
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
File: F3B716768F2F11EE86964D62C4F9AE02.roa (raw, json)
Hash identifier: lzyN5MNSEZnDugz21KoEYtAxenHtxzzxEPsQqNcKc4k=
Subject key identifier: 18:5D:1D:FE:9B:BD:39:CB:FF:AF:0F:04:FD:E7:28:CD:7A:1F:BA:8A
Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial: 02A8
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
Signing time: Sun 03 May 2026 02:34:08 +0000
ROA not before: Sun 03 May 2026 02:34:08 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140721
IP address blocks: 103.152.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Validity
Not Before: May 3 02:34:08 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69f6b420-5921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:2c:1f:8a:e9:33:87:ff:6e:36:53:2e:22:
f2:89:20:0b:e9:b4:c2:6b:e0:da:90:3a:38:c6:7a:
69:3f:f4:fb:dd:a6:3d:a1:6e:00:0c:76:4d:17:60:
fc:33:4c:8b:16:ea:b0:6e:27:98:6a:71:dc:25:98:
79:31:53:cb:8c:94:ab:8c:85:63:38:00:16:a7:84:
a3:a2:a5:37:a9:c1:cc:21:20:ad:42:27:c3:f8:c3:
5d:bb:8b:f6:f8:1a:93:47:35:50:20:7e:fa:6d:c6:
f9:7b:37:60:bf:31:c1:5f:a0:58:67:ab:7f:90:3b:
e5:11:1c:d6:66:c4:ee:3a:22:ef:c8:e5:ef:f6:5f:
dc:f6:65:4f:50:1f:28:95:33:61:1c:4b:91:96:38:
36:2e:c8:ab:d0:a2:1c:e4:b6:dd:6a:47:2a:96:e5:
76:c3:a9:7e:64:03:4f:b8:85:56:de:58:0a:6b:42:
33:89:b0:73:b3:9a:f7:75:07:a3:88:7d:32:3f:4d:
47:ca:ad:98:64:93:17:82:19:47:e0:be:56:5e:aa:
49:cf:df:96:e1:3d:d0:44:f4:51:91:6b:ca:fd:24:
b4:2f:92:87:bd:45:2c:6c:93:a6:14:b8:74:e3:ed:
92:46:f4:3d:60:2b:4b:22:92:2a:7b:8c:d0:cc:98:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5D:1D:FE:9B:BD:39:CB:FF:AF:0F:04:FD:E7:28:CD:7A:1F:BA:8A
X509v3 Authority Key Identifier:
keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.43.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e8:b3:8d:8b:14:d8:be:14:cb:22:c5:4f:38:90:be:64:17:
5f:86:ba:b2:a1:82:2d:e2:d0:8b:ee:a9:53:c0:f8:0d:6d:f5:
8b:42:09:dc:7f:a8:6b:40:89:c9:24:1c:90:4c:73:f8:6f:b4:
92:67:61:d5:3f:9b:54:dc:81:72:b4:fb:03:1a:e2:69:29:b6:
0c:31:e2:e5:69:3b:6f:44:48:88:f4:ad:9f:a1:c4:f0:9e:32:
d5:55:3f:45:3d:af:1f:49:0a:fc:9c:d2:5e:c5:6b:11:18:f2:
18:c3:8b:3e:4c:18:16:37:20:1b:3d:56:bc:9e:40:be:98:15:
69:f4:d7:f4:bd:be:62:01:4c:7d:c7:f7:d9:73:d5:28:0a:00:
63:ee:25:da:ef:26:39:6a:c0:27:b7:76:6d:32:6b:a7:2e:4b:
09:31:9e:20:be:3a:42:38:0a:b4:af:5a:ab:a7:85:bc:dd:41:
f4:ad:36:8b:a6:ac:b8:cc:07:e2:2b:65:49:cb:c6:04:38:d0:
4d:ab:1b:a8:ba:70:94:63:7e:6d:7f:86:4f:fc:8f:49:44:8b:
8c:3b:db:c5:c5:78:02:8c:5b:0d:e8:0f:4f:c1:c9:1f:4e:28:
1b:9d:1f:dd:71:5e:5c:1f:a5:e6:eb:96:b7:63:96:12:b1:42:
4e:e3:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:25 2026 by rpki-client