
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa
File: 329274C4D31611EEA7F0475FC4F9AE02.roa (raw, json)
Hash identifier: LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=
Subject key identifier: 3C:31:C0:43:8D:69:D0:7C:DC:12:AD:69:26:D0:9F:8A:61:28:31:1F
Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial: 023B
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa
Signing time: Thu 12 Mar 2026 18:23:02 +0000
ROA not before: Thu 12 Mar 2026 18:23:02 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137967
IP address blocks: 103.134.25.0/24 maxlen: 24
103.134.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Validity
Not Before: Mar 12 18:23:02 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b30486-d6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:f7:48:f5:51:0a:e4:80:a7:3b:26:9d:0a:
2a:db:7c:4a:96:06:60:6f:03:09:5e:7e:69:e8:58:
c3:16:bb:f3:aa:c4:57:9b:36:5e:dd:94:34:d9:89:
e3:0f:16:32:e6:8c:28:ba:65:67:4c:2c:af:2c:8e:
f0:87:39:7f:1c:6d:a9:d2:71:3c:1c:15:87:18:8b:
42:54:ea:1c:dc:99:b0:2b:70:75:52:91:05:a7:c5:
9d:ea:3a:b6:01:0a:2e:6b:99:dd:61:48:3c:b1:18:
4f:35:41:f9:ac:55:0b:b9:45:4f:ff:dd:df:7b:25:
2b:4e:4f:26:3c:4f:6c:a5:10:76:82:fa:fa:5e:f9:
1d:ec:3d:01:2c:38:58:48:47:f2:48:0c:57:fe:ac:
b6:58:62:e0:d0:5b:b7:b4:c7:7a:7a:36:a4:71:86:
e2:6c:48:75:57:a1:f1:82:b5:e5:54:d7:ac:d9:94:
74:da:44:95:56:44:52:9c:8b:60:99:82:e0:a1:62:
6a:46:d2:5e:b7:c4:4f:fc:4e:a0:76:03:70:d4:67:
8d:82:d8:23:6e:fc:4b:63:b0:46:04:4c:f4:49:88:
46:3d:63:af:f2:b2:53:6e:cd:68:e4:63:4c:f8:54:
7b:9a:e6:98:d5:e5:ec:9a:96:3e:21:10:ad:8e:73:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:31:C0:43:8D:69:D0:7C:DC:12:AD:69:26:D0:9F:8A:61:28:31:1F
X509v3 Authority Key Identifier:
keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.25.0-103.134.27.255
Signature Algorithm: sha256WithRSAEncryption
1c:15:dd:64:33:be:b8:8f:5e:fd:db:7d:8b:9e:15:74:d7:68:
b5:4e:1e:b4:ea:df:d1:97:6a:92:b7:79:c6:9f:b9:53:88:eb:
9a:d1:df:7f:f6:a2:7e:5e:c3:56:fe:70:64:b5:b6:83:84:16:
15:5d:03:57:47:a1:0b:c3:b9:ec:a2:c8:e3:13:46:3e:1d:62:
2f:4a:8d:53:88:45:19:a4:ee:4d:24:c6:1f:42:48:4e:99:8c:
24:a1:4a:4f:6c:9b:68:90:ca:c6:4f:15:ca:46:ac:00:af:3a:
36:c7:32:da:be:79:b0:98:c7:70:cb:76:2d:49:63:63:b9:bc:
3a:37:9f:17:c4:05:cb:2e:39:30:50:78:c9:ca:92:a2:34:3d:
20:8f:62:2b:98:19:07:1f:7e:54:38:8e:d7:4e:c3:ac:ef:47:
4a:22:d1:29:65:73:46:a1:48:9e:86:e6:f6:42:7e:a0:ff:97:
ba:e5:dd:81:46:8e:e0:df:87:d4:2c:56:e7:38:88:8d:e4:65:
8e:4d:2b:bb:93:27:21:ce:19:90:f5:b8:ed:c0:10:f0:56:c1:
50:2b:08:8f:c4:89:5d:fd:cf:aa:0d:24:33:63:c4:6d:d2:95:
eb:3b:78:24:d5:5e:fd:8f:e8:b1:ca:00:dd:9a:ba:65:6f:a5:
07:41:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:29 2026 by rpki-client