f8:87:81:
f8:f8:8d:36:0d:86:cd:6b:03:24:f8:b1:5c:59:39:5b:be:93:
c5:85:9a:ea:b3:ef:24:98:80:63:58:ef:65:0a:a1:57:83:1f:
22:ce:69:ee:b0:bf:c9:1c:c6:28:36:1c:2f:87:2d:8f:5f:92:
55:26:6a:ec:03:41:69:e3:32:d3:06:21:9d:0b:c0:93:83:fc:
ce:b6:7a:52:57:53:49:de:ad:e9:37:00:d1:dd:7e:2b:43:45:
e5:b0:24:ff:ae:b8:ba:83:b7:07:50:58:8c:1e:fa:ab:ab:d3:
03:5e:d0:2f:55:0e:cd:8d:16:f7:f7:b1:c1:1f:69:7b:db:db:
f8:d4:23:8a:46:21:29:0e:26:61:10:79:95:69:79:f0:08:e1:
e4:07:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:39 2026 by rpki-client