
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/743D4A1A245F11F1B445E15AC5833773.roa
File: 743D4A1A245F11F1B445E15AC5833773.roa (raw, json)
Hash identifier: I1pnbFkaRNRmC3NYqt0+dVRJnrgUwzqm0Vjq3Hx70aI=
Subject key identifier: 52:FA:BF:30:2D:89:BB:6F:29:BF:86:94:D4:DA:A5:1D:18:18:72:7F
Certificate issuer: /CN=A91D69B9/serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
Certificate serial: 02
Authority key identifier: 63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/743D4A1A245F11F1B445E15AC5833773.roa
Signing time: Fri 20 Mar 2026 13:19:42 +0000
ROA not before: Fri 20 Mar 2026 13:19:42 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133139
IP address blocks: 103.243.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl
rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D69B9, serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
Validity
Not Before: Mar 20 13:19:42 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69bd496d-ff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:a9:1e:9f:d2:d8:c6:30:64:43:3f:a8:09:
ed:74:b9:33:f2:f9:d6:d5:31:89:74:02:71:dc:bc:
d5:f0:3a:ff:ab:80:b6:5b:f5:b8:b3:b4:75:fc:9d:
bc:1f:4b:b2:c8:49:84:4e:9e:fe:3f:74:3b:03:6d:
e1:62:fb:b5:cc:65:5b:60:87:83:59:0c:0d:e6:17:
85:70:56:98:8a:93:0f:27:8a:e5:6e:ec:c7:86:c0:
25:85:09:94:f7:16:7d:30:41:fc:f5:2d:b8:9a:61:
f9:3f:4d:ca:bc:c8:97:d2:0b:a4:e7:19:a6:54:b2:
35:a8:51:27:66:cf:2b:5d:01:4e:6c:85:0b:7f:49:
37:d0:1e:87:62:87:77:29:36:ef:d6:52:4d:dd:78:
ba:7c:59:fb:45:ee:2a:ba:0d:3a:20:6e:c1:25:6f:
43:4c:69:03:b5:bf:97:ad:c0:a4:cf:a0:a7:bb:b5:
67:2c:12:5c:dd:cd:58:b8:d7:94:6a:78:15:ba:50:
06:ca:a7:cf:af:f0:43:79:b6:3a:e1:65:ac:58:32:
97:78:f4:50:cb:22:70:39:97:a3:3d:97:f1:b5:33:
46:30:03:af:55:95:97:07:9e:00:aa:51:49:34:e6:
87:6d:d9:b2:3a:49:a3:94:e3:72:8f:eb:38:b7:e9:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:BF:30:2D:89:BB:6F:29:BF:86:94:D4:DA:A5:1D:18:18:72:7F
X509v3 Authority Key Identifier:
keyid:63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/743D4A1A245F11F1B445E15AC5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.36.0/22
Signature Algorithm: sha256WithRSAEncryption
97:41:2c:34:c8:92:40:66:48:84:60:df:f6:8d:ac:a1:ae:52:
73:5d:b1:b0:83:b2:96:22:29:d9:b5:35:f8:b2:d9:cd:b8:a0:
a8:6b:57:4a:2a:57:ae:94:36:e8:91:21:9e:e2:b8:7e:97:0c:
bb:31:4e:0c:7d:cf:f3:89:6e:f0:59:03:56:40:b7:d9:ac:a4:
23:dd:bf:b9:5b:d6:57:91:c6:a2:52:d6:c8:0c:56:59:39:6b:
3c:06:1a:6d:55:9c:0e:27:2f:fd:cd:00:ed:0e:b1:e1:68:e9:
2b:fe:88:68:f6:93:bd:ee:0d:17:6d:d0:a6:ea:61:44:d9:ff:
c0:7e:1b:77:01:70:1f:73:9f:00:d7:25:8b:28:f7:22:2e:e0:
17:28:cf:1c:47:1f:6c:1e:40:41:f6:bf:fb:90:a4:63:79:ad:
84:de:29:93:36:0b:74:ed:e2:0b:10:98:1c:fe:b8:81:97:d0:
b5:a8:73:2a:8a:8e:0f:94:fc:20:15:c7:f0:6f:01:6a:94:4f:
9c:fd:2a:c6:03:1e:3d:e9:6a:ef:02:c6:44:82:9e:11:b4:6e:
15:6a:ae:73:f7:59:30:9a:37:b1:b6:8a:d2:5a:57:85:56:26:
fc:e2:ab:a0:c0:c5:f6:ab:ff:a2:69:2b:c1:f9:ce:55:79:4c:
00:48:4d:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:08:36 2026 by rpki-client