
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa
File: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (raw, json)
Hash identifier: kPi4zM9MhBs1Z7XrTJy2yFMDPKRgd24Q9Ibk3GjMnUw=
Subject key identifier: 50:8D:82:2A:8A:DE:83:75:62:07:EB:9D:6A:39:24:29:6B:15:DD:FB
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 04DF
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa
Signing time: Sat 07 Mar 2026 00:32:33 +0000
ROA not before: Sat 07 Mar 2026 00:32:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141446
IP address blocks: 103.177.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: Mar 7 00:32:33 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69ab7221-036f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:34:1c:ec:aa:79:41:b0:0c:cc:a0:50:63:
7a:0d:26:7c:cb:37:4e:7b:cd:e8:53:7a:a7:52:39:
09:af:a5:e2:a0:01:fd:9c:4e:05:b4:d8:6d:a4:33:
d9:f9:92:db:d8:5f:af:6a:e3:83:88:ee:86:5e:d1:
5e:22:76:f4:e3:db:ce:92:34:9a:57:dd:0f:be:96:
3f:50:f5:66:38:72:55:86:25:65:a8:98:13:df:24:
d4:6c:90:39:d7:68:b9:3b:54:ac:80:8d:36:11:8f:
a1:8c:d3:11:01:6d:7f:7b:d6:51:e5:93:ea:01:79:
04:fe:fe:88:aa:35:8a:3d:b0:50:c7:3b:df:4b:f5:
ae:76:46:11:1e:01:59:51:ef:51:e8:cf:d3:f8:2f:
39:9b:72:e6:e2:cf:76:45:34:9d:f0:b8:d9:d4:97:
14:7b:10:e0:89:79:d5:88:7f:31:5c:33:5f:bd:f1:
fa:28:77:a1:0a:82:15:82:aa:2c:4a:8e:09:6e:3e:
ea:1f:99:3f:52:14:c3:d1:4f:57:09:a7:00:9a:ef:
3a:0f:12:23:23:38:2f:05:2e:2c:93:6f:98:64:9f:
4e:6a:32:db:65:d1:cd:2f:68:1d:2d:16:91:2b:f0:
e3:53:1f:d4:b0:e6:7b:ca:94:83:f3:7f:63:f1:56:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8D:82:2A:8A:DE:83:75:62:07:EB:9D:6A:39:24:29:6B:15:DD:FB
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:70:75:3d:21:ac:7b:3c:e8:86:3c:bf:41:19:5d:9b:db:2d:
03:05:36:d4:db:c1:05:86:9d:5b:09:6c:a6:18:a9:1a:a3:e5:
c8:b3:3f:a0:4d:4e:19:a1:29:42:49:a7:46:30:f8:90:c8:bd:
8f:d8:e9:75:09:49:dd:24:32:49:ad:84:18:ba:da:bb:58:0a:
20:ad:7c:e2:12:17:b5:e8:ef:bd:70:4c:e2:7e:b8:09:f2:6b:
ac:7e:97:2a:6c:11:f5:de:78:d7:b1:5f:83:4b:67:e0:65:c0:
4d:3c:2e:47:63:80:01:cb:71:6c:91:61:d7:20:6a:05:8f:5a:
f9:5a:e4:20:df:6f:62:6a:a2:3f:de:1e:dc:22:ed:2a:02:ba:
aa:18:36:36:f6:df:9a:0f:2e:f4:a5:3e:b4:ce:20:9b:6c:84:
c6:ae:b9:6b:9c:11:88:b8:6e:b1:df:67:ea:16:38:eb:3f:d8:
18:f0:87:24:0b:b2:03:52:c8:47:72:02:1a:f4:8d:90:d7:c4:
48:57:12:24:73:fc:37:10:af:34:46:26:2e:a6:5c:ea:b2:95:
8d:ad:0d:7a:00:f8:69:27:d9:a2:c6:c9:96:07:af:1d:80:9d:
1d:a4:50:fd:8b:b4:aa:ae:8f:fa:69:c3:40:7d:0e:ea:ed:cb:
b4:06:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:07 2026 by rpki-client