
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/84CEFB0E379111EC92DB9A48C4F9AE02.roa
File: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (raw, json)
Hash identifier: 6jMHqR+sIEqTC6A+nK6qfLEa0VEYokKzKQUPqiIn6fg=
Subject key identifier: 0B:11:96:7E:0B:66:F9:5B:33:FB:27:FE:AF:00:8C:E4:78:DA:00:65
Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Certificate serial: 052F
Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/84CEFB0E379111EC92DB9A48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:44:21 +0000
ROA not before: Wed 05 Nov 2025 00:14:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147178
IP address blocks: 103.174.12.0/24 maxlen: 24
2001:df7:b280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1327 (0x52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Validity
Not Before: Nov 5 00:14:07 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a434a5-f5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:6f:0f:8c:ad:32:a6:1d:11:00:97:a0:21:
f7:d6:7b:1b:55:a6:ce:e5:f9:40:ce:c1:ac:30:b7:
4f:ca:39:dc:b9:26:ae:63:d4:d0:93:79:3e:b6:25:
93:97:22:08:13:c8:14:3f:52:3f:fe:59:4d:e2:d5:
c4:b1:37:eb:9a:10:6a:ff:f0:6f:aa:5a:f8:cd:f4:
c1:0d:9e:d7:9c:db:c3:8e:26:79:45:2d:9a:56:3e:
64:03:3f:e8:e5:35:da:e7:68:6a:ac:ef:b5:ab:1e:
07:86:a9:86:7a:b6:29:de:17:18:60:09:30:37:0d:
fc:8f:1b:6c:38:ad:4f:c4:b2:e9:0d:59:e5:1c:9d:
58:12:f3:3e:26:9c:43:b7:25:a5:3d:8b:13:5b:78:
14:a9:81:3e:f1:6d:7e:07:2b:16:a4:59:bf:5f:a3:
03:5e:39:21:92:25:00:bc:bb:77:f4:95:50:3e:64:
ac:eb:94:62:54:76:b3:a6:93:d2:67:d6:db:01:dc:
0c:14:30:fb:12:06:10:6b:e9:fe:db:73:15:ae:b2:
f2:dc:5e:99:60:46:7c:4e:7c:a5:a2:8a:6d:3d:e3:
95:d1:ae:2f:ee:f5:3b:38:91:62:1f:d1:60:52:12:
2e:02:90:d2:2e:7e:2a:33:2e:89:34:cb:c1:27:02:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:96:7E:0B:66:F9:5B:33:FB:27:FE:AF:00:8C:E4:78:DA:00:65
X509v3 Authority Key Identifier:
keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/84CEFB0E379111EC92DB9A48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.12.0/24
IPv6:
2001:df7:b280::/48
Signature Algorithm: sha256WithRSAEncryption
20:d2:e0:bb:7f:b3:b1:26:7b:e4:83:8f:ec:a7:51:85:23:1b:
4c:b6:98:e3:05:71:8a:94:42:6b:2c:6e:87:ba:f6:cc:c6:d7:
9f:d1:64:a0:dc:25:b9:69:59:89:54:6c:b8:bc:fc:4a:03:59:
30:b1:a5:0e:3c:07:9b:9f:df:13:82:49:93:7a:6b:81:33:e9:
d8:35:bb:38:3f:c2:7b:ee:85:44:c3:fa:cd:b8:d6:37:00:ed:
22:c4:01:06:4b:e6:23:37:60:0f:81:61:13:f3:ee:ea:ce:81:
12:2b:e6:ec:4b:55:f2:1b:83:71:2a:08:75:f5:da:3b:93:58:
ec:82:23:24:6a:c4:61:eb:ca:fc:26:c2:82:c8:5a:47:64:48:
bb:6e:bc:a9:63:6a:ff:d9:e4:41:d6:4b:92:d8:21:96:0f:8d:
b5:50:28:bf:0b:6c:09:88:ac:0d:0e:68:90:53:fd:26:c4:84:
b1:99:39:83:f5:1e:ac:9f:96:98:a7:88:93:fd:1f:c1:96:28:
c9:fc:7e:3b:ce:93:1c:58:e6:03:1c:16:10:25:59:d3:4c:49:
ed:8a:8e:96:8a:dd:d5:29:36:49:d5:3c:ca:63:21:9c:37:1e:
fe:9f:bb:9c:84:7a:b6:12:37:1e:8e:b9:92:93:31:b9:86:ac:
4d:c0:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:53 2026 by rpki-client