
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa
File: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=
Subject key identifier: 22:D1:4C:B8:79:E2:41:1D:22:72:95:CE:C7:D4:84:F9:B0:B8:6D:2F
Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial: 093D
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:41:39 +0000
ROA not before: Sun 02 Nov 2025 20:39:40 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132827
IP address blocks: 103.6.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365 (0x93d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Validity
Not Before: Nov 2 20:39:40 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45e33-53d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:eb:ff:6e:5c:63:d2:92:30:42:a0:32:ef:
b5:46:6f:19:fe:1c:1a:f4:09:af:e8:37:f2:a3:55:
28:48:e6:4b:d5:24:12:36:8d:ec:12:69:44:16:34:
4f:51:86:48:75:15:e9:6f:71:cd:3c:29:d2:f7:5a:
4b:66:ec:65:48:87:70:d5:e0:f0:a4:1f:b5:6d:35:
c5:d1:48:9b:c6:59:c9:fe:6f:e3:1c:c0:9a:ba:34:
6f:97:f8:08:90:9b:66:4b:d2:d5:78:50:93:79:2f:
33:d2:08:b8:77:4e:23:a0:36:9d:e4:b1:8e:84:80:
e8:62:8f:3a:ca:bc:25:a4:09:0a:d3:c2:51:1a:5d:
54:90:aa:21:44:05:c2:e7:97:13:79:74:a2:ab:6e:
3d:58:cd:e6:cb:50:5a:62:e8:7e:49:6f:c1:21:6d:
06:d2:1d:d4:b2:83:dc:ef:9c:1c:ab:f5:38:2a:45:
8b:9a:e9:e7:8b:52:37:3e:7c:e9:86:e2:97:55:8a:
d7:73:0f:0d:ab:30:63:d3:0a:45:9e:2a:ae:94:b0:
64:f4:1b:35:7c:d1:d5:2b:35:cb:cc:c7:b2:1a:d7:
42:70:05:a4:7d:35:d8:d2:92:06:8c:92:13:f3:17:
6c:92:fe:29:2c:3d:dd:89:b6:cc:8e:ae:a7:a6:11:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:4C:B8:79:E2:41:1D:22:72:95:CE:C7:D4:84:F9:B0:B8:6D:2F
X509v3 Authority Key Identifier:
keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.240.0/22
Signature Algorithm: sha256WithRSAEncryption
49:51:e4:7f:47:f9:f3:e1:1a:2c:90:f4:61:64:18:cb:b5:ab:
2a:ef:25:12:60:b4:7a:80:bd:83:27:36:40:e8:e6:6f:99:f1:
dd:19:68:30:40:aa:fc:75:18:14:09:f7:f6:b6:a2:a0:89:a1:
77:29:a8:da:7d:03:5f:b5:c5:b4:81:02:c1:37:15:6d:ec:d0:
f7:47:75:ae:68:60:4c:d3:83:d0:4d:6b:25:9e:36:1a:4c:0f:
3e:ee:af:c9:63:04:96:1b:e4:b6:96:97:75:a9:6a:a1:46:d9:
4a:9f:e5:66:54:55:d8:a6:c0:63:a5:b6:21:ad:19:c2:5a:9c:
b3:52:80:7a:b1:5d:c1:37:83:5b:30:7f:b8:f4:3d:08:e6:26:
a8:3c:d3:9a:a4:b4:f2:16:36:d0:0e:33:1e:36:85:ba:ff:1c:
a4:1c:2a:4f:89:3e:75:7a:f0:de:d4:c4:fa:21:e8:05:29:4c:
95:f5:dc:62:d9:99:4f:27:be:c6:06:8a:a8:af:c3:c9:86:0c:
81:ad:d8:25:6f:71:cf:3f:c9:4d:ed:19:17:2e:1e:55:0f:b3:
27:99:02:12:b1:1a:04:91:cb:a8:1b:ca:71:3f:99:de:79:74:
b6:06:d6:f3:89:f4:a7:44:fa:58:39:b5:68:82:5f:df:c9:71:
c6:3c:96:ac
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3
QzNBRkU0MDMwHhcNMjUxMTAyMjAzOTQwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWUzMy01M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlrLr/25cY9KSMEKgMu+1Rm8Z/hwa9Amv6Dfyo1UoSOZL1SQSNo3sEmlEFjRP
UYZIdRXpb3HNPCnS91pLZuxlSIdw1eDwpB+1bTXF0UibxlnJ/m/jHMCaujRvl/gI
kJtmS9LVeFCTeS8z0gi4d04joDad5LGOhIDoYo86yrwlpAkK08JRGl1UkKohRAXC
55cTeXSiq249WM3my1BaYuh+SW/BIW0G0h3UsoPc75wcq/U4KkWLmunni1I3Pnzp
huKXVYrXcw8NqzBj0wpFniqulLBk9Bs1fNHVKzXLzMeyGtdCcAWkfTXY0pIGjJIT
8xdskv4pLD3dibbMjq6nphGdgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCLRTLh5
4kEdInKVzsfUhPmwuG0vMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB
QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjUyRjcvN0NDNDVGQUVCQUFGMTFFQUE2REQxQTNEQzRGOUFFMDIvQTI5QTY2RkUy
RjFDMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwbwMA0GCSqGSIb3DQEBCwUAA4IBAQBJUeR/R/nz4RoskPRhZBjL
tasq7yUSYLR6gL2DJzZA6OZvmfHdGWgwQKr8dRgUCff2tqKgiaF3KajafQNftcW0
gQLBNxVt7ND3R3WuaGBM04PQTWslnjYaTA8+7q/JYwSWG+S2lpd1qWqhRtlKn+Vm
VFXYpsBjpbYhrRnCWpyzUoB6sV3BN4NbMH+49D0I5iaoPNOapLTyFjbQDjMeNoW6
/xykHCpPiT51evDe1MT6IegFKUyV9dxi2ZlPJ77GBoqor8PJhgyBrdglb3HPP8lN
7RkXLh5VD7MnmQISsRoEkcuoG8pxP5neeXS2BtbzifSnRPpYObVogl/fyXHGPJas
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:39 2026 by rpki-client