
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa
File: 306CD346148D11F19BFA55B13D3D8C67.roa (raw, json)
Hash identifier: BAr/qgF2MLGt0IoB1WIa6SNFChHO0/OxfFvIz9Ta+q4=
Subject key identifier: 3C:04:AF:DD:E6:1E:9E:64:B0:35:19:15:8B:31:52:7E:81:10:10:61
Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial: 0948
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa
Signing time: Mon 09 Mar 2026 13:35:03 +0000
ROA not before: Mon 09 Mar 2026 13:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135310
IP address blocks: 103.111.166.0/24 maxlen: 24
103.111.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Validity
Not Before: Mar 9 13:35:03 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69aecc87-14ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:7f:7a:52:23:68:40:c7:40:c6:15:86:a8:
7e:48:c5:18:46:d8:a5:23:aa:d3:f8:c9:42:b1:f4:
e2:21:1c:54:9d:a2:45:d5:d9:e7:36:56:1d:9a:5f:
a2:e9:c0:42:5b:ff:aa:1b:b4:3a:a4:3f:cb:f9:0b:
62:09:5c:4a:50:b1:64:43:2e:46:0a:fb:7b:6c:24:
4e:22:59:e3:a9:dc:6b:87:47:2a:df:b4:82:d5:cf:
fd:9b:dc:c4:4c:a2:af:f0:07:bd:35:a9:d9:1f:e6:
cb:db:fc:4b:82:a6:af:cb:ce:ed:81:55:44:63:65:
9c:b9:3e:09:49:4b:e1:f9:1d:39:52:e6:96:4a:00:
f0:10:ee:1e:92:20:74:0c:66:a4:03:f6:03:fd:38:
88:fc:22:98:2b:0d:3e:9b:9e:ee:9c:f5:25:5d:1b:
f9:ad:4d:88:84:db:9d:44:9d:6c:f8:e9:fc:e8:ca:
39:29:a6:be:9e:97:33:33:8c:c8:82:77:4c:0a:b6:
74:9c:34:40:92:b3:b1:3c:0d:d5:8b:fd:cf:68:70:
e1:29:c7:bb:91:84:42:9a:2c:35:ca:9c:48:27:b3:
21:92:ab:48:8a:07:ab:20:52:fe:d2:db:b5:45:ca:
b2:8b:e0:cf:0c:26:80:34:8c:53:fa:7f:e8:96:a4:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:04:AF:DD:E6:1E:9E:64:B0:35:19:15:8B:31:52:7E:81:10:10:61
X509v3 Authority Key Identifier:
keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/306CD346148D11F19BFA55B13D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.166.0/23
Signature Algorithm: sha256WithRSAEncryption
61:aa:b0:4e:f9:4b:aa:d2:f5:fa:45:5a:61:cc:09:02:79:e5:
ec:c3:11:85:92:36:b4:02:07:de:20:97:5f:22:c6:50:5e:81:
d4:5b:0a:e2:b0:ab:81:e2:e6:3b:0d:8c:72:a9:0c:5b:f0:51:
4f:cb:fb:8b:f8:d1:c2:d8:51:df:57:21:00:53:91:ad:f8:3f:
eb:18:d5:5d:5c:0b:e4:20:39:18:7c:aa:b3:6d:30:24:50:a2:
b8:ea:df:c3:54:12:cc:d6:4b:fe:e0:55:0b:f1:07:83:9c:43:
bb:5f:96:89:36:5c:aa:ff:69:07:c0:df:cc:30:35:7d:24:f0:
a1:45:36:32:06:7f:59:e4:2b:ee:17:9f:8d:8d:84:0d:f5:2a:
1b:22:d5:e0:7e:77:52:ad:f9:ce:db:e7:4e:2d:b3:d9:18:3e:
4b:a8:b3:69:5b:97:d4:99:8b:ec:ae:d9:44:41:84:7b:1f:e4:
18:48:80:4f:90:6e:c3:3c:05:4a:56:27:10:90:91:cd:e1:a4:
df:a4:ef:f6:fe:f4:c5:46:59:22:97:98:77:4c:fd:98:7f:40:
5f:74:07:7d:1f:94:f0:7f:d2:88:f6:ad:a9:1e:57:6a:b8:a1:
75:f9:cc:be:44:ec:aa:3f:d4:7f:3b:08:2b:84:92:46:dd:fe:
49:f8:55:ac
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4
NUM5OTM4REEwHhcNMjYwMzA5MTMzNTAzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFlY2M4Ny0xNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj61/elIjaEDHQMYVhqh+SMUYRtilI6rT+MlCsfTiIRxUnaJF1dnnNlYdml+i
6cBCW/+qG7Q6pD/L+QtiCVxKULFkQy5GCvt7bCROIlnjqdxrh0cq37SC1c/9m9zE
TKKv8Ae9NanZH+bL2/xLgqavy87tgVVEY2WcuT4JSUvh+R05UuaWSgDwEO4ekiB0
DGakA/YD/TiI/CKYKw0+m57unPUlXRv5rU2IhNudRJ1s+On86Mo5Kaa+npczM4zI
gndMCrZ0nDRAkrOxPA3Vi/3PaHDhKce7kYRCmiw1ypxIJ7MhkqtIigerIFL+0tu1
Rcqyi+DPDCaANIxT+n/olqSTiQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDwEr93m
Hp5ksDUZFYsxUn6BEBBhMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx
RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDU2MEQvNjhDM0Y0OUE0MUVFMTFFQTlDRUExRjc1QzRGOUFFMDIvMzA2Q0QzNDYx
NDhEMTFGMTlCRkE1NUIxM0QzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ2+mMA0GCSqGSIb3DQEBCwUAA4IBAQBhqrBO+Uuq0vX6RVphzAkC
eeXswxGFkja0AgfeIJdfIsZQXoHUWwrisKuB4uY7DYxyqQxb8FFPy/uL+NHC2FHf
VyEAU5Gt+D/rGNVdXAvkIDkYfKqzbTAkUKK46t/DVBLM1kv+4FUL8QeDnEO7X5aJ
Nlyq/2kHwN/MMDV9JPChRTYyBn9Z5CvuF5+NjYQN9SobItXgfndSrfnO2+dOLbPZ
GD5LqLNpW5fUmYvsrtlEQYR7H+QYSIBPkG7DPAVKVicQkJHN4aTfpO/2/vTFRlki
l5h3TP2Yf0BfdAd9H5Twf9KI9q2pHldquKF1+cy+ROyqP9R/OwgrhJJG3f5J+FWs
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:13 2026 by rpki-client