
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/4FB0329A827311EBAB565A86C4F9AE02.roa
File: 4FB0329A827311EBAB565A86C4F9AE02.roa (raw, json)
Hash identifier: tQ+0QPRWhuVmQFBAmyQbfomAoZ845RNX8u98yKRH9zI=
Subject key identifier: B8:29:1A:4E:C4:75:58:FF:51:01:7A:BE:EC:6E:B7:8E:7E:9F:50:2C
Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial: 077A
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/4FB0329A827311EBAB565A86C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:24:10 +0000
ROA not before: Thu 16 Oct 2025 23:33:18 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 134599
IP address blocks: 103.70.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Validity
Not Before: Oct 16 23:33:18 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4763a-9efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:b1:82:32:31:1e:ee:cf:52:e5:16:83:d5:
c5:a7:4b:92:3e:ab:c0:44:8b:47:ac:4d:1d:59:8f:
c0:46:2b:09:31:7f:19:ad:14:f8:83:21:20:ea:e8:
d7:62:27:09:d1:7a:0e:25:01:64:df:23:7e:14:d8:
13:d9:f8:45:2a:63:80:02:fb:9d:96:1b:12:6f:b2:
9d:aa:32:98:82:af:be:b4:82:2a:7c:54:43:91:af:
2c:7a:45:7d:8b:77:05:11:4a:3d:25:6c:e4:ee:d8:
5a:4c:e3:fe:9f:0f:9d:f6:21:e0:8f:b0:12:5e:91:
43:05:72:29:0b:05:b5:61:0b:2b:c1:55:16:40:41:
c4:fa:56:c8:5c:d9:fa:89:39:f8:1c:5b:aa:be:df:
16:90:d1:05:c7:4c:bf:8a:f9:0d:ee:ab:b5:b0:3d:
d4:8d:b3:4d:aa:d1:80:78:3d:11:cd:8e:d4:0f:38:
d0:0d:3d:73:11:d8:4d:60:61:c9:56:93:65:28:5c:
00:7b:3e:e5:3f:73:b6:58:c7:fb:34:16:e7:ed:80:
b3:f3:96:ef:40:4a:b6:4d:13:43:ef:fb:36:6c:84:
c1:62:3c:30:50:2a:6d:77:0d:68:5e:d7:c0:4c:19:
61:f2:c6:f3:34:17:8b:9e:17:1d:28:f5:ba:f5:b1:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:1A:4E:C4:75:58:FF:51:01:7A:BE:EC:6E:B7:8E:7E:9F:50:2C
X509v3 Authority Key Identifier:
keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/4FB0329A827311EBAB565A86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:54:22:a7:a7:06:bb:96:9b:24:c5:10:bb:7c:b8:ba:a6:2b:
b3:d6:e5:9a:c7:2d:d6:22:7e:7c:2f:37:b0:35:b5:55:98:bd:
5a:9d:2b:e5:8e:d5:3a:35:63:11:00:ae:a5:73:82:29:02:33:
e8:a4:c3:7e:1f:18:9b:e0:b5:4e:3e:32:3a:d4:ad:43:31:b8:
55:7c:4a:0f:d0:b2:ce:81:69:2d:fe:cd:3b:df:7c:15:fb:16:
ba:91:2d:a7:ff:96:5a:88:c5:c2:7f:65:5c:a3:7e:dd:61:f7:
b7:48:8a:ae:8b:9b:e5:32:2a:ea:91:87:22:01:f1:8f:ea:35:
70:23:56:b1:49:0c:96:49:be:2e:4d:04:9e:4c:9d:50:0e:73:
a1:e5:f6:f2:b3:af:86:5c:97:9d:1c:5f:04:2d:18:65:19:08:
14:8e:3f:99:1d:84:7f:0a:00:3a:71:09:75:22:d2:cd:7d:c3:
a6:70:bd:19:01:1d:16:6a:ab:5f:a8:e7:70:7d:a1:c4:29:05:
7c:20:5d:24:19:bd:cc:9a:00:ef:86:c1:db:b9:e9:c3:e1:57:
82:20:50:e9:91:26:8e:e4:7c:70:cb:d8:58:51:7b:93:37:6e:
e9:c8:3c:b2:a4:0c:1c:ce:59:79:3e:f6:7c:30:4d:c2:48:89:
f3:e9:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:01 2026 by rpki-client