
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/A07D8B96229611F1A7D0762CAF833773.roa
File: A07D8B96229611F1A7D0762CAF833773.roa (raw, json)
Hash identifier: T2vZQOLMibHqgQVOX6XcQKXn3xWaS5ULxK4K1nOSVG8=
Subject key identifier: 2D:C7:CF:E5:FF:36:B7:52:0B:3C:F9:48:E4:6F:E7:8C:5C:7C:84:2D
Certificate issuer: /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial: 41
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/A07D8B96229611F1A7D0762CAF833773.roa
Signing time: Wed 18 Mar 2026 06:49:36 +0000
ROA not before: Wed 18 Mar 2026 06:49:36 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 23672
IP address blocks: 103.155.182.0/24 maxlen: 24
103.155.183.0/24 maxlen: 24
203.78.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Validity
Not Before: Mar 18 06:49:36 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69ba4b00-0b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:96:a8:1a:3f:07:44:70:51:b8:9a:04:77:
98:f6:b5:8b:fb:f0:fd:7c:cd:c4:0f:c6:46:3f:76:
7a:b0:6d:a7:c7:07:db:57:eb:e4:ff:21:b4:11:1f:
b4:ff:9b:c6:eb:f3:af:17:7c:91:3f:9f:97:62:41:
45:34:98:90:d2:74:90:a3:5f:72:0b:9b:6e:7d:b6:
9e:73:c2:20:9f:5b:4b:95:9a:e0:4e:79:e5:af:0f:
93:8a:9c:77:b2:ea:7e:0b:90:06:da:de:3c:c9:68:
fb:53:8f:0b:81:37:33:68:93:65:79:85:dc:8d:5c:
f4:50:14:7a:a7:1c:7a:f7:b3:f9:d2:3f:12:3e:02:
5d:55:0f:35:8b:44:94:d7:4c:97:62:18:29:46:08:
e5:96:21:6c:05:c7:b4:f6:df:16:93:a7:67:47:d6:
9f:a3:8a:8c:16:67:4a:12:8a:58:4f:e3:ee:0a:44:
55:3a:e2:c1:f9:78:ac:b0:f7:74:82:80:2c:f4:cd:
8c:78:5a:ff:5c:34:4f:2e:25:8a:41:dc:be:25:6b:
47:4c:ed:4a:df:3e:46:64:d6:f6:66:72:f5:62:e2:
56:eb:f8:d1:ca:81:dc:ef:6f:ad:f9:89:4e:96:8b:
15:26:a5:56:6f:88:d7:33:f5:d3:5f:5f:ce:00:c9:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:CF:E5:FF:36:B7:52:0B:3C:F9:48:E4:6F:E7:8C:5C:7C:84:2D
X509v3 Authority Key Identifier:
keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/A07D8B96229611F1A7D0762CAF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.182.0/23
203.78.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8e:44:97:79:0e:dd:26:c6:93:3e:a9:58:c4:2a:de:4a:75:
57:92:50:27:43:42:17:d4:60:5b:35:d2:b0:cd:e4:03:7e:83:
1f:9f:c9:04:10:d9:0b:c3:8d:bf:ba:73:dd:64:04:ee:97:e9:
9b:6b:97:1b:87:b0:29:df:5d:ef:25:75:62:08:5c:99:a1:af:
b7:72:8c:d3:bc:a0:3a:31:72:7f:bc:c3:32:bd:7e:c0:14:6c:
f2:94:3c:2b:80:6e:0f:fb:2b:d3:84:72:88:6b:91:1e:cb:79:
61:97:0a:ea:7e:0d:3b:0f:1d:d1:be:fb:61:27:fe:7d:07:0c:
02:b8:d1:1b:76:0f:1f:99:5c:21:d6:cd:c7:60:36:60:46:2e:
d6:74:3f:0e:7f:ee:cd:8f:e3:2d:f4:4f:cf:f4:49:0c:78:f8:
99:d3:1a:62:92:b0:cf:7b:cd:e8:3a:36:56:66:87:51:7b:46:
42:2e:81:ff:c2:a7:e1:75:c6:dd:6f:61:e0:6c:57:7c:4c:6a:
4f:9f:fe:c9:24:04:3e:df:98:e2:5c:85:53:d6:aa:8d:f0:52:
b2:0f:05:09:af:2f:d6:aa:b3:3e:88:4d:bf:de:51:20:6f:eb:
09:6b:75:56:d3:02:22:74:90:fc:2e:99:bb:94:dd:02:8d:49:
c7:06:92:7e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NkREMDExMC8GA1UEBRMoRUU2MEJFRkM5NEJDMEY3NEJEOUQxMTE1NkUxNUJBMjNG
N0VCRTVBODAeFw0yNjAzMTgwNjQ5MzZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YmE0YjAwLTBiNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8T5aoGj8HRHBRuJoEd5j2tYv78P18zcQPxkY/dnqwbafHB9tX6+T/IbQRH7T/
m8br868XfJE/n5diQUU0mJDSdJCjX3ILm259tp5zwiCfW0uVmuBOeeWvD5OKnHey
6n4LkAba3jzJaPtTjwuBNzNok2V5hdyNXPRQFHqnHHr3s/nSPxI+Al1VDzWLRJTX
TJdiGClGCOWWIWwFx7T23xaTp2dH1p+jiowWZ0oSilhP4+4KRFU64sH5eKyw93SC
gCz0zYx4Wv9cNE8uJYpB3L4la0dM7UrfPkZk1vZmcvVi4lbr+NHKgdzvb635iU6W
ixUmpVZviNcz9dNfX84AyWXHAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQULcfP5f82
t1ILPPlI5G/njFx8hC0wHwYDVR0jBBgwFoAU7mC+/JS8D3S9nREVbhW6I/fr5agw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2REQwL0NBNzUwQUNBQzQ3
MDExRjBCRDVBNjIzOUM0RjlBRTAyLzdtQy1fSlM4RDNTOW5SRVZiaFc2SV9mcjVh
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN21DLV9KUzhEM1M5blJFVmJoVzZJX2ZyNWFnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkREMC9DQTc1MEFDQUM0NzAxMUYwQkQ1QTYyMzlDNEY5QUUwMi9BMDdEOEI5NjIy
OTYxMUYxQTdEMDc2MkNBRjgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAFnm7YDBADLTqUwDQYJKoZIhvcNAQELBQADggEBAKKORJd5Dt0mxpM+
qVjEKt5KdVeSUCdDQhfUYFs10rDN5AN+gx+fyQQQ2QvDjb+6c91kBO6X6ZtrlxuH
sCnfXe8ldWIIXJmhr7dyjNO8oDoxcn+8wzK9fsAUbPKUPCuAbg/7K9OEcohrkR7L
eWGXCup+DTsPHdG++2En/n0HDAK40Rt2Dx+ZXCHWzcdgNmBGLtZ0Pw5/7s2P4y30
T8/0SQx4+JnTGmKSsM97zeg6NlZmh1F7RkIugf/Cp+F1xt1vYeBsV3xMak+f/skk
BD7fmOJchVPWqo3wUrIPBQmvL9aqsz6ITb/eUSBv6wlrdVbTAiJ0kPwumbuU3QKN
SccGkn4=
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:18:57 2026 by rpki-client