
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
File: C9763EB431D811EE89285A41C4F9AE02.roa (raw, json)
Hash identifier: 615JmX9cruG++rabOl7xOJVJY/bjLhdXzPxbybiBquw=
Subject key identifier: A6:CA:EB:F5:CA:8B:FD:92:67:E6:0E:63:36:3A:2B:A7:60:C8:86:7D
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 01E9
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:36:22 +0000
ROA not before: Fri 29 Aug 2025 04:22:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135404
IP address blocks: 103.154.22.0/23 maxlen: 23
2406:5140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: Aug 29 04:22:47 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3ec76-5417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:84:39:e5:2d:41:df:ac:0f:aa:a8:c3:37:
b9:b1:26:82:d0:4d:7d:1b:a8:bf:d9:b6:47:76:6c:
33:e4:04:a0:21:04:fe:c4:12:1e:93:f4:ac:07:c3:
7a:4e:4d:bc:5e:62:5e:d5:e0:28:9f:5c:f4:18:dd:
b3:f0:ed:77:b0:73:2d:d5:2d:26:06:39:d8:86:be:
55:ed:aa:bc:10:36:f1:27:9d:c7:28:dd:ae:b2:f5:
e1:db:a1:e7:2b:c7:c5:ed:82:fd:6c:1c:ba:76:ee:
53:0c:ac:46:58:c4:81:90:16:90:be:41:cd:91:6d:
2f:44:ce:b8:f1:59:11:df:ed:bc:f2:c4:5a:34:c1:
1e:30:e8:12:98:56:8a:a9:3d:2b:e9:02:44:db:01:
10:25:fe:b7:5b:28:a5:0c:a7:99:16:19:9e:10:3a:
0f:51:61:ea:d6:ec:2c:05:86:d4:02:6f:dd:0f:0e:
93:51:84:1c:96:05:5c:15:9a:98:2c:87:e1:2f:db:
9b:4a:7f:d4:aa:84:0c:58:ca:87:49:22:9e:17:58:
a6:d2:56:44:c3:ad:fc:5f:45:c3:93:a2:46:fa:c3:
01:b5:1c:57:9d:ff:a3:58:4d:b7:5f:a5:df:b1:e0:
b0:02:30:d7:86:41:39:8c:5b:f7:1c:d7:e6:32:b3:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:EB:F5:CA:8B:FD:92:67:E6:0E:63:36:3A:2B:A7:60:C8:86:7D
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.22.0/23
IPv6:
2406:5140::/32
Signature Algorithm: sha256WithRSAEncryption
75:75:95:f3:e8:a5:69:a9:ba:00:74:4b:6b:d6:5a:50:88:b1:
dd:9e:23:04:93:08:13:85:1d:09:1c:68:d4:c0:46:0d:01:60:
02:ea:25:17:75:60:2d:4c:c7:f6:9f:47:b0:53:2d:ed:ed:16:
04:8f:ed:85:0b:93:da:8c:35:20:af:06:c2:c6:2e:aa:52:73:
36:de:93:b1:c2:41:3f:ae:a3:86:b7:28:d0:b9:25:b3:c2:c6:
05:6b:57:4d:dd:7e:e3:29:d3:bd:e0:e0:57:20:0e:b7:b3:ee:
b0:30:c2:a3:08:f1:fa:fe:ea:c1:71:a9:65:a0:dc:14:99:37:
6b:f8:13:e5:64:62:07:03:c3:c6:7e:e7:48:50:55:8c:39:25:
8b:da:30:d5:2e:18:6c:1d:56:f3:8b:23:9e:0b:a7:3d:bd:59:
e9:ea:69:cd:42:b1:22:6c:c9:5a:43:d9:56:51:a3:0c:bf:76:
b6:43:b1:c4:f1:94:47:39:b2:bf:85:28:d2:99:1c:bf:ed:ab:
5e:ba:23:f1:17:43:0f:5e:02:04:6b:ff:7f:96:24:20:a5:ac:
cd:0d:e6:da:7a:7b:74:81:dc:0e:32:c7:37:23:e1:09:15:55:
7a:0a:0a:11:1a:29:f4:f2:e1:47:6c:b1:53:ac:9d:b3:6b:04:
de:a0:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:05 2026 by rpki-client