
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa
File: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (raw, json)
Hash identifier: NSdNu+vXnYcTSniUQqnt8p+QBPXnXEprmzukCezOx0U=
Subject key identifier: E0:71:67:E9:00:57:55:34:0A:F5:8A:B1:BA:2E:D2:43:5A:9C:99:34
Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial: 018A
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:16:06 +0000
ROA not before: Thu 03 Jul 2025 05:43:19 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 401276
IP address blocks: 103.230.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Validity
Not Before: Jul 3 05:43:19 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59ba6-ac88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:51:d1:13:66:16:7c:5a:f2:7d:9e:48:a4:
89:b8:7c:18:52:5b:a1:e6:e8:93:5d:a1:3b:b7:87:
6f:ac:61:31:70:58:8c:bd:bd:40:58:9e:66:d3:1a:
eb:29:bb:9b:c8:58:c6:4b:ae:ca:81:f2:cc:fb:d3:
9a:77:f6:6d:d6:1d:3d:32:b8:2a:60:3b:f9:28:4f:
c3:53:be:db:81:d8:77:7e:ef:b6:d1:fe:6c:38:33:
97:bb:f5:0d:0b:2a:89:b6:34:2d:33:82:dd:b3:21:
29:ea:12:66:27:87:ec:38:47:ea:d0:dd:14:17:9e:
b4:c3:3a:ba:0e:6d:5c:a4:4d:2b:60:8e:15:c9:90:
e9:23:a8:a4:b5:ae:17:04:09:c2:50:b9:38:0c:fa:
ca:e5:2c:b4:fd:ec:07:32:c4:ea:09:c5:2b:e4:cf:
3b:b9:e7:17:19:9b:8c:c7:01:e5:5a:58:63:01:30:
7a:22:c3:88:cb:d3:35:64:83:96:4b:1c:c3:fd:e3:
dc:2e:99:0e:7c:bf:68:0d:77:90:b5:a1:86:ad:af:
ce:34:ba:38:f7:02:b0:42:04:a1:a0:13:ae:28:1a:
ad:0f:c3:c5:08:14:2d:4e:37:f1:5f:1a:33:86:b9:
56:01:f4:17:12:c8:82:ff:d7:d7:b5:b6:99:6f:0d:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:67:E9:00:57:55:34:0A:F5:8A:B1:BA:2E:D2:43:5A:9C:99:34
X509v3 Authority Key Identifier:
keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.230.93.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3f:21:7e:9c:16:5a:01:3b:3f:e6:52:2c:91:fa:66:a7:c8:
4f:3b:d8:45:73:b0:24:c8:dc:e7:09:17:3f:2e:aa:c6:c3:fe:
70:3c:05:42:4e:88:d0:fc:31:01:bd:e9:90:4c:68:cc:c5:31:
2b:fe:f4:b4:a5:f3:93:94:96:79:7d:58:9b:81:a9:1d:2c:29:
7c:ae:e8:8f:15:18:20:f2:4d:00:80:18:8a:50:79:3e:d0:fd:
fe:46:8a:02:d1:e5:38:c1:81:75:a7:ca:92:0e:a2:61:d3:6a:
d7:e2:70:83:34:99:9b:ab:29:e8:43:c1:c9:f3:45:59:20:0d:
9f:e8:83:63:26:93:85:1c:28:e9:b5:c2:ab:cd:46:fe:aa:a7:
79:1b:e7:0c:91:48:8e:cb:40:08:06:6b:ba:ed:3a:e4:7c:f2:
b0:18:20:91:c7:03:1c:d9:17:27:0b:90:cd:d6:36:6d:5a:28:
b1:ee:b3:b9:44:10:6d:c7:3b:f5:ce:0e:07:ff:34:31:ba:27:
3d:2d:ef:24:16:3f:0f:ee:0f:12:34:4c:7d:aa:e2:aa:d6:d1:
fa:88:86:7b:a2:8c:d0:01:2d:25:dc:79:7a:81:ca:b5:6a:54:
9d:cd:10:a6:19:02:23:c7:b2:07:52:8b:77:14:05:43:06:fa:
fb:86:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:04 2026 by rpki-client