
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/A3FE68F6081C11F1912AFF69323D8C67.roa
File: A3FE68F6081C11F1912AFF69323D8C67.roa (raw, json)
Hash identifier: g2adiyPxsVhG5oeVaDBqn8Ydsbj30nd9vTisrwWjNJw=
Subject key identifier: D0:D1:58:56:24:2C:76:A1:EA:08:35:A1:F6:90:FA:76:3B:DC:B3:16
Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial: 071A
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/A3FE68F6081C11F1912AFF69323D8C67.roa
Signing time: Sun 01 Mar 2026 18:11:35 +0000
ROA not before: Thu 12 Feb 2026 14:10:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.99.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Validity
Not Before: Feb 12 14:10:53 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48157-82d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:c9:b7:2a:21:65:e6:e3:38:c8:32:f9:f5:
c5:e7:7e:26:03:2d:5b:ea:67:58:16:6b:46:6f:84:
7c:ff:11:b0:97:bc:c3:e0:d5:a7:a4:90:e9:18:bb:
9b:8b:a2:d3:e1:ac:62:7e:8c:9e:aa:f2:ad:90:98:
9d:e3:a4:f9:09:45:c0:2f:1b:ec:85:4e:45:19:c0:
cd:20:8c:0a:3c:3c:57:8c:58:48:69:bf:44:f9:72:
2f:ad:db:d1:e2:dd:ac:65:34:dd:cc:d9:8c:21:81:
c0:b2:29:c7:c2:49:bb:94:03:ac:a2:21:1c:75:31:
ca:0d:57:90:20:99:9b:ea:2a:db:ea:a7:f4:80:f1:
8a:c3:b0:4c:3e:bc:e5:ac:e9:84:33:ff:d6:23:c0:
12:95:3b:a2:c6:97:c8:76:1b:aa:85:48:47:1c:2e:
93:7c:0d:e0:e4:a5:9f:2e:14:6e:a3:d8:0d:58:39:
ea:40:e1:8c:46:38:0a:e2:6f:a5:e3:f0:93:72:0f:
a1:7d:f8:2d:e3:ae:96:f1:c9:2e:36:d1:1f:61:39:
10:d2:63:2c:2f:4c:99:bf:c2:4a:b2:2f:e6:56:fb:
b4:1f:e8:f3:e8:dc:55:f9:49:af:b8:ca:b0:c3:7a:
8f:87:f0:f2:94:e3:e8:67:45:44:db:8a:18:d4:30:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:58:56:24:2C:76:A1:EA:08:35:A1:F6:90:FA:76:3B:DC:B3:16
X509v3 Authority Key Identifier:
keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/A3FE68F6081C11F1912AFF69323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.62.0/24
Signature Algorithm: sha256WithRSAEncryption
85:73:43:ab:1a:b1:05:4f:27:24:40:26:df:32:07:79:f6:49:
8f:6f:be:e9:d8:0e:21:be:6a:09:be:e6:8c:7c:1c:c8:82:77:
d6:2c:d4:29:cc:61:0e:b2:2f:c9:6b:5a:b2:70:3a:e5:a6:91:
70:0d:da:8d:34:52:da:30:3d:58:d4:c6:77:7a:6c:f2:91:24:
22:ea:04:87:a3:6d:15:27:48:73:a0:c7:12:9b:2a:c2:a0:6c:
eb:b7:18:de:92:a6:db:96:0f:09:89:03:94:ca:89:2d:8a:98:
0e:74:79:cb:d1:ba:47:fb:d1:5d:b9:06:81:9c:02:ed:24:43:
63:84:db:42:52:49:26:e4:5d:1f:44:4f:33:8b:bb:39:46:15:
77:d4:2f:5a:68:0f:19:6d:56:72:3c:58:68:2b:91:ae:b2:73:
19:53:ad:34:8b:3d:e3:50:c9:4a:92:82:ed:3d:9e:21:e9:36:
66:a6:c6:5a:7d:af:fb:e2:1d:03:be:57:e4:f6:d9:01:0a:20:
20:4e:0b:ac:f3:01:0a:cb:ff:d1:04:2e:a1:66:b3:86:fc:cb:
e5:06:bf:b1:f2:6b:53:59:1c:4e:7d:fb:e8:8c:26:0f:30:cd:
d9:5e:a7:18:c8:c4:8c:4f:71:96:50:73:c4:b3:7b:92:8e:1c:
60:f6:e6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:16 2026 by rpki-client