
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/2B1F36244A0F11F1A854BE8EC6833773.roa
File: 2B1F36244A0F11F1A854BE8EC6833773.roa (raw, json)
Hash identifier: DyngqRv2JTE/tyikzuGsrm5VnuqI40CmyaWN4DrKG3c=
Subject key identifier: 8D:EF:C4:D0:D5:88:BF:A3:55:E7:F3:AB:37:5B:96:C9:C6:E1:1B:95
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 02A9
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/2B1F36244A0F11F1A854BE8EC6833773.roa
Signing time: Thu 07 May 2026 12:20:44 +0000
ROA not before: Thu 07 May 2026 12:20:44 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 197537
IP address blocks: 103.43.172.0/24 maxlen: 24
103.43.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: May 7 12:20:44 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69fc839b-c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:fc:58:7d:04:30:28:62:89:a0:c3:1b:bf:
55:b8:76:a6:3e:d7:72:50:82:af:67:f5:05:b5:23:
62:31:93:72:de:c8:89:bb:45:a2:b7:27:83:ee:04:
02:ff:7d:73:1e:98:7e:29:88:3b:68:57:90:c2:3e:
ba:28:94:ca:21:62:cd:c5:7e:7d:41:5e:fc:38:f2:
53:a0:c6:12:93:00:a1:c7:24:3c:a6:22:55:15:8b:
d8:f9:d8:51:cb:f1:67:3e:ed:e7:37:84:4f:e6:c2:
17:b0:c1:b9:bc:36:f3:d5:a3:f0:69:25:dc:74:13:
fc:e1:ba:2e:7d:ec:0e:ee:f9:c1:db:8a:14:fe:8f:
72:76:b1:00:90:be:bf:b8:f3:76:11:a7:9c:da:99:
71:bc:e9:e8:1a:bd:12:63:cb:34:4e:e9:b4:77:63:
54:ae:1a:c4:a7:6e:a3:2e:a4:36:97:33:bc:37:d1:
45:41:f5:ea:e3:3c:60:1f:33:c1:d3:3d:00:99:b9:
eb:1d:c7:ad:ad:37:26:e8:dc:81:49:be:9b:eb:24:
73:3d:ca:dd:9f:58:7b:25:9b:ea:cc:f2:2e:be:51:
26:4f:b4:e1:e7:a9:0c:0c:92:af:92:73:ed:1b:27:
d6:6b:61:cc:ae:d4:25:72:7c:9b:0c:07:e8:6f:18:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:C4:D0:D5:88:BF:A3:55:E7:F3:AB:37:5B:96:C9:C6:E1:1B:95
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/2B1F36244A0F11F1A854BE8EC6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.43.172.0/23
Signature Algorithm: sha256WithRSAEncryption
98:9e:39:37:f9:45:86:5a:41:35:a6:92:9a:67:b0:38:13:7f:
4e:c5:d8:0f:2d:08:60:a0:e1:fb:3a:f6:4c:57:8f:ac:d2:0d:
87:e3:71:3c:28:b0:ad:68:fd:4b:4d:b9:5d:f1:8e:61:70:2f:
f0:8d:7b:2f:e0:06:e0:66:ed:ac:e4:23:45:fe:88:f8:d7:e9:
0b:0c:45:db:6b:5c:6e:3c:61:8f:9b:79:7a:e6:b7:c9:18:83:
90:76:d3:10:63:e0:c7:9c:5a:50:8e:1f:d4:75:48:e4:e2:4d:
f6:a1:86:1c:4e:5a:81:65:e9:77:8a:34:f0:f2:cf:b5:b8:68:
ad:c1:7b:f3:5c:71:03:40:a5:b0:10:37:72:66:01:c7:e9:ea:
ac:d4:b5:69:8b:3d:e3:b1:1b:7b:14:e2:c7:d3:5b:f6:c1:7e:
b5:22:85:17:ae:0d:f0:6a:f6:78:05:9b:4f:6f:00:b8:35:8f:
40:64:79:4a:4e:e0:70:ba:9d:e6:e9:46:dd:c7:6d:6d:f3:75:
db:89:a5:20:2d:23:0f:b0:e0:62:b5:84:44:b5:a8:c4:f8:b6:
34:4b:bf:13:36:0e:96:fc:94:7d:e2:8d:f1:f4:ac:60:62:8a:
e5:4e:55:31:0d:9d:0e:ca:3e:54:78:5f:92:97:2e:1e:4b:33:
bb:66:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:05 2026 by rpki-client