
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/D3A76C6AA79511F1804DFF334711F970.roa
File: D3A76C6AA79511F1804DFF334711F970.roa (raw, json)
Hash identifier: 1lhzRowk8kpqPzQe8llaZ3GiNx0/OiKBfZbBNsojsKY=
Subject key identifier: 2D:D7:DE:B0:BF:6F:1B:6C:37:A3:90:5C:CB:1C:DA:51:0A:F7:51:7D
Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial: 0C5A
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/D3A76C6AA79511F1804DFF334711F970.roa
Signing time: Thu 03 Sep 2026 12:48:57 +0000
ROA not before: Thu 03 Sep 2026 12:48:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 2497
IP address blocks: 103.245.234.0/24 maxlen: 24
103.245.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Validity
Not Before: Sep 3 12:48:57 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a996cb9-9fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:3b:6a:81:8c:d9:91:52:bd:26:15:99:ee:
10:b3:b3:b1:9c:ce:5f:37:66:81:36:c5:cb:3b:b3:
88:b0:77:31:8a:21:83:ac:d0:aa:e7:d4:98:0f:83:
11:9e:cf:b3:c7:f4:bb:6c:c5:dc:cb:6b:6a:c2:cb:
cb:24:63:d4:95:d6:15:d9:d4:44:3a:e8:52:71:97:
f0:99:4c:90:21:5e:fd:77:5f:bc:2e:95:e7:51:19:
e6:f3:93:5f:bf:66:b3:98:5e:39:85:ed:33:d0:2c:
27:07:34:05:60:05:53:58:87:f3:ae:17:0c:ac:16:
64:ac:40:0b:2c:65:21:4b:e2:d5:cf:0b:f4:b5:67:
3c:c9:d9:4c:79:b1:e5:13:13:64:30:ab:06:e2:a0:
4f:4e:d7:b3:83:8d:0a:13:3b:a7:24:9c:8f:ec:59:
51:a0:49:b0:9b:2b:0d:30:76:dd:72:a0:43:1c:ff:
6e:61:29:16:77:e4:5c:ac:b1:12:3d:f2:3f:55:1e:
d1:21:69:af:13:60:ba:bf:32:9e:9a:97:41:6c:7a:
16:1f:7d:86:d3:54:50:63:aa:2c:2d:a0:1c:c7:13:
b5:ee:38:fa:52:29:21:7d:24:e5:12:80:29:f0:2a:
d5:3a:05:d1:48:f1:37:f0:20:69:dc:2a:76:97:e5:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:DE:B0:BF:6F:1B:6C:37:A3:90:5C:CB:1C:DA:51:0A:F7:51:7D
X509v3 Authority Key Identifier:
keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/D3A76C6AA79511F1804DFF334711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.245.234.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:da:07:68:f5:bc:e5:d4:cf:6a:2e:1e:ca:40:37:e4:98:ff:
c2:83:1e:f9:57:22:88:42:82:11:f6:6c:f4:b8:3a:eb:82:49:
ba:3e:26:7b:4f:9e:21:ab:ee:03:dd:47:c7:4c:2b:a8:d2:47:
e8:4c:4a:94:93:13:a6:a7:a5:be:bf:c1:bb:60:17:48:ad:27:
fe:65:dd:97:0d:f1:da:da:d2:c9:bd:bf:e0:bc:00:16:7d:1a:
1e:83:df:df:dd:d7:31:a2:78:3f:c9:6a:6f:0c:cd:4e:a7:d4:
5c:e3:dc:6f:7b:e3:7c:c5:f8:97:a5:db:0d:e3:74:2a:2f:b8:
7e:30:d2:32:91:17:3a:8a:75:a6:b6:ed:ac:7e:9d:5c:b3:96:
e3:92:a3:4f:b6:c7:e7:a5:9a:c1:91:dd:95:96:e4:f2:ca:4e:
84:7a:46:a6:98:9f:1a:dd:42:17:7f:15:d3:39:7a:c9:3a:fa:
bc:38:31:f1:bb:56:13:c1:91:b3:b5:9a:b2:f2:3c:1c:48:ff:
4b:4d:bc:75:d3:b8:14:97:58:fe:9c:66:3a:f0:2c:aa:3e:93:
29:25:89:f7:74:64:44:75:ef:4e:cc:c2:5b:25:6a:6a:a8:9a:
d5:6d:a6:2b:1e:1e:c1:63:09:a2:96:59:98:40:59:8e:f3:c5:
8e:80:84:03
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF
MUNCOEZFRTUwHhcNMjYwOTAzMTI0ODU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk5NmNiOS05ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkU7aoGM2ZFSvSYVme4Qs7OxnM5fN2aBNsXLO7OIsHcxiiGDrNCq59SYD4MR
ns+zx/S7bMXcy2tqwsvLJGPUldYV2dREOuhScZfwmUyQIV79d1+8LpXnURnm85Nf
v2azmF45he0z0CwnBzQFYAVTWIfzrhcMrBZkrEALLGUhS+LVzwv0tWc8ydlMebHl
ExNkMKsG4qBPTtezg40KEzunJJyP7FlRoEmwmysNMHbdcqBDHP9uYSkWd+RcrLES
PfI/VR7RIWmvE2C6vzKempdBbHoWH32G01RQY6osLaAcxxO17jj6UikhfSTlEoAp
8CrVOgXRSPE38CBp3Cp2l+XN/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC3X3rC/
bxtsN6OQXMsc2lEK91F9MB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx
NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTIzNTkvRkMyOThERUE0MTcwMTFFQTk4REU2NTZBQzRGOUFFMDIvRDNBNzZDNkFB
Nzk1MTFGMTgwNERGRjMzNDcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ/XqMA0GCSqGSIb3DQEBCwUAA4IBAQCO2gdo9bzl1M9qLh7KQDfk
mP/Cgx75VyKIQoIR9mz0uDrrgkm6PiZ7T54hq+4D3UfHTCuo0kfoTEqUkxOmp6W+
v8G7YBdIrSf+Zd2XDfHa2tLJvb/gvAAWfRoeg9/f3dcxong/yWpvDM1Op9Rc49xv
e+N8xfiXpdsN43QqL7h+MNIykRc6inWmtu2sfp1cs5bjkqNPtsfnpZrBkd2VluTy
yk6EekammJ8a3UIXfxXTOXrJOvq8ODHxu1YTwZGztZqy8jwcSP9LTbx107gUl1j+
nGY68CyqPpMpJYn3dGREde9OzMJbJWpqqJrVbaYrHh7BYwmillmYQFmO88WOgIQD
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:02:28 2026 by rpki-client