
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/99A7637060B311EEBA329E54C4F9AE02.roa
File: 99A7637060B311EEBA329E54C4F9AE02.roa (raw, json)
Hash identifier: O3Ls+9YBYFMKkyDDzAoAnYOjitWoJ58mnyLKpWOVBLM=
Subject key identifier: 59:93:1F:1A:35:D7:3C:C6:C7:58:47:39:13:4F:BB:2A:75:F0:EA:40
Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial: 0323
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/99A7637060B311EEBA329E54C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:04:17 +0000
ROA not before: Sun 03 Aug 2025 02:09:14 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 24499
IP address blocks: 103.191.118.0/24 maxlen: 24
103.191.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Validity
Not Before: Aug 3 02:09:14 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40111-f578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:75:20:ac:02:6b:36:89:bd:26:c6:62:5e:fb:
01:5c:09:4e:3a:15:e0:65:5f:bf:0a:f2:8f:f2:0c:
46:4d:51:f5:0c:af:3f:b1:28:32:ae:84:3f:51:1f:
7a:81:37:7d:0e:9a:65:6e:97:27:fb:5a:c0:95:76:
f7:7f:37:ca:13:32:e1:93:23:84:b7:fa:1b:e7:2f:
32:fc:89:4e:35:1b:19:a2:ba:12:76:7e:cf:0d:62:
63:42:f0:f7:0c:e8:bd:0a:0d:96:6c:c8:f9:52:f1:
03:ec:c5:f9:ce:13:4a:de:4d:1d:16:98:f9:58:aa:
5c:7b:e1:91:ef:98:10:e1:08:6b:5b:12:f6:20:89:
da:78:98:db:04:fc:aa:7d:a0:0f:27:47:62:5a:99:
84:62:ab:f7:b2:c4:60:0d:ec:93:0a:8f:68:aa:13:
ff:a9:b6:df:c4:77:5c:85:20:9b:1a:94:30:d4:1b:
a3:b4:9c:71:c6:de:67:28:52:25:02:c2:01:7d:2e:
f8:2c:08:8c:73:e9:5c:22:e5:ac:84:43:00:9e:f5:
84:4b:9f:25:e1:db:74:32:06:81:73:40:e4:4e:55:
33:a6:02:39:13:8f:c8:80:4d:9f:2c:db:a5:ec:0b:
9a:57:b2:88:a7:73:18:a1:87:55:4c:47:17:ab:3a:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:93:1F:1A:35:D7:3C:C6:C7:58:47:39:13:4F:BB:2A:75:F0:EA:40
X509v3 Authority Key Identifier:
keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/99A7637060B311EEBA329E54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.191.118.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:3d:8b:10:90:cd:1e:ca:57:ec:31:1b:e0:9c:1e:57:4a:95:
b3:ce:cd:b0:1c:10:bc:47:82:18:07:58:86:43:58:63:68:a7:
1f:8c:fe:70:64:ae:85:14:b5:dd:60:4c:4e:fe:56:31:ae:de:
ee:63:d3:38:5e:c2:3e:57:ce:b8:d2:9d:e6:48:bf:a3:1f:f8:
62:9c:2f:3c:0b:1d:01:18:19:74:cf:4f:ef:12:72:3e:70:c1:
93:af:be:eb:58:24:30:18:fe:3f:ce:3a:63:8b:9a:ab:d9:5e:
65:36:45:1a:3b:f4:70:6c:b5:26:ea:67:1c:1c:be:bc:e4:81:
85:bf:2b:e1:61:f9:ef:07:02:73:b3:02:05:44:c9:e5:df:5e:
e8:75:ca:28:7e:ba:1d:b3:1d:39:c3:11:18:44:c7:2a:08:a9:
33:8a:59:c3:71:c7:10:68:74:71:7f:29:77:4f:c2:90:5a:7a:
25:38:44:2f:b1:95:8d:d6:1c:0c:5a:3d:3d:80:a1:b7:1a:af:
79:09:51:70:2c:0a:55:7a:f0:36:c0:15:10:68:63:5b:b6:ed:
24:0e:91:0b:ac:2a:5b:e0:db:76:83:28:33:c3:e1:c6:0c:d8:
f8:ba:4f:d1:98:b6:e5:8a:a7:35:63:12:95:9c:e8:e6:88:79:
20:01:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:50 2026 by rpki-client