
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
File: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (raw, json)
Hash identifier: H+/gL9GOC5rLy94c2j0ly4aLXYfukKwRD5D8FRI8cvw=
Subject key identifier: 38:96:69:4F:28:BA:41:E6:60:D5:11:48:A1:96:CE:F5:71:9D:AF:64
Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial: 05DB
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:39:00 +0000
ROA not before: Sat 09 Aug 2025 00:05:34 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142552
IP address blocks: 103.169.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Validity
Not Before: Aug 9 00:05:34 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a43364-7705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:77:66:e4:5d:0e:25:c5:a2:ca:05:bb:a9:
f9:c8:07:62:fb:f9:eb:63:13:5b:8c:fd:76:16:21:
78:f1:a3:b0:08:19:1f:b7:80:c1:8d:8b:9d:2a:7d:
a1:59:31:74:2d:34:d1:f6:67:8f:97:22:23:11:d2:
21:f7:56:76:86:ab:23:a7:3d:08:46:08:5f:57:a9:
cf:b1:a7:6c:b6:03:8a:ee:64:a3:4b:d3:44:5b:5f:
f3:a5:bc:b8:69:34:13:39:64:cc:57:86:7e:96:70:
2e:47:d4:b9:d7:fc:12:47:b2:9b:97:5a:41:a8:9f:
6e:bf:74:e1:ab:b2:f2:67:3c:5e:80:84:7d:63:b3:
70:b9:87:ee:01:93:8e:d4:de:2e:21:33:03:8f:54:
bf:ff:40:38:d2:23:26:50:66:51:e1:7d:ac:0a:f9:
bc:28:ec:cd:4e:de:c1:15:1f:a8:34:61:88:9a:46:
cc:d2:d3:26:5f:dc:24:98:31:52:5a:9b:19:61:70:
15:b5:e5:90:7a:bc:a0:e1:30:99:4a:09:cd:6a:1a:
47:ac:d4:f9:df:3b:4b:c3:94:11:b2:e1:a8:0f:b8:
8d:fa:3d:c5:a1:42:18:62:83:d8:1c:1a:15:ad:67:
41:af:f3:66:ea:c2:38:66:d8:2a:b2:b2:db:21:85:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:96:69:4F:28:BA:41:E6:60:D5:11:48:A1:96:CE:F5:71:9D:AF:64
X509v3 Authority Key Identifier:
keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.65.0/24
Signature Algorithm: sha256WithRSAEncryption
06:41:1c:5e:8a:48:b8:59:fe:2b:ba:3d:dd:25:01:b7:8a:ea:
09:f8:49:a1:e8:cc:2e:08:09:67:45:47:8f:12:2f:ba:1f:2c:
7f:a5:7d:90:55:09:4e:53:9b:81:b6:93:a2:63:25:de:48:12:
f7:95:43:c2:9f:24:94:2f:43:17:a8:fe:a1:17:73:95:c2:bc:
a6:79:97:33:7a:55:d9:45:57:f9:b7:f9:f2:38:a2:26:db:b3:
ca:6c:e7:96:fc:93:62:92:49:02:b2:8a:f0:a6:35:39:90:03:
9d:78:23:91:5d:3d:d9:d3:e7:60:a3:31:d7:2f:ea:8b:12:a2:
f4:24:d6:eb:5e:1c:be:30:46:19:76:52:ea:14:0d:8b:fe:74:
1e:35:59:24:cc:d9:0e:19:f2:c7:fe:24:52:6e:c5:f2:48:33:
46:fc:2d:e5:d0:a9:87:1c:51:69:74:a6:5f:02:42:15:f8:60:
50:97:a9:e9:07:58:17:4c:8a:71:46:e1:cd:9f:39:50:e3:76:
dd:7c:3d:03:aa:6a:7e:9c:1f:f9:18:1b:40:f4:a8:86:2d:06:
3f:2b:39:02:cd:af:cb:71:14:8e:b1:7f:97:dd:f3:b6:bf:ef:
b2:9b:d5:0b:51:05:d0:10:95:d7:9b:f9:9c:ce:1a:c8:af:b7:
08:c9:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:11 2026 by rpki-client