
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
File: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (raw, json)
Hash identifier: PMCoxJN0Mw3UihPrQUCzoPvyQ9Kv2AExrUeTP8CdAPA=
Subject key identifier: 87:02:B9:4C:77:0C:01:38:05:F8:14:D1:D4:91:22:5B:DF:49:8D:AA
Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial: 01F6
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:36:35 +0000
ROA not before: Tue 29 Apr 2025 04:40:35 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.207.60.0/24 maxlen: 24
103.207.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Validity
Not Before: Apr 29 04:40:35 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3ec83-7c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:a6:53:19:59:b1:9a:1d:c5:c3:3a:76:f8:
49:be:64:a1:5a:8c:68:7d:18:b9:cc:16:20:e6:29:
1c:6d:a2:71:07:30:7f:a9:4b:4a:1c:da:4c:19:f1:
d7:1e:01:ca:c7:5a:16:89:17:b7:14:9d:a0:23:51:
53:51:5d:9b:ee:b5:c0:e7:1e:ce:a4:a4:27:68:76:
78:b1:49:7b:5b:3f:60:95:c4:0a:79:62:be:e0:5c:
0d:8d:cd:73:18:76:58:5f:92:9a:11:74:3b:f2:ea:
81:b7:a7:d0:ca:88:39:1d:92:01:ac:e5:2d:9f:1d:
d1:1e:33:cd:79:a1:84:26:2a:c9:11:54:8a:f7:6f:
11:14:e4:31:f7:0e:07:c5:12:17:14:4c:e0:bf:a2:
15:c9:58:66:86:62:fb:c1:18:2d:ea:b4:85:6d:bb:
21:3d:be:09:e7:8b:d4:c9:b0:fb:bd:bf:03:d5:f2:
31:ea:17:e4:d3:76:ba:5d:6a:31:e4:dd:9c:d0:a8:
4f:b7:43:0e:fc:ea:1d:71:e3:1d:c1:08:d8:4d:58:
a3:cd:6b:fe:a0:85:69:d9:a7:c8:49:af:d7:7c:60:
3c:55:e3:41:76:c0:a1:6b:b8:38:3e:20:0e:bb:23:
a6:33:32:df:75:d5:f6:9c:6b:2a:26:c8:a3:af:26:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:02:B9:4C:77:0C:01:38:05:F8:14:D1:D4:91:22:5B:DF:49:8D:AA
X509v3 Authority Key Identifier:
keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.60.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:13:e8:fd:ba:0c:64:3f:a7:75:2a:c6:7a:18:6f:03:25:14:
93:5e:aa:3e:de:e9:41:f0:af:4b:5b:ac:09:e6:90:53:fa:25:
b0:9c:5d:25:fc:38:3d:3b:0f:01:df:e8:ed:d8:3e:d9:de:1f:
f8:50:0b:1e:b4:15:f1:12:9f:f1:83:32:d9:00:96:1e:37:88:
38:a6:99:ac:f3:c7:ea:5c:3f:18:99:d4:1d:ca:70:61:c6:ac:
66:6f:7f:9c:75:4f:22:4f:16:13:63:a3:d0:cb:5b:a7:b1:33:
fd:48:1d:e7:60:2d:e0:87:46:74:cb:5c:70:9d:c5:e2:25:e8:
f4:67:0c:e9:c7:ae:a4:88:72:b6:f0:0e:bb:9c:c3:e5:3b:30:
7b:ae:6a:a1:b5:5e:b3:8f:66:c9:30:e5:87:ae:91:f5:c2:4c:
6a:a5:6c:ba:65:1f:a0:c2:9b:a9:11:b3:20:e1:43:8e:e3:af:
a4:95:e9:96:2b:91:4b:6f:b2:12:33:4c:52:2f:72:44:0e:d8:
72:da:8f:b6:6c:21:58:94:16:a8:d3:cd:19:31:73:2e:07:7b:
09:20:5c:d2:50:ae:e0:9a:74:34:1a:34:8c:38:e1:40:44:e1:
f4:93:89:07:d7:02:a1:8b:f9:f4:9d:7b:8c:ad:a4:7f:e7:9b:
70:97:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:43 2026 by rpki-client