
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
File: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (raw, json)
Hash identifier: Y/Ibz6yH57us0XVA78pihe3EPEMLDwbUf8iL1FZSQgM=
Subject key identifier: 0E:C9:09:C9:5E:28:2E:16:53:A8:7A:B9:00:9D:F8:B0:12:DF:E1:20
Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial: 0CBE
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:40:43 +0000
ROA not before: Thu 04 Sep 2025 18:58:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 58665
IP address blocks: 103.12.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Validity
Not Before: Sep 4 18:58:36 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a425bb-ffa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:c1:09:c7:3f:02:d4:6e:e2:ed:52:14:8b:
3b:2b:5e:ba:aa:72:9f:6f:09:ee:39:52:d1:ee:56:
79:d4:3e:15:91:de:92:ba:b6:20:ab:1f:1e:22:87:
a8:02:ca:d7:24:20:4e:b5:61:29:89:ad:52:4f:c7:
35:79:70:14:45:24:9f:e2:06:cc:bb:94:4a:2b:64:
30:fe:a9:82:1a:5d:32:80:3b:41:c6:e1:a8:cd:64:
89:78:cf:01:de:c1:52:c1:c9:17:3e:41:10:93:66:
9e:fc:85:de:c4:4e:65:5a:35:b4:10:9e:66:9f:81:
04:2f:7c:4f:62:19:05:bd:7b:4d:c9:b7:b9:45:a9:
cb:87:98:7b:a6:a8:c4:2d:70:39:54:64:39:05:1b:
ea:13:0a:fc:3e:3f:15:2e:41:8c:09:dd:94:08:89:
e2:48:f5:d1:bf:aa:f4:fe:1a:01:2d:ab:95:26:00:
a6:e2:44:5e:e8:ff:1a:8c:88:95:50:f6:42:8e:6a:
19:6f:0a:17:e7:e8:90:1e:21:e6:2a:12:4e:42:43:
1e:78:8f:03:f4:54:ce:04:dd:a8:02:87:1c:58:d9:
8c:bf:8b:f5:2f:91:88:ba:6d:fb:c2:80:0d:54:bd:
e0:4f:08:a7:17:9e:27:0b:8e:51:c4:c6:25:9a:67:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C9:09:C9:5E:28:2E:16:53:A8:7A:B9:00:9D:F8:B0:12:DF:E1:20
X509v3 Authority Key Identifier:
keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.228.0/22
Signature Algorithm: sha256WithRSAEncryption
15:85:67:80:74:cf:ac:42:f1:36:7b:ca:ac:da:0f:d8:74:ba:
3a:a8:67:ae:0a:ba:64:90:10:14:2d:6d:27:4f:a2:b2:66:5d:
e2:36:52:96:e2:66:9e:79:57:5b:d5:c3:7c:1a:6c:94:e6:7c:
96:3e:e7:95:83:c0:94:57:a0:23:6e:9d:bf:2f:8b:4d:b9:e6:
45:e1:b7:3f:f4:fe:5e:e5:35:e9:4f:5c:78:c6:98:11:1f:26:
bd:01:9d:2d:08:cc:ee:e5:65:0b:21:36:5c:43:d2:70:f5:44:
55:ab:b8:f3:f8:0f:88:c2:7b:f7:08:66:1e:ed:05:d4:98:e2:
26:07:fc:15:01:7e:a9:c5:1b:85:f3:5e:69:85:58:2f:b9:5a:
19:03:31:a1:b8:cd:23:53:4e:b7:6e:11:d8:7d:05:09:a0:7e:
35:4a:d7:fa:02:f9:71:7a:23:25:4d:b9:e3:55:e5:ba:8b:03:
36:14:70:11:d8:98:a2:15:97:01:1a:3c:77:71:a4:4c:c9:8b:
e6:61:5e:07:9c:b5:d3:30:b5:91:da:ce:6f:0c:18:24:1f:3e:
1f:a1:b0:01:0a:ab:ad:6b:4e:35:72:94:25:29:bd:21:6e:56:
5a:82:bf:d3:5f:04:6f:6e:9b:9f:9e:ad:11:e3:f3:67:38:bc:
3f:72:d8:06
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz
MkJDNzg1QkYwHhcNMjUwOTA0MTg1ODM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjViYi1mZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzH7BCcc/AtRu4u1SFIs7K166qnKfbwnuOVLR7lZ51D4Vkd6SurYgqx8eIoeo
AsrXJCBOtWEpia1ST8c1eXAURSSf4gbMu5RKK2Qw/qmCGl0ygDtBxuGozWSJeM8B
3sFSwckXPkEQk2ae/IXexE5lWjW0EJ5mn4EEL3xPYhkFvXtNybe5RanLh5h7pqjE
LXA5VGQ5BRvqEwr8Pj8VLkGMCd2UCIniSPXRv6r0/hoBLauVJgCm4kRe6P8ajIiV
UPZCjmoZbwoX5+iQHiHmKhJOQkMeeI8D9FTOBN2oAoccWNmMv4v1L5GIum37woAN
VL3gTwinF54nC45RxMYlmmeoQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA7JCcle
KC4WU6h6uQCd+LAS3+EgMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5
RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho
YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUNDNDEvRTZCQTU0NDgwOUQ2MTFFQTlEMjk5RTFDQzRGOUFFMDIvNjc0MDA5QUUw
OUQ4MTFFQTlCQ0ZDRTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwzkMA0GCSqGSIb3DQEBCwUAA4IBAQAVhWeAdM+sQvE2e8qs2g/Y
dLo6qGeuCrpkkBAULW0nT6KyZl3iNlKW4maeeVdb1cN8GmyU5nyWPueVg8CUV6Aj
bp2/L4tNueZF4bc/9P5e5TXpT1x4xpgRHya9AZ0tCMzu5WULITZcQ9Jw9URVq7jz
+A+Iwnv3CGYe7QXUmOImB/wVAX6pxRuF815phVgvuVoZAzGhuM0jU063bhHYfQUJ
oH41Stf6AvlxeiMlTbnjVeW6iwM2FHAR2JiiFZcBGjx3caRMyYvmYV4HnLXTMLWR
2s5vDBgkHz4fobABCquta041cpQlKb0hblZagr/TXwRvbpufnq0R4/NnOLw/ctgG
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:49 2026 by rpki-client