
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/91268A4A06F311F09EDDC851C4F9AE02.roa
File: 91268A4A06F311F09EDDC851C4F9AE02.roa (raw, json)
Hash identifier: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=
Subject key identifier: 5D:81:02:E5:7A:65:50:12:09:58:6C:DA:45:04:BB:89:06:0D:7D:BE
Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Certificate serial: 3540
Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/91268A4A06F311F09EDDC851C4F9AE02.roa
Signing time: Fri 06 Mar 2026 15:14:24 +0000
ROA not before: Fri 06 Mar 2026 15:14:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 20473
IP address blocks: 103.247.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13632 (0x3540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Validity
Not Before: Mar 6 15:14:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69aaef50-3e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:95:f8:34:2b:b4:c1:d7:0d:28:81:41:c8:8f:
fd:20:5f:d8:0b:b9:96:7d:53:06:28:d2:f0:13:f7:
de:09:c3:49:b8:95:dc:1e:3a:71:41:5b:f6:a4:97:
a1:d7:01:58:8a:7c:9d:b4:3e:36:19:58:aa:f5:36:
e7:66:b0:6a:cf:98:41:bb:f9:ca:72:f8:80:68:a9:
73:36:1b:1a:99:38:38:08:78:8e:f8:4b:c2:84:47:
ea:93:81:da:48:bb:b7:c2:4a:e1:f3:df:b6:c8:f5:
32:61:c0:22:b8:5e:10:52:b7:a1:af:50:36:65:e8:
7c:36:48:23:14:e2:c4:2c:57:69:70:94:48:b2:26:
0b:73:37:de:6e:f1:ee:7f:d3:55:e9:da:e4:ba:f7:
ab:7f:1d:8a:fd:9f:c9:76:fa:70:0c:9f:51:3a:16:
74:f6:74:a2:47:f4:3f:f5:f6:42:68:50:30:1c:5f:
ba:b7:cf:d3:c2:95:73:dc:26:29:4f:5f:52:ac:df:
70:d3:49:96:07:13:59:2a:8a:c4:c3:25:c5:bd:c8:
4d:48:97:fc:51:3f:13:63:41:69:f9:df:1d:3a:24:
a4:bc:93:b2:9e:37:5e:c6:2c:db:0b:b5:22:45:8a:
83:f0:26:bd:44:8c:ba:79:e3:24:b9:7f:10:d6:b2:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:81:02:E5:7A:65:50:12:09:58:6C:DA:45:04:BB:89:06:0D:7D:BE
X509v3 Authority Key Identifier:
keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/91268A4A06F311F09EDDC851C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.247.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e4:57:59:37:00:71:0e:99:60:71:59:2a:30:08:bf:10:7f:
52:95:a4:71:6f:05:40:36:02:f8:a9:ef:4f:6a:a3:fa:b9:1a:
dc:b3:1a:e2:af:06:4a:37:ae:78:a4:53:15:d9:38:fa:c4:d9:
a1:78:8c:aa:0a:42:da:76:de:83:52:7a:90:b2:a2:e4:a7:70:
1a:eb:00:e4:6f:7d:72:e6:db:68:33:37:39:9a:67:ee:17:00:
05:e9:b4:59:e7:d4:5b:3f:5c:dc:c2:76:55:09:76:b1:68:fa:
b5:5f:1b:6a:1d:26:1c:4a:9e:22:14:ec:90:bb:d3:d9:37:65:
b1:24:9c:24:14:e4:ba:b7:fc:77:ca:52:f1:09:6b:0e:b9:97:
ba:5c:3d:41:9f:aa:f7:2f:21:1b:55:86:89:88:3a:ad:7d:eb:
37:58:7b:68:71:68:d8:99:8d:88:01:0b:a8:fd:53:16:1d:e8:
91:14:95:f9:16:f1:a1:8e:d4:e5:50:25:0d:5e:0f:db:e8:c4:
5b:54:c9:47:2e:ae:cf:7d:9e:31:2c:15:e1:fa:d2:2b:ab:c3:
0d:3c:5e:26:f8:03:09:53:41:13:fa:80:58:1f:9d:cd:ea:17:
77:79:86:0e:b9:d2:73:0b:c8:ff:f3:c6:2b:25:af:86:fe:76:
ba:13:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:18 2026 by rpki-client