
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa
File: 12DD779467A211EEA8239268C4F9AE02.roa (raw, json)
Hash identifier: HImP9VOFFXqJoFjOOctJYpYNAjV+ZRGn0lHyorjq5bc=
Subject key identifier: 0C:99:F6:53:35:E4:98:AE:C6:AC:64:AB:98:A2:24:76:51:7A:53:31
Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
Certificate serial: 01E7
Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:47:34 +0000
ROA not before: Sat 19 Jul 2025 04:10:15 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139041
IP address blocks: 103.239.14.0/24 maxlen: 24
103.239.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl
rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
Validity
Not Before: Jul 19 04:10:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5a306-a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:f6:b0:3b:16:ee:d8:9a:e1:76:fe:5e:32:
41:ee:42:17:63:09:cb:48:8d:99:dc:33:3e:bb:72:
38:df:5c:04:2b:0c:0d:c1:51:fd:31:ea:15:7a:e3:
40:20:93:63:ff:18:e2:32:05:54:cc:bd:cb:ea:3e:
bf:4e:2f:ca:9c:00:e2:fd:e8:95:a4:4c:3d:94:d8:
2b:1c:c0:bd:2a:9d:42:2a:c1:74:08:48:e6:42:1d:
09:2b:86:09:e1:71:01:38:a7:72:b7:53:bf:a6:07:
60:3e:6b:bd:46:59:50:b0:47:5a:fc:e8:28:f4:72:
21:1f:5e:d3:aa:34:38:43:64:44:58:2f:23:b1:11:
14:8a:f3:0d:07:32:49:7f:21:2e:0c:0f:47:dd:95:
51:c5:01:49:ce:09:d0:1e:e3:93:38:dd:f1:bc:73:
15:d0:ec:73:86:fe:a6:58:3c:56:b7:3c:9d:d5:c2:
df:9c:0f:63:54:0f:28:40:1f:c8:3c:fd:bb:6a:49:
26:b8:ca:1a:ef:d8:5f:53:7a:aa:ae:34:0d:09:74:
66:7a:f2:b9:c9:c2:f9:01:a2:41:31:26:fb:60:08:
0c:ce:0c:3b:58:ae:6b:57:08:4b:fa:c5:bf:1e:61:
25:aa:ff:45:08:bf:ac:11:08:9b:98:28:05:d2:40:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:F6:53:35:E4:98:AE:C6:AC:64:AB:98:A2:24:76:51:7A:53:31
X509v3 Authority Key Identifier:
keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.14.0/23
Signature Algorithm: sha256WithRSAEncryption
20:5d:37:f0:a0:43:a1:38:0b:53:89:83:a3:7b:0f:ba:3e:1c:
24:be:e3:24:9f:6d:cc:56:47:60:c0:ad:21:a3:a3:1e:63:c6:
0c:ef:b9:d7:5e:12:1a:71:51:39:16:4e:40:bd:94:43:84:9c:
67:39:46:9b:7b:09:70:1b:99:4d:a8:48:e7:98:ff:46:cb:11:
e2:ca:b7:eb:bc:b8:48:81:84:15:ba:2b:35:28:9f:b4:5a:7d:
2d:3e:d1:47:51:48:57:cc:18:8b:77:cb:ac:6c:b6:01:f9:2e:
74:6c:2c:ef:4d:de:ed:de:c4:ee:f4:57:9e:f8:88:cd:76:9f:
83:cd:7c:9f:75:f5:d9:ae:90:27:23:d4:5e:9c:f8:d2:97:6f:
9d:fa:7e:fa:d2:1a:89:2d:f6:b3:49:c9:34:9c:3e:f2:38:7c:
b1:3b:0d:e4:93:20:fb:41:0f:46:97:01:d4:c7:a6:47:83:f8:
bd:cd:f4:8a:3d:38:91:4a:3c:1b:23:6d:8a:3a:41:cc:92:47:
d0:f4:0f:a1:4b:d4:db:46:37:04:6f:f2:93:d5:2c:f0:61:b4:
c6:27:ad:b2:e9:be:58:2c:4d:dd:7a:b8:d3:d4:85:d9:f1:80:
fb:42:6c:31:ed:15:cd:24:b7:70:7e:34:ce:18:08:3d:87:75:
d0:c7:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:51:29 2026 by rpki-client