
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/7F2355F2FE2A11EA8A51B85AC4F9AE02.roa
File: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (raw, json)
Hash identifier: pEoVeSKvZWCj0YeLOAFbn4+nyrnm4dpfDhs+6j8mLhc=
Subject key identifier: C5:D5:EA:A3:88:4C:41:CA:B6:78:D7:76:DA:95:09:60:24:EB:A4:AD
Certificate issuer: /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Certificate serial: 084D
Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/7F2355F2FE2A11EA8A51B85AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:37:03 +0000
ROA not before: Tue 22 Jul 2025 21:33:00 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139244
IP address blocks: 103.140.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Validity
Not Before: Jul 22 21:33:00 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a408bf-ceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:91:80:c1:5d:93:8f:f9:b3:81:34:e4:9f:
76:56:1b:da:29:e9:7a:14:25:82:ff:d1:46:b9:57:
9b:11:16:97:de:5a:6b:32:c8:7c:93:f8:19:a2:78:
65:26:6f:04:c2:a1:d2:77:54:7b:03:19:57:40:b5:
8d:ad:b3:13:57:e6:7d:4a:63:91:4e:cc:90:96:69:
ec:ee:65:e2:68:3a:47:08:fb:14:aa:f7:83:8d:26:
56:66:f8:1c:4b:11:0c:1d:a8:35:c5:8f:6a:1c:61:
0f:3b:e9:c3:54:ca:a4:87:6d:1d:e1:79:b8:99:5b:
3c:b9:bb:4d:6a:5b:c3:3b:c6:ed:98:ba:86:1b:b7:
01:96:26:70:b2:5d:e5:a2:ae:0b:2b:17:5b:2e:dd:
34:95:f8:54:14:a2:61:40:01:4f:b5:79:54:fa:09:
6c:a2:2c:09:ca:f0:c1:c5:98:01:02:85:05:98:40:
4e:6e:9b:11:7b:08:38:61:5a:01:d8:96:46:1c:80:
85:2c:ec:07:5c:27:97:d9:86:1a:1c:55:f3:cf:b0:
75:f7:73:9e:d2:2b:62:9b:f8:4f:aa:f4:cc:ef:d1:
3b:d4:12:9d:26:53:cd:c4:a3:6f:dd:cc:9c:91:e3:
9c:27:08:79:b1:78:f7:4c:0d:65:59:bc:ff:3c:e7:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D5:EA:A3:88:4C:41:CA:B6:78:D7:76:DA:95:09:60:24:EB:A4:AD
X509v3 Authority Key Identifier:
keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/7F2355F2FE2A11EA8A51B85AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.92.0/23
Signature Algorithm: sha256WithRSAEncryption
41:74:d3:b2:2e:81:44:e6:f1:3a:af:94:bd:10:8f:45:ec:4a:
6c:6f:1c:ee:f0:f7:01:73:a9:f5:94:4c:f7:04:8c:2e:d8:6f:
2a:74:32:cf:0a:81:1a:5a:65:5d:1a:5e:4e:ac:b0:f0:7f:b3:
a4:66:bb:bf:ee:99:3e:2e:53:26:81:92:91:66:5d:39:ab:97:
eb:70:5d:bd:1b:42:ea:71:22:23:fe:d4:89:cb:8e:51:2a:e7:
8b:19:18:8d:46:d1:5d:7e:d3:74:9c:4e:28:db:7d:84:e2:76:
0c:0a:d2:85:73:48:94:b4:26:a6:bc:f0:ad:14:b1:22:ab:02:
b0:9b:c4:11:b1:0f:55:f1:3f:4c:41:67:bb:f5:37:47:7e:f0:
31:1e:01:21:67:93:1a:95:dc:5e:a4:aa:71:40:d3:22:56:09:
1d:7e:d3:52:a7:10:78:83:bb:46:27:b0:4c:d7:ed:f4:78:d9:
e7:a8:5b:53:ac:49:70:44:4c:67:97:54:19:a7:d0:ca:1a:fc:
a6:53:ae:68:57:7c:98:31:bd:e7:f7:bf:a1:3f:a1:b9:88:ee:
a9:6e:c9:59:47:b4:8d:a7:27:8e:23:8d:e4:92:71:5a:38:08:
01:e6:81:aa:f5:d7:34:0e:72:2c:7c:59:cc:78:92:67:25:89:
ae:c2:3a:9b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UyMTYxMTAvBgNVBAUTKDY4QTRGQzgxMkQwMTkxMzYzRTFDNEExMzA5OUY1M0Iw
MjczNzY1NzkwHhcNMjUwNzIyMjEzMzAwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDhiZi1jZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkORgMFdk4/5s4E05J92VhvaKel6FCWC/9FGuVebERaX3lprMsh8k/gZonhl
Jm8EwqHSd1R7AxlXQLWNrbMTV+Z9SmORTsyQlmns7mXiaDpHCPsUqveDjSZWZvgc
SxEMHag1xY9qHGEPO+nDVMqkh20d4Xm4mVs8ubtNalvDO8btmLqGG7cBliZwsl3l
oq4LKxdbLt00lfhUFKJhQAFPtXlU+glsoiwJyvDBxZgBAoUFmEBObpsRewg4YVoB
2JZGHICFLOwHXCeX2YYaHFXzz7B193Oe0itim/hPqvTM79E71BKdJlPNxKNv3cyc
keOcJwh5sXj3TA1lWbz/POegfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMXV6qOI
TEHKtnjXdtqVCWAk66StMB8GA1UdIwQYMBaAFGik/IEtAZE2PhxKEwmfU7AnN2V5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTIxNi9BRjU3QjZGQ0ZF
MjgxMUVBQTczNTAxNThDNEY5QUUwMi9hS1Q4Z1MwQmtUWS1IRW9UQ1o5VHNDYzNa
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FLVDhnUzBCa1RZLUhFb1RDWjlUc0NjM1pYay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0UyMTYvQUY1N0I2RkNGRTI4MTFFQUE3MzUwMTU4QzRGOUFFMDIvN0YyMzU1RjJG
RTJBMTFFQThBNTFCODVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4xcMA0GCSqGSIb3DQEBCwUAA4IBAQBBdNOyLoFE5vE6r5S9EI9F
7Epsbxzu8PcBc6n1lEz3BIwu2G8qdDLPCoEaWmVdGl5OrLDwf7OkZru/7pk+LlMm
gZKRZl05q5frcF29G0LqcSIj/tSJy45RKueLGRiNRtFdftN0nE4o232E4nYMCtKF
c0iUtCamvPCtFLEiqwKwm8QRsQ9V8T9MQWe79TdHfvAxHgEhZ5MaldxepKpxQNMi
VgkdftNSpxB4g7tGJ7BM1+30eNnnqFtTrElwRExnl1QZp9DKGvymU65oV3yYMb3n
97+hP6G5iO6pbslZR7SNpyeOI43kknFaOAgB5oGq9dc0DnIsfFnMeJJnJYmuwjqb
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:09:41 2026 by rpki-client