
$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa
File: F276575AA81411EFACD1214BC4F9AE02.roa (raw, json)
Hash identifier: gOzuZuHt13/+CPeSVRF/LcUWEvkvTc92dX/tHfFEGBs=
Subject key identifier: AD:6D:F7:28:4C:91:FD:A3:30:D3:7F:C3:10:0F:E0:0E:77:52:7C:73
Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial: 0210
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:31:45 +0000
ROA not before: Fri 13 Jun 2025 03:11:13 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151358
IP address blocks: 103.117.116.0/24 maxlen: 24
103.210.226.0/23 maxlen: 24
2401:4a0::/32 maxlen: 32
2401:4a0:1::/48 maxlen: 48
2401:4a0:2::/48 maxlen: 48
2401:4a0:a::/48 maxlen: 48
2401:4a0:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Validity
Not Before: Jun 13 03:11:13 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3eb61-467f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:03:eb:56:32:47:d0:7f:02:65:99:ec:24:
5a:81:03:86:5a:40:8e:ca:4c:20:b9:8d:08:0e:ee:
c4:e7:cc:85:25:a2:32:d4:4f:c2:2e:97:6b:9c:6a:
9d:e9:c1:4e:6b:f6:7a:02:cb:da:37:47:e4:ea:5c:
e8:26:0e:50:b9:0e:2d:85:a9:3a:53:8c:c0:0f:dc:
51:36:a2:ec:f2:33:55:69:47:4d:1a:4f:20:12:0b:
57:b1:ff:1b:59:d7:c0:ec:d1:07:fa:9d:04:f9:ca:
6f:cf:5c:68:9c:8e:e4:91:d5:e6:c0:8d:4f:63:1d:
5f:47:04:d4:36:73:46:62:db:9b:25:7d:10:92:b3:
37:89:92:58:12:a9:cf:0f:d9:ee:7b:e3:d6:a0:ae:
8a:74:97:c1:dd:34:0f:63:4c:b0:03:87:d3:f7:f8:
f4:af:7d:8b:e4:ec:7b:cd:3c:e6:45:86:68:81:b4:
fa:86:92:f7:dd:e2:46:fd:e6:37:b4:c7:63:50:fa:
38:51:d4:c0:b8:8a:29:a4:f9:78:43:c3:5b:48:b9:
9b:1e:b4:70:28:7a:dd:96:37:ef:a6:e4:b4:62:60:
24:ee:d4:54:45:51:c3:67:84:be:af:d3:75:e8:11:
df:cd:34:76:1a:e0:02:7f:c5:33:cf:36:b0:16:e6:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6D:F7:28:4C:91:FD:A3:30:D3:7F:C3:10:0F:E0:0E:77:52:7C:73
X509v3 Authority Key Identifier:
keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.116.0/24
103.210.226.0/23
IPv6:
2401:4a0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:86:d4:34:14:8d:cb:1f:08:ba:e9:ce:5e:f4:d1:9c:9e:93:
37:92:25:7c:c7:d1:f8:da:3c:92:14:ef:0a:96:ea:74:63:ed:
fd:e5:d1:9d:23:96:17:50:61:c8:84:2f:95:45:c7:83:b1:10:
0f:26:03:b6:e5:f0:04:86:77:22:1a:e7:68:57:bd:75:8d:ce:
bd:84:b6:1b:f6:e7:41:33:22:92:82:ef:16:d2:2e:ca:68:c9:
f0:2e:f5:09:45:e6:77:aa:78:98:8b:24:96:d0:4a:40:0b:5d:
3c:ae:22:a0:3e:fd:a5:27:73:b9:59:f3:a4:af:86:7d:0a:0f:
8a:40:ae:37:d2:f2:df:68:8e:14:93:1f:93:97:c4:d7:49:e8:
3e:61:6c:fd:74:7b:ea:c4:f5:9c:85:a4:dc:d1:bd:8a:2e:a7:
87:c6:7c:14:7a:7e:7e:88:99:13:ea:52:65:2e:19:87:30:2d:
2a:c5:b3:10:45:0b:d5:db:32:19:43:de:f8:6c:5e:67:4b:55:
96:00:f0:b9:c9:b8:1d:2c:29:06:de:bb:46:f1:94:be:0e:1c:
1d:cd:e0:07:02:33:23:95:12:fe:08:db:fc:ff:f7:4f:12:1a:
9b:84:2d:cd:c1:5f:a7:03:c8:7e:ce:17:79:a8:7b:58:0c:ac:
2a:f7:35:6c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4
MkU2RkVEREYwHhcNMjUwNjEzMDMxMTEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWI2MS00NjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3AUD61YyR9B/AmWZ7CRagQOGWkCOykwguY0IDu7E58yFJaIy1E/CLpdrnGqd
6cFOa/Z6AsvaN0fk6lzoJg5QuQ4thak6U4zAD9xRNqLs8jNVaUdNGk8gEgtXsf8b
WdfA7NEH+p0E+cpvz1xonI7kkdXmwI1PYx1fRwTUNnNGYtubJX0QkrM3iZJYEqnP
D9nue+PWoK6KdJfB3TQPY0ywA4fT9/j0r32L5Ox7zTzmRYZogbT6hpL33eJG/eY3
tMdjUPo4UdTAuIoppPl4Q8NbSLmbHrRwKHrdljfvpuS0YmAk7tRURVHDZ4S+r9N1
6BHfzTR2GuACf8UzzzawFuZ/NwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFK1t9yhM
kf2jMNN/wxAP4A53UnxzMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF
Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDMyRjIvNDIxRTA1RjJGRUNEMTFFREFGODA3ODUyQzRGOUFFMDIvRjI3NjU3NUFB
ODE0MTFFRkFDRDEyMTRCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQAZ3V0AwQBZ9LiMA0EAgACMAcDBQAkAQSgMA0GCSqGSIb3DQEBCwUA
A4IBAQCwhtQ0FI3LHwi66c5e9NGcnpM3kiV8x9H42jySFO8Klup0Y+395dGdI5YX
UGHIhC+VRceDsRAPJgO25fAEhnciGudoV711jc69hLYb9udBMyKSgu8W0i7KaMnw
LvUJReZ3qniYiySW0EpAC108riKgPv2lJ3O5WfOkr4Z9Cg+KQK430vLfaI4Ukx+T
l8TXSeg+YWz9dHvqxPWchaTc0b2KLqeHxnwUen5+iJkT6lJlLhmHMC0qxbMQRQvV
2zIZQ974bF5nS1WWAPC5ybgdLCkG3rtG8ZS+DhwdzeAHAjMjlRL+CNv8//dPEhqb
hC3NwV+nA8h+zhd5qHtYDKwq9zVs
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:52 2026 by rpki-client