
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
File: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (raw, json)
Hash identifier: 9lm6dFk3tQBYwYD/Z0ra4otIsDincdAqae6fuyCeHUg=
Subject key identifier: 74:76:80:67:C9:9A:8A:4A:92:D9:AD:4A:0B:6B:50:89:F1:D3:18:0F
Certificate issuer: /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial: 0386
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:31:17 +0000
ROA not before: Wed 23 Apr 2025 01:27:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137537
IP address blocks: 103.112.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902 (0x386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Validity
Not Before: Apr 23 01:27:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a477e5-cbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:9e:0e:09:80:c9:96:3f:bf:2e:70:54:69:
b9:e6:71:d7:b4:cc:25:4d:11:68:70:a4:43:28:18:
5c:3a:93:dc:f4:d1:01:41:ef:12:90:a7:3e:ce:af:
d9:41:8e:7e:b7:8b:ae:47:22:fc:84:68:1c:c9:12:
fb:a1:28:ba:22:ec:0a:18:67:85:70:34:c2:6f:00:
12:0b:0e:88:b9:a7:4f:c8:fc:a0:d7:75:87:72:2f:
29:ed:53:8b:da:6b:d5:6c:ad:54:2e:2f:7b:5d:2a:
f0:af:9e:8f:d6:50:5a:56:9a:38:45:c7:37:4e:73:
87:a2:bd:62:9b:8d:da:7b:d2:a2:77:b7:40:b2:80:
de:1e:e7:f6:2f:91:ef:1a:4b:c6:ef:46:b6:df:3a:
9c:f0:33:57:44:9f:aa:44:74:eb:36:07:5c:1a:43:
ef:2f:d5:44:f3:12:d4:64:ca:46:3d:79:7a:fb:1a:
16:29:6a:a9:c3:c6:d8:9c:5c:35:4a:be:13:9e:1b:
81:e0:f1:5e:9b:79:6a:da:c1:8d:30:e3:db:d0:70:
8f:ec:c1:8f:c2:b4:81:37:13:b9:49:0f:f0:ef:f4:
67:84:3a:42:6d:1c:5b:7b:17:b0:b7:5d:20:53:16:
cb:ed:d7:ab:48:83:5e:50:e7:e6:5f:0f:68:66:50:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:76:80:67:C9:9A:8A:4A:92:D9:AD:4A:0B:6B:50:89:F1:D3:18:0F
X509v3 Authority Key Identifier:
keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:34:1f:e2:be:25:a5:88:ce:f3:34:18:6a:43:0b:28:8f:49:
2d:d9:00:f2:46:2d:b2:c6:02:c6:b1:2c:d7:6c:19:92:7c:44:
b8:fd:a2:57:1d:15:84:08:84:0f:b1:e3:e4:c3:b0:a7:5c:fc:
7a:58:26:f6:db:e6:8a:01:5f:0f:bb:71:a0:1a:63:27:61:28:
8a:cd:89:2c:8d:5c:72:9d:fa:c6:39:f8:12:cf:a2:d8:1b:c7:
c6:c8:ae:9b:0d:18:b2:63:eb:f1:11:d7:41:ee:b0:8e:8f:c5:
41:12:76:e0:7d:fc:7b:96:e5:5a:a9:2f:eb:d9:4b:42:0e:28:
99:28:67:83:92:b2:63:e0:d0:c1:8f:20:d0:fd:5c:12:8b:34:
4f:f4:a5:b5:28:0e:92:b0:5d:bf:16:46:88:8b:9c:bb:09:d3:
da:42:60:27:ee:b4:d4:1c:38:3d:09:bd:3e:ec:1b:bb:11:05:
50:ae:ea:4d:42:af:05:d9:ca:af:2b:3e:aa:ae:b8:b1:2e:85:
31:5d:a5:bf:76:9d:f3:bf:04:b8:ce:18:48:85:83:0a:79:53:
3e:5f:71:6a:9a:fc:9c:2c:be:e1:ab:0d:54:06:f5:9a:e0:5e:
f9:15:45:25:17:4c:86:8d:5d:b6:9b:5d:49:60:ab:c9:04:60:
d2:73:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:16 2026 by rpki-client