
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
File: 73E253FC76D011EDBAECD665C4F9AE02.roa (raw, json)
Hash identifier: P5W/HtK4kYY99pZQGqCLFlxhulp8kHcGK4SUQtwdoQA=
Subject key identifier: 9D:5A:02:BA:90:24:8F:F2:AE:73:20:D8:2D:67:AA:62:A4:50:EA:AA
Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Certificate serial: 0268
Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:56:30 +0000
ROA not before: Wed 31 Dec 2025 01:21:38 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150667
IP address blocks: 103.51.84.0/23 maxlen: 23
103.51.84.0/24 maxlen: 24
103.51.85.0/24 maxlen: 24
2001:df1:a8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Validity
Not Before: Dec 31 01:21:38 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4377e-4ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:f7:8f:a2:16:09:64:ce:6e:ef:15:82:6a:
f5:a1:70:e9:1e:91:5e:55:5a:fd:1c:4f:19:3a:33:
98:87:78:6a:95:ef:bc:48:4e:84:53:4d:e4:58:63:
16:29:bc:67:ac:f0:39:33:99:f1:ce:cd:12:40:aa:
b8:ba:f1:6b:15:7a:b4:e5:f7:34:0d:97:e2:de:b6:
1c:48:66:99:5c:74:d2:d5:36:8b:9e:b8:d0:30:fa:
68:09:44:f4:87:4b:86:09:f2:d7:0e:10:b2:ba:db:
ec:53:62:a6:72:89:b5:0c:9e:ce:41:e2:63:e5:4d:
de:ef:af:1a:96:92:1a:63:44:84:4a:cb:d7:86:9c:
90:35:f6:b9:19:6e:c1:93:56:6f:e7:3c:20:31:20:
01:2e:8f:0b:ef:d5:af:b1:ed:07:47:79:a0:28:d9:
fe:01:db:6e:ae:ed:84:e8:90:ed:86:a6:0f:e4:17:
16:a0:19:aa:dd:aa:0d:63:ab:27:1f:ae:ec:78:32:
d2:c9:e3:a7:5e:35:f8:36:c5:0a:b0:01:f8:e5:4d:
2a:66:77:ce:14:b3:38:95:aa:e8:cd:6d:93:68:f3:
42:f1:95:b2:ce:ba:ce:93:fb:1b:0f:1a:f7:74:ee:
c4:9e:12:07:f9:c1:26:0c:a5:1f:85:31:1a:d5:35:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5A:02:BA:90:24:8F:F2:AE:73:20:D8:2D:67:AA:62:A4:50:EA:AA
X509v3 Authority Key Identifier:
keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/73E253FC76D011EDBAECD665C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.51.84.0/23
IPv6:
2001:df1:a8c0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:5a:46:08:5b:fc:3c:af:d1:ae:a0:2d:94:36:2a:1c:13:dc:
14:28:63:b2:a5:4f:da:06:89:87:66:e9:5c:99:06:6e:7c:4e:
e2:4c:87:13:1c:e4:f8:b7:af:b1:7e:1b:6e:e0:c7:5e:67:03:
50:ab:e5:6f:88:d4:df:a2:6b:3a:a2:57:98:b8:d5:3d:85:d4:
72:9a:8b:ad:e9:59:cb:70:3b:2d:17:1b:18:bf:3f:52:c9:89:
27:55:3f:ad:37:8a:6e:0b:28:53:08:d3:b6:ae:f2:1f:81:7d:
75:d6:99:24:ab:6d:b9:0b:fb:94:8f:6b:40:13:47:bc:ef:d7:
25:56:ad:c3:80:74:20:bb:37:50:07:cf:d7:32:8b:50:87:8c:
ae:d7:3f:ae:a8:97:f3:73:31:37:92:2a:58:3c:e7:1c:4e:72:
24:66:44:94:0c:0d:eb:4b:10:1d:d9:e9:42:af:86:52:2c:b3:
c4:3b:9a:73:f4:92:9f:91:c9:b9:17:d0:fc:c9:da:cc:61:98:
89:dd:8d:59:f3:37:b1:87:08:86:36:74:b5:e8:bf:9d:e6:a0:
11:83:9b:ca:e2:b4:2e:a8:e8:ad:03:22:a3:2b:27:6d:19:51:
13:44:10:ba:84:2c:6a:66:27:49:b4:35:9e:3d:1b:a1:65:56:
d1:38:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:33 2026 by rpki-client