
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
File: 18BDABD2537F11F0A9531C09C4F9AE02.roa (raw, json)
Hash identifier: APtY/87HFPVkFCNmPABVaetDfxhkY/ZtcBEA9fzgnYg=
Subject key identifier: 67:FF:FA:5C:96:DF:1D:9C:5F:47:2C:25:70:41:1D:13:82:E7:B9:79
Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Certificate serial: AD
Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:05:44 +0000
ROA not before: Wed 31 Dec 2025 16:13:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139029
IP address blocks: 103.78.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Validity
Not Before: Dec 31 16:13:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48e08-a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:04:93:78:04:f3:99:8f:30:2f:1e:fb:7d:
4d:0e:4c:68:df:59:e2:45:34:0f:e5:ce:4f:fa:05:
ea:e4:f8:54:79:c5:c0:89:a5:f5:c8:c1:aa:9b:5a:
49:b0:af:e4:e0:b0:d0:89:eb:65:6a:28:ae:55:aa:
3f:20:9c:29:6b:94:ac:49:d6:d0:ab:e1:e6:cb:cc:
b9:0f:85:f6:df:6d:bd:89:a8:a1:16:8a:6d:3e:d0:
03:23:ab:33:cb:b5:30:4d:f1:6c:3b:da:31:e0:85:
05:2b:5f:e9:20:95:ae:47:e8:82:1d:cf:9d:63:c2:
78:1c:b1:06:75:21:c2:58:ae:fb:e8:6a:e9:ac:cb:
1f:50:67:93:ac:7c:b4:32:da:86:47:95:45:b3:68:
f0:ef:c2:b8:f2:41:9e:e2:47:54:a2:95:e8:9f:ba:
da:64:14:6e:9b:8d:7f:bb:15:8d:0f:aa:87:24:3e:
fa:6d:71:0d:88:f7:14:e8:f1:6e:dc:0d:78:ad:b5:
82:05:26:07:51:50:27:e9:0a:e9:e6:fc:37:3d:cb:
bc:6b:d3:bb:f7:02:8b:c0:c7:7e:ca:c0:c7:f8:e9:
6f:c7:5a:5b:d7:ff:8c:8d:f0:65:ff:3c:8e:99:c8:
1a:20:5c:ec:0a:75:d0:f6:bc:b7:36:06:c4:67:13:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:FA:5C:96:DF:1D:9C:5F:47:2C:25:70:41:1D:13:82:E7:B9:79
X509v3 Authority Key Identifier:
keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.78.255.0/24
Signature Algorithm: sha256WithRSAEncryption
10:27:39:95:58:a6:a6:b5:38:02:c3:d5:ed:48:8a:ca:b5:75:
ba:33:45:c0:2c:28:df:3f:f9:3c:fc:af:29:30:fb:99:91:9d:
de:31:b7:67:07:0b:7d:54:07:8d:1a:c8:8f:30:f6:b0:cf:c6:
62:0b:20:d0:e1:a5:1e:7c:6d:eb:a7:03:66:34:e6:9d:48:47:
99:c2:52:7a:c4:03:b5:73:f8:3d:79:a3:7c:9b:fa:e6:ac:0e:
fd:b1:72:f8:77:12:70:69:40:7a:5e:a8:43:1e:c2:09:e6:b4:
f1:38:36:52:67:f9:af:be:a0:83:cc:46:d4:c4:4e:b4:69:75:
d9:47:ca:3e:98:29:01:e3:f0:5b:22:42:f7:e7:51:c2:df:43:
52:ed:9d:f1:f1:cd:25:6e:d4:ac:43:bf:80:5c:4b:a2:bb:4e:
43:77:63:14:50:ee:36:36:3a:8a:b2:ec:87:51:37:c0:f5:be:
e5:b9:7b:f4:43:23:60:01:39:5c:b7:aa:4e:36:ad:6d:b9:b9:
81:45:e0:c8:6a:16:5c:1c:71:6e:af:e4:20:1d:1c:be:3c:b0:
73:65:97:ee:f9:8f:3d:ae:85:f1:17:d5:9a:53:f0:ea:37:82:
18:34:c6:4d:d0:e0:20:03:b5:73:6a:a3:33:21:d5:48:fa:a6:
84:5f:bf:e0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc2NzIxMTAvBgNVBAUTKDZDNkQ0N0IxMTE0RjJENTgxQTgyMTI4MDVGMTJDMzc0
N0YzNEFGODMwHhcNMjUxMjMxMTYxMzQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGUwOC1hOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/8Ek3gE85mPMC8e+31NDkxo31niRTQP5c5P+gXq5PhUecXAiaX1yMGqm1pJ
sK/k4LDQietlaiiuVao/IJwpa5SsSdbQq+Hmy8y5D4X23229iaihFoptPtADI6sz
y7UwTfFsO9ox4IUFK1/pIJWuR+iCHc+dY8J4HLEGdSHCWK776GrprMsfUGeTrHy0
MtqGR5VFs2jw78K48kGe4kdUopXon7raZBRum41/uxWND6qHJD76bXENiPcU6PFu
3A14rbWCBSYHUVAn6Qrp5vw3Pcu8a9O79wKLwMd+ysDH+Olvx1pb1/+MjfBl/zyO
mcgaIFzsCnXQ9ry3NgbEZxM8ZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGf/+lyW
3x2cX0csJXBBHROC57l5MB8GA1UdIwQYMBaAFGxtR7ERTy1YGoISgF8Sw3R/NK+D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3
MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExWZ2FnaEtBWHhMRGRIODBy
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc2NzIvNDM3NjRCRUNGNzI0MTFFNkFCRjAyQjNDQzRGOUFFMDIvMThCREFCRDI1
MzdGMTFGMEE5NTMxQzA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ07/MA0GCSqGSIb3DQEBCwUAA4IBAQAQJzmVWKamtTgCw9XtSIrK
tXW6M0XALCjfP/k8/K8pMPuZkZ3eMbdnBwt9VAeNGsiPMPawz8ZiCyDQ4aUefG3r
pwNmNOadSEeZwlJ6xAO1c/g9eaN8m/rmrA79sXL4dxJwaUB6XqhDHsIJ5rTxODZS
Z/mvvqCDzEbUxE60aXXZR8o+mCkB4/BbIkL351HC30NS7Z3x8c0lbtSsQ7+AXEui
u05Dd2MUUO42NjqKsuyHUTfA9b7luXv0QyNgATlct6pONq1tubmBReDIahZcHHFu
r+QgHRy+PLBzZZfu+Y89roXxF9WaU/DqN4IYNMZN0OAgA7VzaqMzIdVI+qaEX7/g
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:08 2026 by rpki-client