
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/80C33BD4227811F190F6266DA4833773.roa
File: 80C33BD4227811F190F6266DA4833773.roa (raw, json)
Hash identifier: 3v+B4tCUwpOF2mkM4uEJ/dje8PYL5k+BkV2Dze67PRM=
Subject key identifier: 62:EA:C2:E2:BD:3C:44:0A:B7:4A:56:F2:EA:BB:9C:1A:C7:EF:C9:8E
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0C33
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/80C33BD4227811F190F6266DA4833773.roa
Signing time: Wed 18 Mar 2026 03:13:58 +0000
ROA not before: Wed 18 Mar 2026 03:13:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 401783
IP address blocks: 103.249.184.0/24 maxlen: 24
103.249.185.0/24 maxlen: 24
103.249.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3123 (0xc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Mar 18 03:13:58 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69ba1875-a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:a4:fb:d6:8d:44:0b:7d:2d:99:45:42:52:
ff:0d:da:3c:8b:fc:3e:48:e4:ce:f1:a2:b0:30:04:
c1:45:e7:e5:6a:d3:df:b0:e8:b3:1f:80:e3:5b:4f:
0e:d7:7e:4d:3c:de:a0:eb:70:80:0a:7e:90:ab:93:
61:14:08:d0:e9:e3:6a:58:0f:26:d9:64:cc:a8:52:
c5:04:88:92:6c:44:29:94:3e:5f:27:37:86:ef:38:
fa:2c:75:f1:9b:83:55:fa:53:04:e1:c1:db:ec:85:
d8:4d:dd:73:04:5f:b0:bb:20:b9:9b:ab:4f:a9:eb:
2d:e3:45:6e:7c:e4:e8:3c:92:bd:6c:0d:f7:f6:8a:
53:5f:fa:d2:5d:d6:e6:12:51:68:62:ba:27:f9:17:
2d:b7:06:b8:57:3c:50:38:5f:f8:ce:0b:65:55:82:
0a:20:c7:cb:f2:22:88:2b:41:6b:ca:e8:55:93:f5:
cb:c4:46:ab:9e:ec:56:b6:85:cc:ed:85:79:b2:43:
bc:af:14:9e:d5:23:1a:8d:14:f4:5a:3f:35:4b:d0:
21:c9:78:56:59:67:5f:03:4a:ba:38:17:c5:9b:56:
35:0a:bc:6b:58:13:b4:8f:e4:cd:86:6b:b9:3c:dc:
ab:49:8a:83:81:d2:86:7a:91:ea:31:3b:b5:ac:37:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EA:C2:E2:BD:3C:44:0A:B7:4A:56:F2:EA:BB:9C:1A:C7:EF:C9:8E
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/80C33BD4227811F190F6266DA4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.249.184.0-103.249.186.255
Signature Algorithm: sha256WithRSAEncryption
7d:ad:2c:43:ac:69:2b:31:1c:2e:58:94:7c:4c:21:f4:80:85:
b6:7d:c3:62:d6:7e:e4:71:af:59:e3:ae:ae:4d:45:21:a0:1c:
a4:de:04:a0:dc:d6:d2:ea:ec:52:41:64:f8:2f:98:b2:b2:d1:
eb:fb:11:22:b4:36:45:78:81:c7:f4:dd:be:f1:0d:ec:59:8d:
64:2a:8c:4c:cf:7d:4b:27:4e:c0:dc:fc:5f:3b:94:d8:ce:cc:
75:62:67:9b:b9:6d:04:1b:10:ce:34:f1:95:5e:f7:2f:3b:63:
a2:e7:c5:1f:06:16:2d:b9:00:5e:75:5a:48:f1:0f:3b:1e:84:
4c:4e:9b:0b:b7:a8:0a:b0:51:0e:ee:19:00:d7:dd:6f:9e:7b:
6d:bc:df:37:5f:86:25:d9:25:70:e3:bc:09:fb:df:ff:3a:02:
1f:cc:1f:73:a5:55:6c:56:41:8b:2a:d9:01:6d:ff:47:c8:e5:
b4:db:3f:8a:a3:5c:ec:dd:44:05:49:68:3f:84:35:31:a4:3b:
94:2a:44:45:0d:c5:ff:32:44:9a:1d:10:9f:ce:69:03:c6:35:
a5:f6:c2:05:2e:f6:92:41:57:09:43:9a:9b:f2:b3:1e:1d:fe:
7a:4f:a8:97:d3:28:f2:4f:89:e7:fb:94:3a:7d:7d:ec:22:d6:
5b:00:2b:93
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG
NTA5RUE2RUUwHhcNMjYwMzE4MDMxMzU4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJhMTg3NS1hOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLek+9aNRAt9LZlFQlL/Ddo8i/w+SOTO8aKwMATBReflatPfsOizH4DjW08O
135NPN6g63CACn6Qq5NhFAjQ6eNqWA8m2WTMqFLFBIiSbEQplD5fJzeG7zj6LHXx
m4NV+lME4cHb7IXYTd1zBF+wuyC5m6tPqest40VufOToPJK9bA339opTX/rSXdbm
ElFoYron+Rcttwa4VzxQOF/4zgtlVYIKIMfL8iKIK0FryuhVk/XLxEarnuxWtoXM
7YV5skO8rxSe1SMajRT0Wj81S9AhyXhWWWdfA0q6OBfFm1Y1CrxrWBO0j+TNhmu5
PNyrSYqDgdKGepHqMTu1rDc+ZQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFGLqwuK9
PEQKt0pW8uq7nBrH78mOMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx
NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvODBDMzNCRDQy
Mjc4MTFGMTkwRjYyNjZEQTQ4MzM3NzMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBANn+bgDBABn+bowDQYJKoZIhvcNAQELBQADggEBAH2tLEOsaSsx
HC5YlHxMIfSAhbZ9w2LWfuRxr1njrq5NRSGgHKTeBKDc1tLq7FJBZPgvmLKy0ev7
ESK0NkV4gcf03b7xDexZjWQqjEzPfUsnTsDc/F87lNjOzHViZ5u5bQQbEM408ZVe
9y87Y6LnxR8GFi25AF51WkjxDzsehExOmwu3qAqwUQ7uGQDX3W+ee2283zdfhiXZ
JXDjvAn73/86Ah/MH3OlVWxWQYsq2QFt/0fI5bTbP4qjXOzdRAVJaD+ENTGkO5Qq
REUNxf8yRJodEJ/OaQPGNaX2wgUu9pJBVwlDmpvysx4d/npPqJfTKPJPief7lDp9
fewi1lsAK5M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:23:04 2026 by rpki-client