
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/B4C685B09CB111EFA6F8E627C4F9AE02.roa
File: B4C685B09CB111EFA6F8E627C4F9AE02.roa (raw, json)
Hash identifier: aoBTkJouVxyNkkgtw1vmV8sS1BnP7mpfp25E9TCfROM=
Subject key identifier: 39:67:3F:AA:7F:8F:CA:8E:CA:BF:F1:A1:2B:90:0A:B1:28:D3:A2:75
Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Certificate serial: 0102
Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/B4C685B09CB111EFA6F8E627C4F9AE02.roa
Signing time: Sat 07 Mar 2026 05:42:25 +0000
ROA not before: Sat 07 Mar 2026 05:42:25 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132890
IP address blocks: 103.179.130.0/23 maxlen: 24
2400:4c60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Validity
Not Before: Mar 7 05:42:25 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69abbac1-7ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7b:de:42:e0:50:c8:af:da:40:43:2b:d0:68:
94:32:e7:6d:a8:e2:c8:59:30:2b:d6:14:1a:12:0d:
13:66:bb:69:30:1b:d4:70:0d:84:5f:3a:bb:70:34:
8d:32:2c:0c:4b:1b:91:82:13:29:57:c1:ef:ab:50:
24:4a:e0:11:24:eb:70:10:ce:d8:ef:eb:2d:54:f4:
63:40:5e:53:a2:00:fc:53:6e:2f:67:aa:12:9e:c1:
96:1e:d8:59:09:47:63:f3:8c:ac:6a:ae:29:60:24:
f8:9a:b5:6a:07:26:2d:d7:75:fd:0d:1d:57:78:a2:
f8:a5:0f:89:d4:ee:4b:24:27:12:39:a9:f3:33:ea:
5c:87:5a:3a:51:9f:06:ce:0b:85:c9:14:7c:59:91:
03:51:3c:64:45:24:74:fc:9f:c2:51:de:11:eb:15:
86:08:63:f1:14:f7:ee:b9:06:b3:6e:61:eb:f8:cc:
74:5c:b0:36:ef:35:0e:4e:fb:c1:37:69:f9:1b:e8:
ac:40:e7:55:7c:a5:17:b4:58:1e:ef:bd:f0:f5:a7:
c2:90:f6:7c:1d:9d:e4:fe:e1:22:1c:dd:be:0b:bc:
89:de:9b:4b:5c:a6:ee:63:f1:cc:c5:1d:b3:2c:6d:
a3:fd:23:ba:df:b3:6c:53:7c:20:10:9c:e3:23:ae:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:67:3F:AA:7F:8F:CA:8E:CA:BF:F1:A1:2B:90:0A:B1:28:D3:A2:75
X509v3 Authority Key Identifier:
keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/B4C685B09CB111EFA6F8E627C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.179.130.0/23
IPv6:
2400:4c60::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ec:12:e2:94:57:ba:72:48:1b:2b:89:ac:7f:43:1c:bc:d9:
71:76:5f:e5:36:45:fd:c1:f6:52:01:57:c5:c6:65:1f:cf:27:
c5:93:78:20:08:2f:a8:40:31:c4:ed:14:bc:be:b4:42:c7:0d:
a8:db:25:01:9c:94:f5:23:92:11:1a:d8:41:81:48:40:21:9f:
09:14:a2:24:41:21:27:84:23:2e:60:61:a9:db:94:88:73:f9:
00:d2:e6:0a:19:d2:05:78:d7:b7:22:3e:7c:22:c2:ae:8c:e6:
8e:c4:97:69:59:2b:5b:0c:e5:03:5f:d8:17:17:17:11:a8:17:
7d:c3:aa:4c:57:39:3d:f2:d1:d3:29:d2:4e:13:cd:8a:db:47:
73:a7:3a:4d:c3:c6:21:ed:b4:2c:78:a2:2b:d9:d6:1c:27:29:
dc:b8:9c:1d:b2:8b:3c:77:b0:8d:7a:da:0b:28:7d:3c:13:2a:
18:ba:81:9a:17:2c:ae:11:0a:c6:fb:45:ab:10:a0:4d:0d:ec:
cf:30:3b:a6:0e:c5:09:a7:ed:12:2a:51:3d:53:b0:18:d3:74:
4a:90:2f:e0:be:fe:f4:ff:f7:eb:96:29:4a:c9:04:db:88:33:
e0:09:a9:4d:4b:d2:5f:be:ea:24:de:12:48:f5:58:dc:0d:48:
e8:cc:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:32 2026 by rpki-client