
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa
File: 7043D43679BB11ECB6D72266C4F9AE02.roa (raw, json)
Hash identifier: 4apSZMW7Vfs833gnnmQpU2EzXDtEcmjJdHV9lEBaG8o=
Subject key identifier: 56:2C:22:64:82:81:DE:C7:F4:E0:36:BD:BA:27:8E:D6:C5:4F:28:D3
Certificate issuer: /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial: 0E64
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:37:27 +0000
ROA not before: Thu 04 Sep 2025 18:28:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133929
IP address blocks: 103.141.236.0/23 maxlen: 23
103.141.236.0/24 maxlen: 24
103.141.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3684 (0xe64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Validity
Not Before: Sep 4 18:28:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a424f7-9b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:8a:5f:6b:88:54:e1:b8:e9:35:05:52:32:
39:e4:dd:c6:ac:4b:f2:81:20:c6:ab:97:5f:6c:2f:
ac:cb:6b:80:a8:23:e5:02:4a:2d:ed:ee:87:ee:23:
46:a2:66:fd:50:1b:b1:c7:90:0e:07:e3:fe:43:78:
09:5c:04:a9:1c:65:c9:a7:87:79:e0:f1:00:2a:e2:
0a:17:31:c8:ef:9a:f5:a0:de:72:c9:db:bb:d2:0b:
b2:b3:18:5a:79:3b:b9:6c:d6:ec:dc:b8:98:d2:14:
3e:c0:99:88:d2:8a:c9:82:27:75:86:2f:bc:2e:e1:
90:72:a5:41:c0:94:e0:a1:82:98:33:89:d7:d3:25:
4e:58:4e:68:79:db:db:8c:2d:11:0a:0e:12:bf:7b:
c7:1d:e4:37:5d:3d:25:99:bf:52:1e:4a:34:1f:d1:
a4:62:9b:27:72:74:22:8a:2b:df:52:6b:63:c2:d9:
21:96:08:09:b7:55:34:32:6b:d5:0f:71:e2:13:c0:
c8:71:31:45:08:10:51:6f:0e:37:c7:d2:76:66:d0:
1d:a3:43:ac:d1:43:5c:5a:56:8e:ba:58:ca:34:67:
07:e6:bc:54:e0:56:fd:5a:d6:bd:51:45:83:72:1a:
5d:79:52:7c:de:d0:0c:d0:20:df:0f:7c:f1:0d:ad:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:22:64:82:81:DE:C7:F4:E0:36:BD:BA:27:8E:D6:C5:4F:28:D3
X509v3 Authority Key Identifier:
keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/7043D43679BB11ECB6D72266C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.236.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f1:e2:ad:ac:98:c0:9a:67:1f:25:ae:32:16:f5:32:9d:6f:
ff:69:4f:a3:1e:fa:0a:8f:ad:14:b0:81:05:89:de:3e:dc:2a:
f6:05:1e:df:8e:30:c9:48:10:54:0b:1d:1c:a5:17:6c:7d:38:
8b:35:c6:b5:d6:45:49:12:f4:ac:a5:dc:5a:82:5b:97:0f:6a:
a8:ae:0f:ab:7c:6b:68:45:45:16:da:07:b5:43:9f:fc:af:8e:
f5:d4:87:fc:d0:bb:91:b4:64:c3:cf:31:58:11:ca:9b:5e:a7:
31:76:f1:b9:25:ed:85:21:bc:13:85:4f:82:57:ab:2b:09:4d:
7e:4e:34:3e:a1:b9:cf:b4:5b:d2:53:42:33:12:ae:0a:d4:3d:
f5:40:09:21:d3:ae:64:fe:6a:98:9f:0a:54:5b:d1:87:d2:e5:
7e:31:15:7e:82:d9:5c:26:54:63:f9:3b:bc:c5:9e:7a:e4:51:
f7:c5:26:8a:28:fd:0b:a5:b7:4d:0b:93:e4:37:84:52:24:35:
8d:dd:15:a9:51:d4:5f:1c:69:32:16:b0:25:3a:ca:4a:25:8e:
bd:90:ff:6d:9a:17:a2:79:84:48:87:96:34:22:3c:32:b6:57:
42:82:3a:ae:cb:4d:e6:26:2c:21:d1:35:4b:de:ab:34:04:a4:
ab:28:96:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:12 2026 by rpki-client