
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
File: D40271B608CA11F080AEDB7BC4F9AE02.roa (raw, json)
Hash identifier: qY2oWQ6O24uLiBQ0TycUS4IgcjTJHFLS3QInlmGLA34=
Subject key identifier: 9B:6D:D6:71:38:D9:6A:61:7E:72:99:BC:8D:D5:D3:98:B3:F3:6F:16
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 024E
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:27:04 +0000
ROA not before: Mon 24 Mar 2025 16:12:48 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 150745
IP address blocks: 103.81.29.0/24 maxlen: 24
2001:df1:e940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Mar 24 16:12:48 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3ea48-11ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:f1:f0:7a:7d:58:1e:b5:53:24:6f:4d:f3:
9c:6b:70:7f:da:2e:6a:cf:cb:79:d0:75:28:9d:d0:
61:d0:e1:e4:bf:15:d5:f1:fd:b6:3f:60:84:98:fb:
89:69:b3:8d:2d:17:66:b0:2b:1b:89:36:06:7c:84:
11:2d:f3:b7:f9:5f:0f:48:b6:22:4f:76:fb:3c:28:
be:c0:a6:b2:4f:0a:4d:03:25:0e:e1:13:58:2f:86:
70:41:ed:7d:7d:84:1c:8a:a6:ad:dd:31:46:21:00:
c9:eb:da:25:b2:50:df:6f:2a:89:3a:2b:e6:5f:b9:
c6:a6:68:9e:ac:ae:4d:6f:71:e7:db:29:c2:7e:31:
05:7c:fa:36:11:0b:7e:5e:7c:89:0e:86:a3:90:5a:
29:3e:60:1d:65:6f:cf:45:2d:6f:3e:a1:3d:b5:17:
c7:d9:c2:05:43:0c:14:3a:96:a8:24:78:a2:ae:02:
6e:8c:bf:91:78:2b:db:9a:9c:48:21:8e:0c:f4:85:
c2:e1:c1:f5:4a:42:89:7d:db:bc:bf:a2:d3:5e:f2:
5c:af:2b:c6:37:ee:80:45:84:8e:af:41:51:68:21:
71:d4:35:58:6b:14:e7:6c:fe:54:29:77:94:93:25:
75:e2:78:8e:55:ae:9b:49:43:8f:39:5f:ee:04:d6:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:D6:71:38:D9:6A:61:7E:72:99:BC:8D:D5:D3:98:B3:F3:6F:16
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.81.29.0/24
IPv6:
2001:df1:e940::/48
Signature Algorithm: sha256WithRSAEncryption
11:f8:41:8e:24:4b:aa:1f:ea:88:f7:7b:38:c9:11:91:26:f6:
91:02:5c:86:34:7d:1e:67:4e:68:82:e2:92:f0:6d:af:ab:3a:
30:f1:63:70:27:72:01:60:48:14:19:38:84:6e:bd:3f:eb:fb:
15:3f:a4:76:c6:c7:14:f9:6c:cf:b3:f9:81:ba:56:54:f7:0f:
43:16:36:df:59:ae:51:b0:42:44:6f:f4:3d:41:41:41:9c:df:
8d:5e:da:04:3f:82:e3:e4:11:e1:91:ef:71:5d:e1:6c:76:a1:
c1:35:28:a2:09:04:2d:67:86:ac:9b:48:73:37:10:1a:fa:47:
44:17:4f:20:8c:cb:30:3d:64:8f:61:27:cd:7b:53:60:d9:ee:
9a:5e:7d:c4:52:fd:75:3b:0d:3f:26:5c:19:d9:a6:52:3e:d6:
29:28:bf:6a:b1:40:35:f6:33:2c:51:65:45:bb:b0:66:88:8d:
87:6b:f4:a4:6c:74:0a:9a:9b:56:57:38:01:48:a5:e9:00:aa:
d1:75:33:a3:dd:79:fc:e2:d0:a2:c9:fd:0e:ad:8a:a6:ae:72:
31:76:0a:2b:94:10:3f:9f:70:e4:27:4f:c2:44:87:90:73:49:
7a:7e:c7:72:9f:49:39:b8:2a:e9:f6:72:54:16:5a:dd:35:c7:
38:8b:9b:1f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1
QzExQTFEOTcwHhcNMjUwMzI0MTYxMjQ4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWE0OC0xMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquDx8Hp9WB61UyRvTfOca3B/2i5qz8t50HUondBh0OHkvxXV8f22P2CEmPuJ
abONLRdmsCsbiTYGfIQRLfO3+V8PSLYiT3b7PCi+wKayTwpNAyUO4RNYL4ZwQe19
fYQciqat3TFGIQDJ69olslDfbyqJOivmX7nGpmierK5Nb3Hn2ynCfjEFfPo2EQt+
XnyJDoajkFopPmAdZW/PRS1vPqE9tRfH2cIFQwwUOpaoJHiirgJujL+ReCvbmpxI
IY4M9IXC4cH1SkKJfdu8v6LTXvJcryvGN+6ARYSOr0FRaCFx1DVYaxTnbP5UKXeU
kyV14niOVa6bSUOPOV/uBNbt0wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJtt1nE4
2WphfnKZvI3V05iz828WMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD
M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDAzRTkvMTc2MTMyMzRBQzNBMTFFRDk3NDBCNjU1QzRGOUFFMDIvRDQwMjcxQjYw
OENBMTFGMDgwQUVEQjdCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ1EdMA8EAgACMAkDBwAgAQ3x6UAwDQYJKoZIhvcNAQELBQADggEB
ABH4QY4kS6of6oj3ezjJEZEm9pECXIY0fR5nTmiC4pLwba+rOjDxY3AncgFgSBQZ
OIRuvT/r+xU/pHbGxxT5bM+z+YG6VlT3D0MWNt9ZrlGwQkRv9D1BQUGc341e2gQ/
guPkEeGR73Fd4Wx2ocE1KKIJBC1nhqybSHM3EBr6R0QXTyCMyzA9ZI9hJ817U2DZ
7ppefcRS/XU7DT8mXBnZplI+1ikov2qxQDX2MyxRZUW7sGaIjYdr9KRsdAqam1ZX
OAFIpekAqtF1M6Pdefzi0KLJ/Q6tiqaucjF2CiuUED+fcOQnT8JEh5BzSXp+x3Kf
STm4Kun2clQWWt01xziLmx8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:18 2026 by rpki-client