
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa
File: 99961F74315E11EC953A8215C4F9AE02.roa (raw, json)
Hash identifier: f53D5d+q3fUodPkmYKhBtis6mgmJc3a1K68eaX3leUg=
Subject key identifier: 69:C0:B6:D3:47:94:FE:1A:F3:8B:E4:1F:0D:D1:33:B8:BB:A3:F4:1C
Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial: 054F
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa
Signing time: Tue 03 Mar 2026 00:31:02 +0000
ROA not before: Tue 03 Mar 2026 00:31:02 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141709
IP address blocks: 103.162.127.0/24 maxlen: 24
103.180.50.0/24 maxlen: 24
2400:aea0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Validity
Not Before: Mar 3 00:31:02 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a62bc6-08be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:8e:55:a0:52:5f:20:2e:f5:aa:96:50:0f:
87:9b:b9:58:71:27:32:c4:d9:58:a8:ba:0c:2e:e1:
de:fd:3c:53:69:15:6a:96:34:67:0e:ef:f2:19:46:
66:b8:65:8f:24:b6:33:a2:2b:92:47:f5:3e:a5:52:
85:15:29:51:ee:66:35:1d:dc:94:f4:a1:44:82:51:
d9:bf:7c:fa:5a:9e:eb:20:22:5b:70:57:d1:25:63:
6c:52:a4:9c:34:cd:9d:a9:23:dd:a8:78:b4:f2:64:
aa:9e:9a:fe:9b:8a:9a:e9:f9:dc:a4:3e:b3:8c:0a:
d9:2e:7f:51:03:9e:d0:ac:7e:67:43:40:26:08:e6:
88:67:1f:e8:f3:4a:15:d6:7c:5a:d0:05:44:65:1f:
08:b4:16:ed:60:5e:bf:1a:61:eb:8b:06:ff:ce:7d:
c2:95:70:9e:06:cb:d9:07:f3:f2:64:a0:79:a5:4e:
bc:c0:16:40:df:08:27:c6:32:08:0a:11:21:19:1a:
33:76:c2:7d:ee:86:d6:46:55:dc:c7:35:40:d9:39:
36:fa:55:ff:cb:c4:2b:ef:6c:6e:38:24:aa:7d:c3:
ab:3b:df:ab:d9:ad:ee:d2:52:75:4f:55:c3:d9:d8:
f8:43:10:69:09:03:23:86:a2:77:39:d8:72:e7:86:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:B6:D3:47:94:FE:1A:F3:8B:E4:1F:0D:D1:33:B8:BB:A3:F4:1C
X509v3 Authority Key Identifier:
keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.127.0/24
103.180.50.0/24
IPv6:
2400:aea0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:4d:0a:de:30:63:21:c1:d2:4f:47:0e:68:3b:d9:f0:5a:46:
a8:8c:7d:f2:87:dd:f7:fe:aa:ab:96:21:df:6b:bc:7c:36:af:
20:01:5b:3f:f3:d6:98:2b:9a:56:e6:60:10:06:61:35:d3:1c:
00:f5:fd:16:e6:a5:36:b4:53:c7:41:17:5e:62:80:b0:a8:fc:
dc:1d:a6:b5:ee:60:7d:7a:ab:87:5b:00:fc:97:47:57:e3:97:
de:e7:23:45:c4:7b:31:83:b1:9f:15:df:36:bb:45:49:aa:e8:
76:77:d5:9a:93:1b:23:0b:a4:2f:9a:dd:86:e9:bc:72:41:fc:
54:30:63:64:71:ae:97:3b:8b:b2:6a:c0:25:ed:a8:e9:0c:54:
c8:92:93:d4:5b:56:31:b7:1c:d2:d5:c4:aa:f0:5b:b9:eb:04:
3b:22:9c:f9:9b:2e:41:82:18:0d:75:c7:15:10:71:80:e1:d1:
a9:87:87:5e:6d:3e:26:4b:29:60:5d:d5:cb:0f:97:36:ae:ae:
be:31:00:4e:fb:85:fb:f4:21:1c:2c:20:42:c1:91:4d:4f:67:
d2:90:21:72:87:fe:e6:d3:a5:70:1a:83:98:91:90:16:28:e6:
73:0b:98:78:74:0a:5e:ad:09:da:b7:16:e3:54:e4:2e:54:7e:
b6:43:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:10 2026 by rpki-client