
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa
File: F2CE31B608CA11F09E81487CC4F9AE02.roa (raw, json)
Hash identifier: 03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=
Subject key identifier: 1A:06:CA:4E:C6:D4:36:D3:9E:84:B5:3D:19:8B:AD:52:42:E4:42:67
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 026C
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa
Signing time: Sat 11 Apr 2026 02:34:09 +0000
ROA not before: Sat 11 Apr 2026 02:34:09 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137453
IP address blocks: 103.81.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Apr 11 02:34:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69d9b321-285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:ec:cc:03:0c:48:75:a1:bd:ac:49:7b:04:
49:b6:0c:f6:d8:fa:69:37:bc:df:c8:65:92:52:bc:
96:05:60:9d:ad:57:5f:56:e5:7a:26:ed:93:52:91:
b6:90:c0:55:c8:74:c1:e7:f5:ed:21:8b:53:64:bf:
23:2b:90:be:fc:92:a3:c4:a5:95:19:37:9d:20:eb:
b6:d5:4d:65:33:7e:44:89:a8:7c:e1:ba:84:3c:79:
31:0b:86:4f:f1:f5:47:19:75:e0:ee:c8:82:df:a2:
55:0e:ec:36:57:b5:ee:e3:5b:6e:90:b7:41:49:ed:
53:60:39:7b:e9:2d:9e:bf:9a:45:47:9e:d5:8e:98:
26:07:6b:c0:c2:dc:af:3e:82:22:88:27:72:09:34:
d3:11:1a:ea:18:d4:ae:aa:33:eb:a1:73:9c:c6:c7:
d5:5d:80:8d:ad:b8:15:95:8d:1e:9f:1d:d9:b4:7d:
4b:3c:17:d0:15:3d:53:b4:46:a8:19:e6:93:cb:a4:
e2:4d:e1:23:c9:3b:db:86:16:75:2d:bf:6d:5e:de:
91:99:2b:a4:f6:54:11:6d:a9:1f:9e:75:ad:6a:3e:
fa:c6:16:35:1d:ec:6a:ab:e6:2b:5b:64:cc:41:21:
48:43:16:b8:81:4f:48:d5:45:93:6e:f0:b7:a1:1e:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:CA:4E:C6:D4:36:D3:9E:84:B5:3D:19:8B:AD:52:42:E4:42:67
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.81.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:79:a7:03:31:71:cb:35:3f:56:35:0a:18:6f:2a:1c:8b:d2:
ff:f8:44:d2:19:74:fd:4e:93:ab:d6:44:c4:02:e3:9b:dc:21:
0b:b8:5d:d1:b9:e3:28:25:95:93:6e:84:53:b3:b0:c4:87:f6:
6f:12:69:83:08:c8:34:6d:05:1a:11:b2:94:01:08:ce:7d:d2:
93:cd:2e:10:b9:1b:5a:e4:3b:c2:4f:07:b7:e3:a8:07:6c:06:
c0:51:13:2d:86:e2:1c:7a:8a:4d:9f:6a:61:a9:d8:78:eb:8e:
3b:43:18:64:f4:72:e5:c2:87:9f:72:64:c1:d0:e3:53:fa:27:
ea:d6:66:ec:7e:f1:c4:9a:40:2c:07:65:50:a2:b0:0d:2c:e2:
0a:b6:44:8f:97:7c:5d:9e:da:07:ca:27:12:9d:4b:15:32:05:
25:aa:22:d4:57:1f:7c:e7:88:90:f7:9e:13:a8:92:74:a0:87:
1a:5d:62:07:40:2c:37:6b:0e:ef:5c:cd:25:84:f8:c6:24:49:
81:53:d0:44:6d:45:16:4a:39:b3:e1:53:cb:48:f2:79:24:6e:
d3:3e:59:ba:66:6f:33:82:75:4a:1a:66:8d:6c:d5:07:3b:69:
3d:fe:20:4d:d0:54:75:19:3e:79:9c:a8:cd:67:bd:e1:c2:2d:
d4:21:bc:76
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1
QzExQTFEOTcwHhcNMjYwNDExMDIzNDA5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ5YjMyMS0yODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaXszAMMSHWhvaxJewRJtgz22PppN7zfyGWSUryWBWCdrVdfVuV6Ju2TUpG2
kMBVyHTB5/XtIYtTZL8jK5C+/JKjxKWVGTedIOu21U1lM35Eiah84bqEPHkxC4ZP
8fVHGXXg7siC36JVDuw2V7Xu41tukLdBSe1TYDl76S2ev5pFR57VjpgmB2vAwtyv
PoIiiCdyCTTTERrqGNSuqjProXOcxsfVXYCNrbgVlY0enx3ZtH1LPBfQFT1TtEao
GeaTy6TiTeEjyTvbhhZ1Lb9tXt6RmSuk9lQRbakfnnWtaj76xhY1Hexqq+YrW2TM
QSFIQxa4gU9I1UWTbvC3oR7LxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBoGyk7G
1DbTnoS1PRmLrVJC5EJnMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD
M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDAzRTkvMTc2MTMyMzRBQzNBMTFFRDk3NDBCNjU1QzRGOUFFMDIvRjJDRTMxQjYw
OENBMTFGMDlFODE0ODdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1EcMA0GCSqGSIb3DQEBCwUAA4IBAQCMeacDMXHLNT9WNQoYbyoc
i9L/+ETSGXT9TpOr1kTEAuOb3CELuF3RueMoJZWTboRTs7DEh/ZvEmmDCMg0bQUa
EbKUAQjOfdKTzS4QuRta5DvCTwe346gHbAbAURMthuIceopNn2phqdh46447Qxhk
9HLlwoefcmTB0ONT+ifq1mbsfvHEmkAsB2VQorANLOIKtkSPl3xdntoHyicSnUsV
MgUlqiLUVx9854iQ954TqJJ0oIcaXWIHQCw3aw7vXM0lhPjGJEmBU9BEbUUWSjmz
4VPLSPJ5JG7TPlm6Zm8zgnVKGmaNbNUHO2k9/iBN0FR1GT55nKjNZ73hwi3UIbx2
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:11 2026 by rpki-client