
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa
File: 71014290D87411EE97234F5CC4F9AE02.roa (raw, json)
Hash identifier: 6S2UbDPQhc0s/ttHg30hgcMezorQYndA+hy2IrwcJyg=
Subject key identifier: D5:6B:5E:BA:6B:DA:2B:5C:4D:1C:AF:C4:72:92:7C:AC:C0:28:95:4C
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 01D4
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:44:03 +0000
ROA not before: Thu 07 Aug 2025 04:41:55 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.14.230.0/24 maxlen: 24
2001:df2:b740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Aug 7 04:41:55 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5a233-3743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:2e:12:43:63:c0:7e:c4:63:60:f4:20:09:
6d:98:11:24:9f:5a:f1:da:a0:06:57:47:35:d6:d4:
7d:bc:78:4e:ce:be:35:bc:b8:29:07:ca:ad:b0:42:
48:31:a8:8c:77:3e:a1:4d:72:7b:2b:10:cb:3f:2d:
01:33:9d:58:e5:c2:a1:a0:e5:95:eb:09:50:73:7a:
b7:ee:4c:11:f5:02:75:af:76:53:3c:f9:e3:86:c7:
f6:d8:fb:86:86:2f:35:ce:6d:bb:65:d1:69:30:d4:
c7:3d:51:17:d0:7f:90:69:72:6b:ad:39:55:0a:f5:
14:2a:2c:93:bf:31:f0:f7:73:99:95:11:9b:f6:49:
2b:36:23:9c:e8:33:d4:a4:19:b6:93:09:d8:84:c0:
c3:3d:2d:c4:82:56:49:31:c7:6a:8e:54:39:b0:83:
7b:7c:10:df:87:f8:33:f6:ec:22:d3:5e:fa:f0:be:
67:75:fc:82:06:b2:6e:75:9a:1f:18:75:16:7f:fc:
69:1a:7d:b5:ec:78:5e:a3:9a:10:d1:e2:26:e9:fa:
94:82:ef:43:ca:b6:0c:57:0b:d4:50:a6:8a:ef:c1:
b1:17:34:54:b3:05:cb:1f:76:46:31:bc:e1:96:b5:
33:8b:09:19:9f:62:8a:a9:b6:f5:bb:6e:4a:9e:a1:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6B:5E:BA:6B:DA:2B:5C:4D:1C:AF:C4:72:92:7C:AC:C0:28:95:4C
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.230.0/24
IPv6:
2001:df2:b740::/48
Signature Algorithm: sha256WithRSAEncryption
55:59:1b:c3:a4:3e:11:f1:ff:65:42:49:51:5a:d8:4d:c0:be:
13:06:6c:04:4d:3f:04:69:fa:03:0d:82:51:e0:93:f0:d1:12:
55:c1:56:09:54:37:e7:12:9d:4a:32:c8:33:fc:73:46:50:e2:
48:fd:9a:dc:cc:85:57:15:c4:73:6b:74:3f:97:9c:63:51:91:
05:7e:28:b6:cb:8a:aa:54:b8:d1:7e:3b:9a:14:15:e5:3e:65:
d0:e3:b7:dc:43:10:41:0e:f1:d9:44:a3:b3:a5:a1:f4:61:55:
0d:a9:d9:9e:92:03:9b:4f:16:a4:96:8d:b2:34:20:3f:ae:ae:
09:1a:50:35:b2:6d:f3:0d:dd:f9:5f:d0:0e:d0:bb:70:df:bf:
1c:02:53:da:72:b5:db:54:f4:41:61:5f:74:a5:bd:88:70:ec:
a1:a7:7b:9d:9b:4c:09:43:6a:4f:e3:3d:f5:c5:ae:26:3f:9a:
f9:3e:23:41:f1:ec:49:12:30:54:c7:a8:e2:d9:2a:5e:bd:64:
9e:7c:43:a9:5d:01:d6:8c:ab:4b:03:1c:c0:3d:83:e7:3c:39:
fa:1d:a8:22:c6:5f:2e:1a:1d:54:f3:18:84:96:4e:d5:cc:b1:
25:e7:9b:77:a9:8a:cf:17:64:5c:92:8a:fa:cc:86:64:f1:76:
7e:e9:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:47 2026 by rpki-client