
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
File: 294325DC699711EEB317603DC4F9AE02.roa (raw, json)
Hash identifier: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=
Subject key identifier: 1C:E4:DD:BB:DC:DA:30:FB:23:4B:39:6E:15:CA:AB:E7:30:FA:96:94
Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial: 01C5
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:43:11 +0000
ROA not before: Thu 27 Nov 2025 01:49:35 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151813
IP address blocks: 103.131.134.0/24 maxlen: 24
103.131.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Validity
Not Before: Nov 27 01:49:35 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a593ef-24c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:2e:0a:d7:9b:0a:1a:51:de:da:bc:2d:e3:
ba:06:29:a9:4f:54:84:3d:5b:22:73:b1:8f:43:d7:
db:ba:9e:67:f4:ce:27:d1:b9:65:ad:b6:17:94:a8:
8e:52:05:59:9c:fb:71:6f:ee:93:a5:1e:dd:7d:4a:
20:0d:2d:09:4c:ef:62:3b:dd:ef:2f:89:8d:f9:a3:
0b:c6:c1:a0:4e:6c:f1:5b:52:31:57:e9:9d:60:5f:
9a:d3:7c:b5:29:26:e6:9a:6c:53:a7:c4:04:dc:f2:
c5:81:bb:70:ab:54:d0:3b:3a:4f:cd:2d:1c:73:69:
10:d4:b1:7e:59:e6:7a:35:83:50:a4:87:a5:d1:21:
5c:95:70:3d:7f:57:49:47:f1:61:97:9c:9d:81:f9:
22:4d:12:83:e7:ef:5b:5d:bf:72:d6:ca:a0:b0:3e:
9b:7a:17:80:4e:b7:8e:78:8e:cf:21:be:5f:38:e1:
fc:ff:44:f5:c8:38:dd:46:e6:8c:86:8e:14:a6:2c:
9c:f3:e2:5b:94:55:7e:e1:d9:6b:73:92:08:7c:d6:
be:67:8d:cc:9d:e4:d6:55:86:ab:98:f0:6a:26:28:
24:6d:01:36:0f:ae:59:a7:97:5e:61:d0:55:72:82:
09:f7:ab:b9:0a:31:82:e2:10:c5:dd:03:d7:ba:14:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E4:DD:BB:DC:DA:30:FB:23:4B:39:6E:15:CA:AB:E7:30:FA:96:94
X509v3 Authority Key Identifier:
keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.134.0/23
Signature Algorithm: sha256WithRSAEncryption
20:c9:07:d4:cd:7f:61:ea:c7:84:dd:37:df:ad:53:e5:d8:0f:
8a:df:1c:97:85:62:68:6b:36:56:42:db:34:5b:96:5b:86:2c:
30:61:48:cc:83:61:23:85:46:2d:af:c9:82:da:02:c1:6c:eb:
e3:ce:d6:57:d9:07:56:43:10:d2:01:f8:60:3c:3b:95:57:c8:
89:59:43:69:e7:6b:69:f7:1a:bb:12:e8:e3:eb:1e:32:79:d0:
d1:9e:f6:78:f6:f1:19:7e:d4:50:85:60:9c:8b:f3:7f:02:43:
09:29:77:1d:07:1b:05:3d:69:e2:dd:26:ea:14:23:61:89:4b:
41:b9:f6:99:99:4b:b1:c2:90:94:6d:b5:5b:4f:cf:a6:e4:ba:
b5:59:a9:9d:0a:30:7a:87:b1:77:74:22:f1:40:1c:7c:0c:2c:
40:89:4b:a0:6e:9c:c4:68:f6:7b:09:30:61:4a:f2:12:ae:84:
50:54:dd:04:33:75:3c:66:9d:6c:71:4d:f9:93:4d:60:dd:4a:
85:09:28:46:a3:4f:1e:11:ab:52:2c:40:22:ec:54:c6:aa:d4:
1e:c4:fb:f2:dd:53:23:47:c0:ac:74:0e:2c:7a:32:63:0a:c0:
27:42:58:1e:24:b4:fc:a4:68:5e:3a:e4:e9:62:44:58:2d:21:
4a:7f:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:10 2026 by rpki-client