
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/261D3B8AEE4611ED9BEFED31C4F9AE02.roa
File: 261D3B8AEE4611ED9BEFED31C4F9AE02.roa (raw, json)
Hash identifier: 2kSM4B/k8NdFJAL4ebPd/o/E0Fw58aj47tXGXUAxnss=
Subject key identifier: 3D:FC:33:1D:7F:04:81:C8:05:04:C6:8E:00:09:EE:D7:D0:E6:7D:D9
Certificate issuer: /CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7
Certificate serial: 023C
Authority key identifier: DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/261D3B8AEE4611ED9BEFED31C4F9AE02.roa
Signing time: Sun 19 Apr 2026 02:36:34 +0000
ROA not before: Sun 19 Apr 2026 02:36:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23750
IP address blocks: 103.158.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl
rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEFBB, serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7
Validity
Not Before: Apr 19 02:36:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e43fb2-d88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:84:69:2c:7f:64:57:a3:59:d0:cb:25:35:
f0:9d:bb:d3:5f:0a:b7:de:d5:0a:9f:71:63:8f:1b:
ef:3f:e7:37:98:67:3f:8b:bc:90:a4:75:85:d5:14:
dc:54:db:e1:6f:4f:a8:6e:0a:59:df:21:bc:e7:3d:
9d:93:aa:d8:44:ac:28:d5:93:2f:ea:30:03:51:a5:
00:b2:4f:87:e6:87:90:4c:47:b8:0e:f4:c4:a8:42:
d1:42:14:81:79:af:c8:d0:ae:6d:7f:29:1a:d3:6c:
7f:f3:08:a7:5f:d3:eb:08:b9:c2:b4:46:b7:c7:97:
31:a2:bc:d5:82:c0:5e:6e:a2:6d:1c:4d:5c:3f:a4:
c4:12:ea:11:81:c2:f6:e8:4b:31:38:b2:ce:7e:fe:
da:ff:d8:0b:ab:58:55:82:a3:ad:9b:c8:76:b7:5f:
cf:27:3b:ff:ca:82:44:8b:6c:51:8a:e7:30:18:8a:
85:a5:af:e2:77:77:1b:6b:5a:6a:51:b0:af:57:3d:
af:0b:e6:62:94:dc:23:1d:70:f7:17:d2:08:1a:5b:
bb:ec:51:8e:16:b6:25:8d:ed:87:82:66:62:85:2e:
14:7f:52:63:cd:cc:3d:12:95:57:af:e1:ab:93:f4:
3c:36:7d:db:e1:bf:bb:13:e9:85:64:6c:b9:c1:1b:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FC:33:1D:7F:04:81:C8:05:04:C6:8E:00:09:EE:D7:D0:E6:7D:D9
X509v3 Authority Key Identifier:
keyid:DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/261D3B8AEE4611ED9BEFED31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.237.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7e:55:fd:61:d9:69:f6:0a:35:eb:c1:67:96:e9:b9:6c:9e:
9b:dd:a6:03:67:80:cf:76:76:2e:80:c1:c1:03:41:67:75:6c:
82:5f:0d:c6:b6:d0:e2:80:fc:28:59:10:f9:1c:0e:7d:94:2f:
9c:e7:b3:e2:12:bd:71:ca:46:a9:32:de:b6:73:03:2f:06:2a:
68:a5:aa:31:70:b8:93:56:4b:bf:44:48:7a:f4:ac:5e:78:db:
b3:3e:e0:fb:29:e8:d6:7c:ae:df:0c:71:ce:9e:bb:71:ec:c8:
ad:eb:96:1d:72:f5:51:05:4a:4c:b5:99:f1:5a:b9:53:00:83:
95:5d:55:7c:28:93:15:a3:71:90:fd:c8:b5:1a:8a:b6:30:c4:
ce:53:71:03:8d:48:24:42:ab:eb:04:28:71:ec:0f:ce:fa:8a:
aa:c2:6d:5b:3f:96:95:bf:b6:b5:9f:0c:14:e1:1f:ac:32:9d:
f4:26:8c:39:4d:10:a4:67:cc:d2:1b:21:50:81:27:f4:c3:12:
08:2b:eb:28:3b:24:78:6e:04:d4:0a:6d:fa:ee:22:b3:7b:90:
1d:a7:e5:6b:b6:01:49:9a:dc:a2:3f:f7:c2:59:2f:9e:8e:bd:
72:9d:35:dc:c4:ea:27:85:28:94:82:ae:89:cf:25:de:2b:d0:
65:73:ac:2c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVGQkIxMTAvBgNVBAUTKERBNzVBQjBGQjNBQTg3NUFGQURGNUEzOEY4NTJCREND
MUREODI2RjcwHhcNMjYwNDE5MDIzNjM0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU0M2ZiMi1kODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxA6EaSx/ZFejWdDLJTXwnbvTXwq33tUKn3FjjxvvP+c3mGc/i7yQpHWF1RTc
VNvhb0+obgpZ3yG85z2dk6rYRKwo1ZMv6jADUaUAsk+H5oeQTEe4DvTEqELRQhSB
ea/I0K5tfyka02x/8winX9PrCLnCtEa3x5cxorzVgsBebqJtHE1cP6TEEuoRgcL2
6EsxOLLOfv7a/9gLq1hVgqOtm8h2t1/PJzv/yoJEi2xRiucwGIqFpa/id3cba1pq
UbCvVz2vC+ZilNwjHXD3F9IIGlu77FGOFrYlje2HgmZihS4Uf1Jjzcw9EpVXr+Gr
k/Q8Nn3b4b+7E+mFZGy5wRtEawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD38Mx1/
BIHIBQTGjgAJ7tfQ5n3ZMB8GA1UdIwQYMBaAFNp1qw+zqoda+t9aOPhSvcwd2Cb3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUZCQi9EODk2QjVDOEVB
NkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgxcjYzMW80LUZLOXpCM1lK
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuV3JEN09xaDFyNjMxbzQtRks5ekIzWUp2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkVGQkIvRDg5NkI1QzhFQTZBMTFFREI1QjZCNTVFQzRGOUFFMDIvMjYxRDNCOEFF
RTQ2MTFFRDlCRUZFRDMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ57tMA0GCSqGSIb3DQEBCwUAA4IBAQAgflX9Ydlp9go168Fnlum5
bJ6b3aYDZ4DPdnYugMHBA0FndWyCXw3GttDigPwoWRD5HA59lC+c57PiEr1xykap
Mt62cwMvBipopaoxcLiTVku/REh69KxeeNuzPuD7KejWfK7fDHHOnrtx7Mit65Yd
cvVRBUpMtZnxWrlTAIOVXVV8KJMVo3GQ/ci1Goq2MMTOU3EDjUgkQqvrBChx7A/O
+oqqwm1bP5aVv7a1nwwU4R+sMp30Jow5TRCkZ8zSGyFQgSf0wxIIK+soOyR4bgTU
Cm367iKze5Adp+VrtgFJmtyiP/fCWS+ejr1ynTXcxOonhSiUgq6JzyXeK9Blc6ws
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:46 2026 by rpki-client