
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F949AD48D5E411F1B86A4476FC65CEF9.roa
File: F949AD48D5E411F1B86A4476FC65CEF9.roa (raw, json)
Hash identifier: LpeHcX6/e1Gm5kAv3Dkqg98Oy7ze2Cpofjh/IcSosoA=
Subject key identifier: 37:44:C7:94:7E:E3:00:1D:59:3A:B5:84:7B:65:B6:6C:30:F9:8A:B5
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 081D
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F949AD48D5E411F1B86A4476FC65CEF9.roa
Signing time: Sun 01 Nov 2026 11:11:24 +0000
ROA not before: Sun 01 Nov 2026 11:11:24 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 211392
IP address blocks: 43.251.116.0/23 maxlen: 24
103.42.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Nov 1 11:11:24 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ae71e5c-9766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:da:d1:c2:5a:28:98:fe:20:0a:d9:f4:51:
f9:cc:02:e1:61:8c:8e:84:bc:5a:a0:df:85:06:c6:
92:fa:83:bc:fd:2a:a4:47:62:00:4f:8b:7a:29:10:
c0:2a:ac:08:3f:d5:df:14:e4:72:da:56:39:8d:d8:
4f:f4:2f:b9:db:10:34:d3:a1:e4:e7:9f:21:03:39:
a5:2b:e9:6b:e0:9e:18:61:71:1d:e7:88:ab:a6:d5:
8d:7c:9e:8b:2e:32:d7:80:04:82:50:a5:8a:01:a8:
8b:ba:2d:71:34:c1:a4:3b:08:1c:6c:87:4c:1e:b3:
be:da:0d:51:ac:06:f9:73:26:a5:7f:59:fb:a3:ac:
9d:6c:6c:76:db:74:6a:84:5e:78:37:60:47:56:74:
51:a5:00:dc:97:c3:eb:09:c3:ff:ff:46:79:ab:79:
4f:95:50:79:3a:74:fa:b2:5e:d7:57:f5:f4:99:b0:
34:1a:a2:bf:0b:14:38:ff:05:e0:de:07:ca:85:64:
92:4e:8c:9a:ac:6a:79:00:a6:ee:aa:a9:6f:38:49:
69:c3:75:aa:57:c5:fd:6e:09:4b:44:2d:ca:b1:4d:
04:94:29:7b:30:be:c4:f6:4d:12:e0:82:32:23:d3:
32:c9:3c:fb:07:c7:1d:e2:e4:a3:08:15:11:67:db:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:C7:94:7E:E3:00:1D:59:3A:B5:84:7B:65:B6:6C:30:F9:8A:B5
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F949AD48D5E411F1B86A4476FC65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.116.0/23
103.42.180.0/22
Signature Algorithm: sha256WithRSAEncryption
33:6b:1c:60:74:58:c2:67:05:21:37:2a:d5:37:a6:ab:10:37:
57:f2:fd:0d:0c:02:83:ec:a2:e5:98:75:6c:96:ef:a4:f8:6a:
03:03:0d:59:4c:b8:1f:49:05:fb:32:d6:2d:10:1d:24:39:6c:
e4:19:2f:d9:22:63:0a:ff:ea:7f:eb:d8:bf:b9:45:79:2e:64:
a9:1f:9b:62:3c:e8:4f:8f:68:c4:17:14:6d:41:81:45:8b:ef:
0d:de:de:40:11:de:6f:21:4a:75:90:df:82:ec:ca:02:15:0f:
8c:4b:e3:a0:be:2b:0f:4e:6c:17:be:1d:a7:6e:cd:e9:85:21:
0f:1d:bc:1d:bf:cc:ed:6f:ce:3c:a6:34:81:46:85:8c:ab:2d:
73:7e:ba:dc:12:53:c6:b6:2a:93:19:21:cd:0e:fb:74:1f:63:
2d:c3:63:59:cf:3a:35:0f:39:59:a9:74:98:b3:2d:a5:85:5e:
bb:aa:dc:4c:59:09:26:02:f9:22:e7:04:92:45:6d:c6:d7:5c:
d1:07:c0:09:40:39:77:9f:1f:01:04:a6:6a:0b:c6:b6:f2:8a:
58:50:8e:59:05:18:dd:25:96:f5:93:0f:ec:d5:bd:ff:78:38:
dc:33:01:86:2c:a1:55:eb:f5:ee:3b:83:9a:53:6a:02:e9:d8:
84:15:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:29 2026 by rpki-client