
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/B8753568229D11F0A5CF4B78C4F9AE02.roa
File: B8753568229D11F0A5CF4B78C4F9AE02.roa (raw, json)
Hash identifier: JBjC/hjIFgijHYWzdFZhAZ7It9/PA5hptGK+4xTPsfo=
Subject key identifier: 55:15:57:00:47:59:92:E5:34:62:7A:24:69:93:F7:0B:84:44:26:AA
Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Certificate serial: 099C
Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/B8753568229D11F0A5CF4B78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:51:08 +0000
ROA not before: Thu 26 Jun 2025 20:46:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 131316
IP address blocks: 103.4.122.0/23 maxlen: 23
103.4.122.0/24 maxlen: 24
103.4.123.0/24 maxlen: 24
103.50.12.0/24 maxlen: 24
103.114.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460 (0x99c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Validity
Not Before: Jun 26 20:46:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4282c-31e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:fc:78:45:bb:be:c7:36:0b:8f:b6:e6:73:
2f:99:e9:94:63:dd:01:0c:5b:9c:d9:4f:ca:a4:dd:
13:80:67:94:6e:30:0f:47:17:7f:cc:a2:21:bb:70:
75:ac:6a:f2:6b:28:f9:0a:1c:12:e8:19:dd:f2:2a:
ae:52:11:d5:a1:fe:78:2c:cb:27:00:9a:3b:25:4f:
95:6e:f4:53:3f:18:45:14:d6:a5:5b:27:6a:39:93:
df:40:f1:5b:89:b6:8c:f7:bb:83:49:71:8b:6a:68:
03:24:69:4d:b6:2b:9d:c3:b9:2c:dc:3a:6e:26:a3:
e3:5d:6c:45:4c:ba:06:9a:99:62:06:16:a4:36:46:
91:d4:83:b2:47:ae:53:d2:f4:da:15:3a:43:86:82:
d3:99:03:de:b6:2f:de:8d:8a:df:3e:33:fa:30:87:
5e:02:64:fd:04:e9:78:9a:2b:3c:9c:53:cb:46:ef:
00:9f:81:60:5a:43:4b:85:61:30:bf:f6:77:69:00:
08:20:23:d4:b5:ae:f2:1d:ee:e8:ba:02:e7:5d:1c:
f4:22:11:0f:8a:98:46:f2:49:b6:5c:a2:85:55:bc:
0e:aa:29:31:a6:17:48:85:a9:5f:f4:96:63:15:37:
f1:23:36:36:22:31:f7:3c:93:c7:91:99:8e:31:17:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:15:57:00:47:59:92:E5:34:62:7A:24:69:93:F7:0B:84:44:26:AA
X509v3 Authority Key Identifier:
keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/B8753568229D11F0A5CF4B78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.4.122.0/23
103.50.12.0/24
103.114.34.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fe:ad:8f:df:ea:90:d4:94:60:f3:4f:e6:ed:3c:92:fc:ed:
92:60:d2:e2:49:18:18:0a:5c:a4:77:91:f4:c8:2f:cf:ee:af:
e1:e7:95:ca:b3:4f:92:24:d9:66:6f:90:3f:69:25:2f:c0:1b:
72:1d:7c:1c:8c:e0:ab:b8:76:b2:24:8a:d0:71:e4:3c:ee:a8:
26:18:9b:60:f0:c0:cd:07:4a:04:2d:b5:a0:cb:39:47:f2:bf:
85:0c:3a:30:e0:a3:e6:ec:f6:f0:5b:ed:08:2c:b2:59:a4:a0:
96:1b:db:70:d5:b7:62:f6:40:55:80:3e:ae:41:24:1f:85:0e:
7e:88:30:da:37:5f:da:a8:8d:c9:56:66:f2:9b:ca:96:17:ae:
ce:8f:c7:a8:91:87:64:c9:f5:3b:fd:7c:d4:ae:e7:3e:c6:1e:
f8:ff:ec:3a:8f:90:8e:82:1f:16:e0:14:7e:3f:13:cb:f1:08:
e2:f0:1b:e4:80:0a:2a:8d:d2:66:54:7e:16:e1:69:4f:46:8a:
fb:ba:74:ee:2b:9c:95:4e:3c:ee:1a:0e:b2:12:30:b3:47:bb:
16:23:c0:17:3f:b2:1f:b7:a8:72:ce:15:c3:dc:4c:71:db:04:
08:e0:f2:0a:21:39:67:e9:8a:e2:40:39:38:41:7c:7c:cc:83:
6c:c5:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:52 2026 by rpki-client