
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E8137EDEA29011EAA7A47878C4F9AE02.roa
File: E8137EDEA29011EAA7A47878C4F9AE02.roa (raw, json)
Hash identifier: db/oDMvRYlv9hm/34dDs3pJLSn6e8R5e4bTUyYz0ShE=
Subject key identifier: EC:43:27:1A:7A:F2:C6:4B:82:08:21:F6:E9:BC:86:68:38:0B:7A:DE
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0A99
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E8137EDEA29011EAA7A47878C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:47:56 +0000
ROA not before: Wed 12 Feb 2025 20:58:31 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 213347
IP address blocks: 103.207.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2713 (0xa99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Validity
Not Before: Feb 12 20:58:31 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a4519c-20e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:29:9e:89:ad:15:15:d5:d4:ad:62:e3:9a:
01:0a:be:0f:c9:2f:1a:7c:56:8a:46:3f:40:a6:5d:
4d:3d:7a:b2:10:95:01:e1:8a:8d:c8:f3:53:a7:9f:
31:df:a1:eb:df:37:40:d9:4e:6c:32:73:43:b4:18:
6f:bc:34:c8:4d:1b:b4:7c:31:12:13:aa:f5:d2:d5:
6a:aa:8d:17:65:ef:cf:47:5e:b7:e4:f8:df:0d:d2:
02:68:1a:e1:fe:0a:22:a0:55:dd:84:1a:08:d4:c0:
9b:3a:d5:52:4c:7d:72:50:aa:3a:6f:3b:b0:1e:af:
a2:8a:26:d7:11:e4:69:9a:cd:42:e0:9f:1f:03:ab:
a1:01:35:0f:8b:0e:3d:ba:b6:f9:6c:94:c4:74:9a:
56:a6:89:b9:63:b4:ce:6a:27:5b:0c:6d:0f:1f:03:
d3:21:00:b4:2c:ac:63:c1:56:51:fa:7b:5b:bc:27:
2f:ca:93:d5:ec:f9:d8:0f:d5:d0:e1:a1:c1:1a:08:
04:05:9e:d5:4f:00:9a:13:aa:21:ca:3b:8c:eb:1d:
61:e7:04:bd:dc:4a:a7:6b:da:72:7d:c9:08:14:23:
cd:ae:3d:5b:b8:d7:ac:4a:d9:35:ae:e9:67:0e:74:
91:7e:51:b1:e9:e9:e6:60:f0:3b:9e:7c:26:1c:f9:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:27:1A:7A:F2:C6:4B:82:08:21:F6:E9:BC:86:68:38:0B:7A:DE
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E8137EDEA29011EAA7A47878C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8c:d6:82:3c:91:9c:ca:77:33:39:16:51:0a:87:b2:0f:a6:
eb:88:b4:a8:d8:51:43:b8:1d:6d:ea:29:de:21:75:59:c3:d5:
a8:b8:13:06:13:7a:89:8a:0b:35:e9:41:e4:1a:10:ff:bc:4e:
44:46:d5:69:e2:9b:ba:47:19:89:f3:e8:5c:d5:ae:f6:f4:15:
a6:b1:c0:62:56:4a:cc:72:19:90:40:02:38:d6:20:37:3c:db:
03:57:a0:03:65:43:13:d7:04:ea:3c:7a:b3:4e:ea:c3:0f:68:
7e:96:0f:29:51:da:03:62:ab:37:2e:24:77:97:08:66:e6:3c:
50:43:d1:5c:3f:99:61:e6:1d:b2:d7:05:ba:2c:dd:f3:7e:5b:
ed:be:f5:30:b6:96:30:bc:e3:06:2f:06:a1:df:5b:10:c5:a3:
a7:bb:29:97:79:2d:07:2f:c7:0b:be:a5:db:71:04:48:fc:f1:
61:92:cd:17:6b:3e:84:70:8a:8e:d4:cb:35:03:1a:d1:41:c5:
6c:6a:37:d5:17:b2:26:c1:2b:8e:d8:54:ba:fd:76:fb:97:8c:
8d:a9:b5:43:7c:94:9c:f8:70:38:74:c6:63:ea:c7:67:f7:33:
43:73:c5:ec:10:e2:d6:35:d5:78:e8:9d:9b:39:b1:2f:2e:bf:
d3:f1:3b:10
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw
MjgwN0EwMjYwHhcNMjUwMjEyMjA1ODMxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTE5Yy0yMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38cpnomtFRXV1K1i45oBCr4PyS8afFaKRj9Apl1NPXqyEJUB4YqNyPNTp58x
36Hr3zdA2U5sMnNDtBhvvDTITRu0fDESE6r10tVqqo0XZe/PR1635PjfDdICaBrh
/goioFXdhBoI1MCbOtVSTH1yUKo6bzuwHq+iiibXEeRpms1C4J8fA6uhATUPiw49
urb5bJTEdJpWpom5Y7TOaidbDG0PHwPTIQC0LKxjwVZR+ntbvCcvypPV7PnYD9XQ
4aHBGggEBZ7VTwCaE6ohyjuM6x1h5wS93Eqna9pyfckIFCPNrj1buNesStk1ruln
DnSRflGx6enmYPA7nnwmHPnP4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOxDJxp6
8sZLgggh9um8hmg4C3reMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz
RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTdFNDUvMDZDODU2M0M4M0Q5MTFFQUEzMTI0RjVDQzRGOUFFMDIvRTgxMzdFREVB
MjkwMTFFQUE3QTQ3ODc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ89GMA0GCSqGSIb3DQEBCwUAA4IBAQB7jNaCPJGcynczORZRCoey
D6briLSo2FFDuB1t6ineIXVZw9WouBMGE3qJigs16UHkGhD/vE5ERtVp4pu6RxmJ
8+hc1a729BWmscBiVkrMchmQQAI41iA3PNsDV6ADZUMT1wTqPHqzTurDD2h+lg8p
UdoDYqs3LiR3lwhm5jxQQ9FcP5lh5h2y1wW6LN3zflvtvvUwtpYwvOMGLwah31sQ
xaOnuymXeS0HL8cLvqXbcQRI/PFhks0Xaz6EcIqO1Ms1AxrRQcVsajfVF7ImwSuO
2FS6/Xb7l4yNqbVDfJSc+HA4dMZj6sdn9zNDc8XsEOLWNdV46J2bObEvLr/T8TsQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:50:43 2026 by rpki-client