
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
File: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (raw, json)
Hash identifier: Ostj8QBfqQyf0s95sdcstCnc9X/cEFNAtrPu638e0OE=
Subject key identifier: B7:27:B9:CF:29:7B:23:0A:3C:03:44:EB:18:43:25:B0:8B:E4:05:08
Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
Certificate serial: 0CF6
Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:35:42 +0000
ROA not before: Tue 14 Oct 2025 19:48:02 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139009
IP address blocks: 103.143.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl
rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
Validity
Not Before: Oct 14 19:48:02 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45cce-e5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:e6:5b:6c:7d:a3:47:09:fc:30:a1:67:fc:
9d:12:2e:4c:3c:33:f0:2d:1e:29:98:7f:e7:22:93:
c4:f3:dc:2e:89:55:0c:77:5b:3c:64:ae:22:c7:d7:
44:a0:09:1d:cf:0d:95:62:fb:d1:02:88:86:8e:1e:
98:41:e7:49:cb:e9:19:30:0b:a6:b3:0b:21:25:f0:
49:87:e5:c0:36:e2:46:72:bd:d6:54:8d:1e:32:ee:
6c:98:20:de:f6:be:cd:44:e4:dc:e1:63:f5:07:bc:
37:ff:f5:bb:be:b3:28:ce:48:86:ba:e5:c5:22:88:
8f:18:77:9a:b1:30:cc:6c:2c:90:6e:d8:ef:22:49:
e3:dc:92:7e:42:2e:cc:ba:54:49:2d:11:f0:d9:21:
ab:df:33:a1:58:49:70:d3:e1:c9:23:00:fc:2c:9d:
93:c7:45:86:9b:0f:c6:09:6f:e6:f4:c6:e4:46:c6:
f8:e7:f7:4f:72:25:a7:70:00:55:cb:6b:3e:51:ff:
05:04:63:ce:e3:22:c6:fa:45:1b:09:27:37:9e:9b:
e7:99:d6:b9:b3:74:45:d9:fd:68:1a:6b:8b:5f:07:
0c:a1:96:12:ae:00:97:5e:9f:2a:f8:6c:1d:58:ca:
a5:6f:4d:a1:d5:7f:9c:a5:b4:d0:97:8e:bb:0f:43:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:27:B9:CF:29:7B:23:0A:3C:03:44:EB:18:43:25:B0:8B:E4:05:08
X509v3 Authority Key Identifier:
keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.139.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4a:0f:54:56:bc:a0:3d:b5:94:20:64:af:50:51:5d:4d:30:
d0:4d:49:8e:cd:11:d8:19:cd:0d:70:59:2c:1a:5e:9e:43:fc:
5c:2f:36:28:7d:fb:aa:2d:b4:e9:5e:fd:5d:39:b2:01:bd:b7:
70:22:11:c0:3e:5f:dd:9e:42:8d:7f:b0:7d:0b:ba:9a:08:70:
30:11:88:71:ab:70:ed:71:c4:dd:d8:c9:a4:83:d6:8f:1f:e0:
73:d6:85:76:de:47:2d:1b:12:f2:7f:40:06:5c:4b:b1:77:d1:
25:4a:9e:0a:11:66:77:26:dc:1a:91:43:ec:ee:be:68:2e:5b:
ec:c7:36:f8:43:c1:e2:af:ff:97:7f:52:2f:da:8d:3a:78:ea:
ec:80:1e:01:f1:de:39:01:52:93:0f:9c:ad:98:75:6b:1d:50:
62:c7:3c:3a:83:d0:a8:d6:68:5b:69:f6:2b:31:fb:8e:34:6a:
75:6e:98:ee:82:ef:c8:0d:25:d3:9e:94:6f:4d:ee:7e:70:41:
38:bb:ea:1e:98:69:01:4b:9a:f6:89:ee:16:88:b7:b4:31:c2:
67:87:86:b3:5d:bb:f8:9e:b2:94:5e:d7:9a:62:6d:6b:0f:ea:
69:c4:5e:46:61:b1:11:ad:5c:82:93:55:a1:24:51:4e:65:9d:
a4:5c:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:09 2026 by rpki-client