
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/C41C9EFEF55A11E9BF182559C4F9AE02.roa
File: C41C9EFEF55A11E9BF182559C4F9AE02.roa (raw, json)
Hash identifier: glrqd12FYLCjxlnpQQmc9rytFHslPrUcTMQsV2ywiP0=
Subject key identifier: B9:9C:5E:72:94:D5:C2:48:20:A8:23:8E:CC:2F:63:8C:3B:1B:94:95
Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial: 0D2D
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/C41C9EFEF55A11E9BF182559C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:39:54 +0000
ROA not before: Sun 08 Feb 2026 18:15:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136211
IP address blocks: 103.83.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3373 (0xd2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Validity
Not Before: Feb 8 18:15:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44fba-8a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:e9:57:ca:0f:8f:bb:65:29:72:bc:7b:56:
1b:57:5e:0d:03:b6:86:96:12:a9:8e:97:2c:75:c2:
f4:15:02:22:6a:cb:83:30:d4:ba:d1:f7:15:7c:cb:
48:e6:29:a9:4c:e9:fa:69:47:9f:84:5e:46:6a:bf:
a8:1b:8f:ed:74:4a:58:7f:de:6e:9c:9b:f6:0d:81:
12:9c:7b:b6:ed:c1:5b:d4:e3:2d:c1:a8:1e:24:9e:
59:75:fa:29:17:73:31:a5:fd:ee:f0:1a:b7:88:97:
48:d9:7c:1a:ae:3e:bb:0a:3c:f7:4f:6c:86:55:c9:
77:ba:87:48:73:73:21:85:04:cd:36:39:ad:14:5a:
53:b7:aa:3e:83:5d:1e:2c:6c:a0:55:ec:df:6e:48:
1b:04:84:63:a1:b9:83:d0:80:5e:f0:6d:46:00:ca:
c5:dc:83:a9:b7:c9:80:f1:30:3a:6c:07:42:41:b5:
c1:54:57:26:82:98:9f:27:4c:53:0c:d3:b8:85:50:
6b:40:75:c2:fc:c2:c7:a7:e2:11:39:0e:3e:b1:0b:
e9:b6:01:d8:46:41:3c:6e:11:be:9b:f9:1c:44:70:
94:b4:e7:2c:86:0b:00:de:64:f2:17:fb:e5:60:f0:
08:04:82:db:4c:ac:a5:2f:74:c0:f5:01:92:d2:b7:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9C:5E:72:94:D5:C2:48:20:A8:23:8E:CC:2F:63:8C:3B:1B:94:95
X509v3 Authority Key Identifier:
keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/C41C9EFEF55A11E9BF182559C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.196.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f2:2f:bb:94:e1:44:43:f3:93:1f:1f:a0:97:75:55:59:7c:
29:86:fb:ad:1a:49:38:9a:98:9d:cc:eb:63:39:f3:2b:b0:c0:
a8:a3:cd:07:94:f2:e2:33:c6:f5:dd:89:ef:f5:89:c5:3f:07:
b1:53:59:fd:c2:74:9f:e1:64:a5:f9:ef:92:17:ef:ca:e6:b4:
c3:75:7a:b0:a2:07:be:2b:77:94:2b:cd:92:9e:fa:9f:e7:78:
37:e4:64:28:ea:c3:dc:1c:53:91:98:88:8d:bc:f6:9b:0f:0d:
91:b6:93:00:3c:50:f9:0d:d7:b8:ae:c4:1b:f3:e0:86:93:5f:
b8:1d:52:10:00:cc:27:52:56:3a:3e:3e:67:9d:59:6b:1e:aa:
55:d0:05:6e:68:66:a2:cb:07:d7:b2:b9:ad:27:bd:51:c5:c2:
02:76:c6:89:b5:78:2c:e2:f5:0a:93:04:d3:a2:f5:87:a0:76:
3f:63:4c:54:2f:82:80:57:fe:4b:ba:aa:9a:27:be:c2:d1:c7:
9d:45:20:02:9c:0a:50:cf:c7:bd:4f:04:dd:6b:d4:9e:0e:e3:
02:f7:e6:0a:f3:75:67:0b:e2:6f:0e:26:78:ce:58:0f:12:64:
72:18:47:68:6e:f0:ce:8d:4b:58:87:e7:0b:7a:4a:af:af:1a:
4c:57:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:53 2026 by rpki-client