
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa
File: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (raw, json)
Hash identifier: 6SZegSN1bEm8IpeY56I3OBOVi6qp9uRdOosU1uc4tzc=
Subject key identifier: E4:53:1C:56:72:4F:47:DA:4C:69:2F:2E:50:A1:2A:F1:DA:CF:B8:C2
Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial: 023B
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa
Signing time: Thu 05 Mar 2026 02:36:15 +0000
ROA not before: Thu 05 Mar 2026 02:36:15 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 150723
IP address blocks: 103.99.35.0/24 maxlen: 24
2001:df1:e7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Validity
Not Before: Mar 5 02:36:15 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a8ec1f-7a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:98:9e:75:3e:c3:cf:44:08:d0:11:6f:af:
a1:d3:f9:8d:ae:a0:82:94:de:d0:f2:ad:bd:1a:d9:
ad:46:d2:b0:64:e8:e1:bf:4d:4c:18:86:c4:e8:03:
d9:46:11:c3:e5:09:3a:23:98:b8:6a:00:c1:2a:9c:
ed:b1:1a:41:b8:d5:8a:b1:fc:2a:63:1b:32:11:ea:
4b:05:ed:53:4d:b4:71:d9:db:14:00:15:8c:10:7e:
66:5a:fd:6e:76:b4:f9:45:35:0e:08:94:e2:96:7a:
66:aa:03:74:6b:a4:7e:40:a5:5c:97:b7:ea:56:06:
e9:30:b0:d6:7b:e7:cf:9d:d3:34:f9:87:76:a0:be:
b1:17:fa:d8:fa:55:4c:06:d0:1c:3a:fa:67:4b:cb:
3e:0f:42:af:5c:c5:65:1a:6a:13:2f:f8:4a:e4:3e:
78:ff:89:a9:b8:8e:13:03:94:13:e8:26:46:fe:69:
41:01:82:d5:3e:00:62:0a:04:96:60:b0:7c:1d:82:
17:94:4b:fc:f6:47:64:e3:55:32:32:89:41:33:b1:
11:ad:91:bc:39:cd:18:ac:79:3e:4a:cc:66:c3:dc:
56:09:9a:a9:80:b7:a2:96:b6:af:c1:7a:41:12:47:
59:9d:36:d3:46:50:ad:9d:55:f8:d5:5f:a0:e5:19:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:1C:56:72:4F:47:DA:4C:69:2F:2E:50:A1:2A:F1:DA:CF:B8:C2
X509v3 Authority Key Identifier:
keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.35.0/24
IPv6:
2001:df1:e7c0::/48
Signature Algorithm: sha256WithRSAEncryption
ab:a5:2d:08:66:09:d2:ff:b0:e0:99:2d:b7:e7:1d:6b:54:42:
fc:f3:14:d2:2c:f0:c1:8c:4c:41:90:33:bd:9b:63:09:71:7b:
79:54:2e:57:c1:ff:33:07:ed:ab:94:14:fe:24:74:05:47:ad:
8b:88:a1:ba:68:d9:de:d5:27:de:d8:4a:ad:8b:f1:15:a2:50:
0e:e1:a3:3b:09:2f:da:44:f4:2f:7d:3f:d0:1e:af:ed:6b:95:
76:d7:b0:13:4c:ce:37:4e:c2:00:23:02:1f:cb:58:24:9e:e2:
cc:86:09:9b:b7:9f:6f:a5:7e:6f:1b:f0:b9:3c:9b:95:a9:be:
34:00:d6:c3:66:e8:ad:f5:fa:de:96:f8:f3:66:88:16:98:4d:
37:dd:26:69:89:52:5a:71:30:41:a0:33:b9:9d:b4:be:52:dd:
bd:52:07:48:28:51:b3:3f:3a:ec:12:ac:2e:90:5e:34:2e:1b:
40:48:57:44:39:8e:63:3e:a9:92:98:2b:11:a5:6e:1a:09:93:
83:e3:b4:37:a3:2f:d5:59:6c:a1:7c:d3:f7:94:65:7d:98:ec:
eb:2a:41:66:17:17:62:59:1f:9e:a5:a2:66:ed:12:15:34:57:
86:c4:a5:78:db:ae:be:bd:e8:ef:df:ed:90:e8:96:d3:3e:86:
44:0a:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:20 2026 by rpki-client