
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D516EA2AA1E611EDABFD7D7FC4F9AE02.roa
File: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (raw, json)
Hash identifier: vxznBiBVR6YDAJK7LuojHusJdEYCXrwVVLv7TWoRtB8=
Subject key identifier: 57:95:5F:6B:3B:22:A2:27:8A:62:3F:A4:5F:39:7F:86:1C:22:F8:C1
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 04E0
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D516EA2AA1E611EDABFD7D7FC4F9AE02.roa
Signing time: Sat 07 Mar 2026 00:32:35 +0000
ROA not before: Sat 07 Mar 2026 00:32:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 64037
IP address blocks: 103.177.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: Mar 7 00:32:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69ab7223-cc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:78:ba:87:61:05:d9:1a:e3:42:fa:89:ec:a7:
44:80:e1:3a:fb:7e:5b:82:2b:10:f9:4a:4a:fc:e8:
13:df:28:63:fd:1c:9f:17:fe:0c:c4:42:97:4d:d0:
27:3a:d5:8a:7f:32:bd:a7:c1:98:b6:07:bb:ee:da:
28:6e:60:c1:02:d7:13:dc:78:31:3b:71:b7:d2:7f:
12:b9:f1:db:f7:bc:de:de:fe:e6:57:7c:05:5f:30:
2d:6e:7d:b5:67:2b:bd:7f:d9:9f:f5:8c:b0:4e:a1:
da:82:40:05:c0:c2:c7:c4:87:62:d5:ed:37:1b:73:
2a:02:fd:70:f5:1f:b4:83:fa:2a:c3:9c:1e:51:98:
41:91:e2:22:c1:f5:be:6e:a1:d5:a6:94:9c:38:0d:
11:c6:bd:61:5a:28:8d:0c:96:da:a1:7b:a6:13:ac:
0c:0f:7d:58:ad:ae:45:e7:ea:31:e3:8f:6f:b5:5c:
42:d0:f9:21:0b:01:a5:48:3e:bf:fc:d7:d1:71:b0:
5c:61:56:4f:85:01:42:b2:48:3d:3d:ec:de:a6:b6:
fd:c2:75:3b:4a:64:04:1b:e6:84:75:1b:00:23:71:
1d:09:fc:25:d5:d0:d5:55:a6:ad:d0:ac:b1:61:ce:
aa:ba:73:46:b4:d2:72:bc:d5:d6:fa:bd:b3:0d:13:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:95:5F:6B:3B:22:A2:27:8A:62:3F:A4:5F:39:7F:86:1C:22:F8:C1
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D516EA2AA1E611EDABFD7D7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.168.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fc:a6:15:6d:f6:1e:2a:3a:3b:22:a9:95:b9:83:d9:fb:15:
f7:cb:22:a1:5a:48:2b:61:38:86:6a:bf:db:9f:b0:9a:c7:c0:
36:78:fa:c5:f6:d7:55:2c:26:43:8e:50:d4:7b:54:dc:36:44:
5d:fd:ea:94:f9:29:15:cd:84:d4:d4:98:28:ac:95:e3:91:21:
00:99:30:ed:db:8b:33:74:ce:d6:90:71:74:76:65:a8:bf:43:
f2:7f:d5:65:d4:c4:b4:5b:85:f0:ed:a1:5b:80:46:5f:91:c9:
61:0b:0b:72:0f:80:b0:d3:ff:06:8b:43:fc:a3:ed:39:65:f2:
ab:72:e6:6b:88:4a:d1:a2:51:80:fc:1d:12:14:c9:9a:72:5d:
01:75:fe:a7:6d:33:57:96:cf:d6:ba:b9:f3:e0:b5:d1:17:4d:
88:55:15:2e:89:52:51:43:9a:01:18:56:5f:62:2d:1f:c8:20:
e4:fd:a3:0f:81:39:d0:2b:00:19:ce:90:ad:17:84:e6:50:9f:
b8:27:22:70:81:c7:36:58:3f:20:fa:d3:29:91:27:93:20:c5:
95:0f:5e:aa:6f:18:d4:95:9e:f2:f0:ae:55:4f:e5:1f:d1:23:
e3:0c:96:cb:2e:76:53:ad:36:32:c5:06:3d:0d:77:7d:16:45:
e5:eb:66:8b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2
NTQyRTgyRTIwHhcNMjYwMzA3MDAzMjM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFiNzIyMy1jYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ni6h2EF2RrjQvqJ7KdEgOE6+35bgisQ+UpK/OgT3yhj/RyfF/4MxEKXTdAn
OtWKfzK9p8GYtge77toobmDBAtcT3HgxO3G30n8SufHb97ze3v7mV3wFXzAtbn21
Zyu9f9mf9YywTqHagkAFwMLHxIdi1e03G3MqAv1w9R+0g/oqw5weUZhBkeIiwfW+
bqHVppScOA0Rxr1hWiiNDJbaoXumE6wMD31Yra5F5+ox449vtVxC0PkhCwGlSD6/
/NfRcbBcYVZPhQFCskg9Pezeprb9wnU7SmQEG+aEdRsAI3EdCfwl1dDVVaat0Kyx
Yc6qunNGtNJyvNXW+r2zDRPcuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFeVX2s7
IqInimI/pF85f4YcIvjBMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz
QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdEM0QvMjMzQzBCNDY2M0JDMTFFQzhCOEM4MzJBQzRGOUFFMDIvRDUxNkVBMkFB
MUU2MTFFREFCRkQ3RDdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7GoMA0GCSqGSIb3DQEBCwUAA4IBAQCG/KYVbfYeKjo7IqmVuYPZ
+xX3yyKhWkgrYTiGar/bn7Cax8A2ePrF9tdVLCZDjlDUe1TcNkRd/eqU+SkVzYTU
1JgorJXjkSEAmTDt24szdM7WkHF0dmWov0Pyf9Vl1MS0W4Xw7aFbgEZfkclhCwty
D4Cw0/8Gi0P8o+05ZfKrcuZriErRolGA/B0SFMmacl0Bdf6nbTNXls/Wurnz4LXR
F02IVRUuiVJRQ5oBGFZfYi0fyCDk/aMPgTnQKwAZzpCtF4TmUJ+4JyJwgcc2WD8g
+tMpkSeTIMWVD16qbxjUlZ7y8K5VT+Uf0SPjDJbLLnZTrTYyxQY9DXd9FkXl62aL
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:52 2026 by rpki-client