
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa
File: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (raw, json)
Hash identifier: qglLYq7r5hz5k4fW3XvsL6XPXtp+KRbOwdrUaMlNod8=
Subject key identifier: A4:F6:49:4B:2A:41:B7:CA:68:65:C5:04:DA:6F:42:A3:3C:C6:7D:F9
Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial: 07F5
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:40:20 +0000
ROA not before: Sat 10 May 2025 21:39:51 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 103.91.164.0/23 maxlen: 23
103.91.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Validity
Not Before: May 10 21:39:51 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40984-9fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:91:a5:0b:67:16:e7:f7:9d:ea:9d:6c:23:
38:8c:e1:3a:8b:32:88:54:b2:3f:67:8a:4f:c3:28:
3b:f6:3e:d7:93:b4:e6:9f:42:39:4d:e9:b1:f7:77:
c7:f4:85:30:7f:d5:be:62:c2:06:e9:8c:ff:cf:36:
91:69:b8:83:6f:d3:d6:c0:71:17:1a:c8:2e:33:9f:
09:e7:84:81:96:79:a8:df:ed:1e:d3:65:6f:fb:14:
87:ca:49:60:ff:cd:c2:71:c4:44:6d:c9:2f:5d:51:
ba:8a:94:f1:bf:3d:41:fe:60:6c:be:ef:ca:09:a6:
35:e3:90:00:3a:2a:57:9f:a8:d7:ae:f2:5a:76:7a:
b5:cb:ae:62:c8:2a:4f:31:1c:75:56:c3:f8:08:46:
52:54:28:63:5c:06:70:c4:dc:e0:5e:75:43:25:69:
0b:ba:e9:0a:43:9f:09:88:88:92:8c:cf:56:e9:4b:
52:7f:dc:7d:cc:2e:e4:4a:64:b0:a9:38:fd:7e:3f:
25:bd:23:51:b9:d1:aa:d1:18:3d:04:9c:47:7a:d9:
eb:1c:81:17:54:22:4f:78:ff:59:8f:c3:88:d5:43:
75:e2:b4:88:d7:f5:9d:b5:55:e0:70:f0:c2:0c:20:
cc:f4:cc:3a:5e:26:f7:58:3b:7d:6b:b6:33:89:c4:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F6:49:4B:2A:41:B7:CA:68:65:C5:04:DA:6F:42:A3:3C:C6:7D:F9
X509v3 Authority Key Identifier:
keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.164.0/23
103.91.167.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bb:38:f9:06:70:29:7b:81:44:68:97:2c:04:e0:21:e6:2d:
27:ba:7a:35:17:12:0d:c3:e3:e1:1a:14:1c:95:7e:d5:7a:d2:
9a:f0:42:ae:2b:4e:39:86:01:ad:ee:a2:ee:80:0d:99:b4:98:
75:a2:4f:82:26:4b:0f:bf:45:f0:8e:18:d7:af:2e:3f:b3:70:
37:35:82:81:d3:a6:99:3f:db:f3:7f:86:3d:4a:bc:96:50:46:
17:97:96:0b:60:f6:20:67:db:5c:a0:bb:76:1c:2e:ae:34:87:
87:3f:26:70:72:06:2b:ff:6c:85:03:87:1d:43:ba:49:5e:d8:
1d:20:98:99:54:a7:99:2f:1f:92:8a:5c:5a:31:66:b9:da:b0:
8c:1a:02:5b:7e:f4:84:c2:64:2f:dc:a7:71:c4:cc:a5:30:a5:
9e:83:52:20:5f:d6:47:97:15:aa:e0:3a:bb:1f:4a:6a:63:ac:
73:ea:6b:54:43:a4:2b:29:11:62:f8:e0:af:e0:2d:62:a3:33:
96:01:ac:ad:67:53:a6:8a:54:0f:21:84:53:ec:31:fd:40:c8:
81:80:ff:04:42:e2:28:18:fc:40:d0:cf:86:4c:89:64:7b:79:
26:1c:eb:28:2e:b5:12:be:fb:9e:e6:04:f8:35:f9:a1:9c:27:
9e:92:97:d2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx
RjY0QzdCQUYwHhcNMjUwNTEwMjEzOTUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDk4NC05ZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+eRpQtnFuf3neqdbCM4jOE6izKIVLI/Z4pPwyg79j7Xk7Tmn0I5Temx93fH
9IUwf9W+YsIG6Yz/zzaRabiDb9PWwHEXGsguM58J54SBlnmo3+0e02Vv+xSHyklg
/83CccREbckvXVG6ipTxvz1B/mBsvu/KCaY145AAOipXn6jXrvJadnq1y65iyCpP
MRx1VsP4CEZSVChjXAZwxNzgXnVDJWkLuukKQ58JiIiSjM9W6UtSf9x9zC7kSmSw
qTj9fj8lvSNRudGq0Rg9BJxHetnrHIEXVCJPeP9Zj8OI1UN14rSI1/WdtVXgcPDC
DCDM9Mw6Xib3WDt9a7YzicRNEwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKT2SUsq
QbfKaGXFBNpvQqM8xn35MB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REJBRjEvOEZFN0E4QjgyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvNEFFN0E4RUFG
RTIzMTFFRUI3MUJCQjc2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ1ukAwQAZ1unMA0GCSqGSIb3DQEBCwUAA4IBAQAUuzj5BnApe4FE
aJcsBOAh5i0nuno1FxINw+PhGhQclX7VetKa8EKuK045hgGt7qLugA2ZtJh1ok+C
JksPv0XwjhjXry4/s3A3NYKB06aZP9vzf4Y9SryWUEYXl5YLYPYgZ9tcoLt2HC6u
NIeHPyZwcgYr/2yFA4cdQ7pJXtgdIJiZVKeZLx+SilxaMWa52rCMGgJbfvSEwmQv
3KdxxMylMKWeg1IgX9ZHlxWq4Dq7H0pqY6xz6mtUQ6QrKRFi+OCv4C1iozOWAayt
Z1OmilQPIYRT7DH9QMiBgP8EQuIoGPxA0M+GTIlke3kmHOsoLrUSvvue5gT4Nfmh
nCeekpfS
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:48 2026 by rpki-client