
$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/931A51C07F5811EE82ECE456C4F9AE02.roa
File: 931A51C07F5811EE82ECE456C4F9AE02.roa (raw, json)
Hash identifier: iqRn8MuwHOm1OeP7OiaBzMQDUZroez3UjhhvxuLDGhc=
Subject key identifier: 7E:9C:CA:5E:E6:6D:A6:92:E6:FC:01:0C:7D:FF:2E:8B:AA:FC:BA:4A
Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Certificate serial: 0421
Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/931A51C07F5811EE82ECE456C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:50:55 +0000
ROA not before: Fri 17 Oct 2025 03:06:24 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140994
IP address blocks: 103.154.154.0/23 maxlen: 24
2401:4320::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl
rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Validity
Not Before: Oct 17 03:06:24 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4362f-41f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:6b:f1:49:a2:3f:f9:dc:77:9c:f3:f9:f9:
45:aa:fd:61:6c:3f:f3:7c:73:0c:a6:db:06:32:1b:
62:17:49:ae:2d:98:ba:5f:c3:b5:63:3c:d5:6f:c2:
17:b7:cd:85:7b:46:c4:3f:72:92:6f:ba:0d:6c:98:
35:fe:55:1d:10:d4:a0:bf:5e:c1:6e:09:b8:93:d5:
0e:8e:93:01:5b:2f:3b:29:11:2f:d7:33:8f:01:c0:
77:6a:cc:cb:38:2f:ba:83:d1:97:da:e2:1e:da:3d:
e0:bf:75:0b:58:e6:ff:26:0a:97:0a:a0:35:53:4c:
b6:6b:0b:6b:8f:b9:a0:75:2f:4e:ce:c5:95:ff:38:
bb:c4:1f:6a:ad:ca:90:a8:b0:66:22:af:1b:2e:cd:
fe:aa:43:06:ab:b5:ce:86:d7:50:7a:28:44:41:78:
0b:e9:83:bb:e7:a7:42:55:b7:ef:06:85:c2:b1:35:
5a:ef:6c:0a:c7:fe:08:7e:2e:91:a0:b1:53:b9:33:
9b:23:a9:aa:4d:9b:8a:44:29:dd:07:ad:13:7e:34:
39:25:5b:05:11:bd:8b:70:e6:38:49:f3:90:c5:19:
d3:f5:23:0e:1c:be:74:0d:46:5d:40:a8:d2:14:39:
03:db:da:c2:14:ae:2e:f6:a7:4a:83:1d:43:d6:bf:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:CA:5E:E6:6D:A6:92:E6:FC:01:0C:7D:FF:2E:8B:AA:FC:BA:4A
X509v3 Authority Key Identifier:
keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/931A51C07F5811EE82ECE456C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.154.0/23
IPv6:
2401:4320::/32
Signature Algorithm: sha256WithRSAEncryption
47:a4:e0:49:dc:e8:b1:9b:14:d9:b7:3f:90:91:37:2c:7c:4f:
29:92:d9:b7:26:0d:ef:37:dc:cc:19:d2:f7:e0:1d:5b:7d:1e:
62:0c:3a:9f:40:6d:da:dd:ac:5f:66:e2:23:b6:32:8f:15:e7:
9f:a1:ec:41:03:dd:01:3f:c8:b6:93:26:00:11:43:a5:2d:ee:
3a:7a:b6:88:23:68:6a:9f:ca:14:97:b2:90:72:b9:8c:0f:cc:
cd:02:18:cb:e4:18:89:04:68:c1:c9:e6:bf:79:8b:9e:c7:9d:
c1:80:5c:78:d3:9e:fb:09:61:72:2a:12:fc:82:d5:ca:cb:d0:
7c:9e:63:52:46:36:d4:18:c5:45:bb:da:e8:5a:a7:a6:1a:be:
fb:be:b6:fb:4a:0d:9b:c5:fb:38:7c:d1:01:41:b6:47:36:d1:
ce:49:f7:df:62:bf:8d:7c:83:b5:3d:2b:cb:3f:52:fe:af:dc:
70:a8:c2:a5:02:d9:2a:3d:a3:cb:17:5d:07:bd:2e:fc:af:a7:
0e:b6:78:b5:02:43:f8:f0:bc:8d:d7:d3:cd:fa:f5:d6:0d:bb:
20:97:ca:83:89:96:c1:87:b6:c7:8f:55:ad:1b:d6:ef:a3:60:
7e:97:91:1d:10:d9:3b:fa:b0:a1:df:54:fa:55:83:dd:8c:a6:
c2:10:78:02
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3
QTk1QjJGNzQwHhcNMjUxMDE3MDMwNjI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzYyZi00MWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApb5r8UmiP/ncd5zz+flFqv1hbD/zfHMMptsGMhtiF0muLZi6X8O1YzzVb8IX
t82Fe0bEP3KSb7oNbJg1/lUdENSgv17Bbgm4k9UOjpMBWy87KREv1zOPAcB3aszL
OC+6g9GX2uIe2j3gv3ULWOb/JgqXCqA1U0y2awtrj7mgdS9OzsWV/zi7xB9qrcqQ
qLBmIq8bLs3+qkMGq7XOhtdQeihEQXgL6YO756dCVbfvBoXCsTVa72wKx/4Ifi6R
oLFTuTObI6mqTZuKRCndB60TfjQ5JVsFEb2LcOY4SfOQxRnT9SMOHL50DUZdQKjS
FDkD29rCFK4u9qdKgx1D1r9NpwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH6cyl7m
baaS5vwBDH3/Louq/LpKMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2
OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTAzQ0YvMTdENkU0QzJBNjhBMTFFQ0E5QTYzNTUxQzRGOUFFMDIvOTMxQTUxQzA3
RjU4MTFFRTgyRUNFNDU2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ5qaMA0EAgACMAcDBQAkAUMgMA0GCSqGSIb3DQEBCwUAA4IBAQBH
pOBJ3OixmxTZtz+QkTcsfE8pktm3Jg3vN9zMGdL34B1bfR5iDDqfQG3a3axfZuIj
tjKPFeefoexBA90BP8i2kyYAEUOlLe46eraII2hqn8oUl7KQcrmMD8zNAhjL5BiJ
BGjByea/eYuex53BgFx40577CWFyKhL8gtXKy9B8nmNSRjbUGMVFu9roWqemGr77
vrb7Sg2bxfs4fNEBQbZHNtHOSfffYr+NfIO1PSvLP1L+r9xwqMKlAtkqPaPLF10H
vS78r6cOtni1AkP48LyN19PN+vXWDbsgl8qDiZbBh7bHj1WtG9bvo2B+l5EdENk7
+rCh31T6VYPdjKbCEHgC
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:12 2026 by rpki-client