
$ rpki-client -vvf rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/DAC133B0C8EC11F08ED15548C4F9AE02.roa
File: DAC133B0C8EC11F08ED15548C4F9AE02.roa (raw, json)
Hash identifier: 1ew7qVLpB8TWdqlXh+YAjZXQOnaoMm4IqX92zh5/ghU=
Subject key identifier: 6F:50:C6:39:FA:EF:FF:D7:13:FC:F9:C4:8A:7A:86:BE:9A:B3:2D:CB
Certificate issuer: /CN=A91331AA/serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C
Certificate serial: 35
Authority key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/DAC133B0C8EC11F08ED15548C4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:59:37 +0000
ROA not before: Mon 24 Nov 2025 04:20:06 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 2764
IP address blocks: 203.12.115.0/24 maxlen: 24
203.34.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl
rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C
Validity
Not Before: Nov 24 04:20:06 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3d5c9-95a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:04:7a:1f:b0:8e:7b:97:60:ef:85:bf:52:
e9:81:1f:32:c4:0c:60:d5:c1:4e:ae:da:f6:c9:3d:
56:cd:7a:57:c6:a0:dc:82:04:66:bf:f1:ed:79:27:
05:4c:2e:db:b1:25:41:76:b9:12:f1:ae:f3:00:05:
b4:46:02:ab:8b:3c:ed:9c:91:2a:37:6a:dc:3c:4f:
a2:a3:92:90:34:5f:7f:95:b0:d0:33:78:37:cf:d0:
05:c9:9c:c8:a4:df:26:aa:1c:ac:2e:2b:df:b1:61:
8b:0f:4d:17:ba:35:b5:28:c7:5f:64:d3:68:24:71:
56:4a:69:40:e9:2d:80:76:78:5c:38:2e:84:0c:b7:
0f:38:2a:21:00:32:1a:d5:f8:de:72:a8:0d:8a:53:
bf:ce:58:89:83:3f:1b:70:e9:60:3a:8a:99:5e:71:
23:55:f9:75:cc:b9:10:1d:3f:c4:7e:31:a1:9e:76:
8e:73:9f:5e:18:51:4b:12:3b:0c:f3:ac:97:71:5f:
8a:42:bf:43:5f:63:26:22:82:40:1a:62:59:0a:61:
e6:71:6b:08:05:e3:e6:f0:94:de:5a:56:c4:61:a3:
e3:b8:ce:4b:ba:07:82:e1:d5:98:6e:5e:7c:e0:7d:
c2:63:ca:ab:52:bb:c7:d8:5b:27:94:da:39:a3:6d:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:50:C6:39:FA:EF:FF:D7:13:FC:F9:C4:8A:7A:86:BE:9A:B3:2D:CB
X509v3 Authority Key Identifier:
keyid:DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/DAC133B0C8EC11F08ED15548C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.12.115.0/24
203.34.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:59:32:08:a6:ec:b0:17:e2:20:7e:4b:18:7d:d7:3b:38:8e:
28:ae:07:fd:9e:df:46:99:c4:ff:45:40:55:b0:b2:68:cd:01:
14:5c:0e:4f:59:89:40:9f:82:2f:2c:e8:81:25:8b:95:08:de:
28:69:a2:de:b7:17:2e:9d:e1:17:39:81:f5:7e:a8:8c:2e:39:
4c:0c:61:79:8c:20:19:53:88:e2:df:b3:a8:96:03:26:15:06:
9a:2f:8d:3f:5e:b4:a4:f2:e2:6f:96:20:2e:73:a6:ff:4e:8b:
92:51:7a:f4:52:5e:30:81:ff:b3:33:4c:78:35:9f:6c:22:59:
39:9e:34:4d:a0:9c:e2:f0:42:04:9e:dd:08:97:0a:d9:aa:e5:
49:b3:a4:73:a0:b2:0b:e9:a1:89:02:4f:dc:13:3c:d2:a3:e3:
0b:6a:52:bf:b1:0c:75:c2:76:c7:d6:62:63:9c:9c:a4:0a:78:
7d:ac:3a:13:db:12:ea:bc:26:09:9a:cd:97:ac:d4:7e:cd:ba:
02:12:2d:14:0f:4b:c9:7a:ec:a5:01:9a:b0:62:2a:5f:25:48:
00:e1:e1:77:64:de:d0:bc:71:b8:0a:e6:ed:c5:d8:d8:33:04:
3f:18:85:27:1d:09:0a:d9:8c:10:2c:1b:eb:2a:c4:b5:31:03:
3b:2a:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:12:42 2026 by rpki-client