
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa
File: F23D65727CAF11ED87752A6BC4F9AE02.roa (raw, json)
Hash identifier: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=
Subject key identifier: F5:EC:C6:F2:6E:63:3F:38:4C:69:2B:81:41:48:59:D7:99:4D:26:BB
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 0ACA
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:46:48 +0000
ROA not before: Sat 20 Dec 2025 19:16:37 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 40627
IP address blocks: 103.44.68.0/22 maxlen: 24
2400:db60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2762 (0xaca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: Dec 20 19:16:37 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45158-c306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:5c:02:f9:fa:bb:1d:92:c5:8c:d8:04:64:
97:b2:4a:4e:c2:2f:1a:bf:6b:83:5a:ee:4f:0f:dc:
0f:a2:3c:d1:9d:94:7c:3a:d4:6c:e6:9d:b8:18:12:
cc:f1:d9:8e:a9:69:cb:b9:6c:9f:28:fc:8c:e1:29:
bd:f1:26:8f:4f:9c:ea:26:37:36:5f:9b:c9:01:95:
3b:a1:e7:e4:cd:c6:d9:72:fb:ed:e4:c9:c6:f8:74:
6d:10:d2:78:9a:d8:73:60:27:29:4b:d3:22:46:11:
bf:5c:72:40:b2:8f:6e:e3:4d:1f:74:44:71:f1:ac:
3c:02:da:80:4a:71:54:82:ef:47:9e:48:ce:b1:0c:
d5:97:3f:b7:cb:05:99:52:01:5d:44:0f:a1:5b:8d:
a0:a4:a1:32:72:92:e2:06:4b:d2:f9:ee:1d:46:64:
1f:2f:31:49:a6:87:3c:8d:ae:bf:0e:44:9e:ef:3b:
92:cb:5b:18:c7:41:79:7f:e6:d6:63:da:a3:5f:43:
4f:ec:6b:3d:0f:f8:fa:c5:77:4e:b9:e6:56:41:db:
38:93:70:f2:0a:0a:d5:e9:09:17:5b:74:fc:20:28:
7c:e5:cf:22:07:ef:d2:5b:ff:d2:94:4b:13:1c:56:
67:2c:fe:ea:cf:ac:6a:94:f8:f4:1a:16:8b:20:83:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EC:C6:F2:6E:63:3F:38:4C:69:2B:81:41:48:59:D7:99:4D:26:BB
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.44.68.0/22
IPv6:
2400:db60::/32
Signature Algorithm: sha256WithRSAEncryption
1f:d8:df:69:79:b6:b4:39:b6:fa:1c:86:a4:f8:1b:2e:66:80:
e7:13:10:7d:8f:d9:02:49:f0:ed:2c:99:db:06:ea:1b:91:bd:
5f:68:31:6c:3c:f7:56:8b:58:c9:cd:41:7a:83:b9:4a:8d:a7:
6f:e1:46:ff:88:ef:0a:4d:98:b5:33:b7:2d:11:3e:c4:56:ee:
3d:8c:18:e5:33:c9:38:18:e6:2f:c6:03:1c:f5:01:3c:2f:65:
54:07:9a:52:3f:2d:30:33:7a:c7:8b:58:41:ae:9d:e8:1b:c5:
24:ec:7e:07:29:e1:d8:85:a8:9d:55:f7:2c:f5:cf:92:72:eb:
c2:eb:5a:36:fa:75:35:55:bf:54:ab:9d:14:e3:0a:7d:85:d3:
c3:e4:ce:81:b3:97:c0:7b:cd:d9:6d:61:87:d7:ea:8a:11:2c:
66:51:5b:1e:fa:10:12:a8:4c:87:1f:a4:42:c0:a3:31:76:53:
e3:87:8b:2f:70:5c:79:aa:01:a0:61:79:74:f9:7e:dd:43:ae:
da:38:d9:52:44:5d:1b:20:f0:43:18:04:4e:25:1b:fa:63:47:
5c:5a:57:64:8f:84:c2:9c:c7:52:e1:88:47:b4:90:56:62:a3:
b1:c9:86:9d:1f:f8:6b:5d:ae:d5:98:fb:6c:88:b5:31:6e:c6:
ac:9a:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:29 2026 by rpki-client