
$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/87840F3AFBD111EFB4804F27C4F9AE02.roa
File: 87840F3AFBD111EFB4804F27C4F9AE02.roa (raw, json)
Hash identifier: wZzlB5spDDKacHBwj4qbEIRLpeoLRuhCgKL3r5PPS10=
Subject key identifier: AA:AD:B1:88:D6:2E:AC:D9:A7:05:A0:74:06:DC:82:00:91:8E:C8:8C
Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial: 0537
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/87840F3AFBD111EFB4804F27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:01:47 +0000
ROA not before: Tue 16 Dec 2025 23:20:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149039
IP address blocks: 103.177.72.0/23 maxlen: 23
2001:df0:1ec0::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Validity
Not Before: Dec 16 23:20:17 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a454db-ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:eb:2a:81:f9:86:5a:2e:d8:13:2d:d8:01:
e1:24:82:f5:58:ce:53:f7:a9:d9:4f:15:c8:96:53:
7d:c1:8e:53:d9:a5:43:6a:5b:09:84:f3:cf:df:7b:
00:dd:14:67:10:f3:2a:dd:e8:7a:ad:99:15:74:ff:
e2:59:4a:2b:c1:03:69:26:5a:88:fa:b9:10:67:17:
46:f7:5b:51:63:75:54:3b:11:6c:f1:08:63:53:69:
84:0f:b7:5d:02:ba:91:99:b6:a8:52:3e:48:0f:13:
f2:ac:08:6e:ad:9e:fd:a1:05:09:57:0e:d6:ec:bc:
b4:3b:44:fa:d2:02:3d:24:7d:19:c8:0b:b5:02:42:
fd:8f:01:c4:93:c8:3f:65:c5:c4:cf:38:23:94:00:
7d:8d:e4:45:24:39:d0:26:55:40:48:fa:9b:f3:ce:
01:a9:62:18:4b:81:8d:a0:c9:9d:3e:df:ff:75:6d:
be:1a:e6:96:c8:d3:e6:28:c2:3d:86:df:6c:e1:5d:
5f:c0:dd:bd:ca:56:5f:67:88:41:b0:47:68:c8:e9:
72:52:dc:06:b1:9e:b7:a7:b0:5d:97:6b:6f:25:37:
4d:50:36:33:e5:7b:32:81:b5:a8:3b:9a:7e:44:9b:
0c:02:48:b3:de:9d:a9:57:e9:58:2c:d1:71:30:be:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:B1:88:D6:2E:AC:D9:A7:05:A0:74:06:DC:82:00:91:8E:C8:8C
X509v3 Authority Key Identifier:
keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/87840F3AFBD111EFB4804F27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.72.0/23
IPv6:
2001:df0:1ec0::/48
Signature Algorithm: sha256WithRSAEncryption
50:ba:b4:ab:72:46:a4:c9:36:20:9c:0b:e1:a4:57:7a:9e:a5:
f7:a9:ba:0a:c5:c4:aa:c9:73:9d:ac:37:fd:8f:d7:66:1d:7c:
31:04:42:cf:87:5f:3a:ea:12:4d:82:d4:03:b8:94:72:03:0a:
62:55:af:57:31:fd:7a:27:80:84:83:cc:1f:e8:98:45:c3:fa:
24:b1:54:52:a8:66:5d:7d:f8:0e:ce:37:cd:1b:c2:0c:a2:98:
51:d4:5b:85:63:91:8f:57:e2:c7:3b:7c:d7:49:6f:69:7f:46:
fd:97:12:fa:c1:6c:03:48:60:25:e3:22:cb:a7:e3:fa:9a:cc:
16:63:ba:51:c6:94:26:73:a6:01:ec:9b:c1:ef:1a:10:81:c9:
3b:ed:28:93:c0:df:fa:f2:bc:4c:0a:8e:f7:10:47:9f:1d:a2:
47:15:8b:77:13:25:53:e3:df:ee:ed:19:5e:87:4d:6f:7e:9d:
db:8f:ae:fe:37:7a:3b:d6:6c:da:dd:8a:ef:69:a3:39:7f:da:
f1:c1:fa:db:af:15:4d:2b:c0:56:d0:0d:45:6c:86:3a:ff:b5:
1a:98:eb:43:ff:04:4b:9a:85:a0:a7:0b:1c:b0:1c:be:22:e0:
8a:2d:1d:c0:93:73:75:33:02:b3:25:e3:26:28:99:aa:12:5b:
51:a8:6a:f3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI0QUYxMTAvBgNVBAUTKDVDMzE1REFGQzUzQTgyRkRENjJDNzIwMDVDNzY0NDMz
M0JDMDI5N0EwHhcNMjUxMjE2MjMyMDE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTRkYi1hZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs27rKoH5hlou2BMt2AHhJIL1WM5T96nZTxXIllN9wY5T2aVDalsJhPPP33sA
3RRnEPMq3eh6rZkVdP/iWUorwQNpJlqI+rkQZxdG91tRY3VUOxFs8QhjU2mED7dd
ArqRmbaoUj5IDxPyrAhurZ79oQUJVw7W7Ly0O0T60gI9JH0ZyAu1AkL9jwHEk8g/
ZcXEzzgjlAB9jeRFJDnQJlVASPqb884BqWIYS4GNoMmdPt//dW2+GuaWyNPmKMI9
ht9s4V1fwN29ylZfZ4hBsEdoyOlyUtwGsZ63p7Bdl2tvJTdNUDYz5XsygbWoO5p+
RJsMAkiz3p2pV+lYLNFxML6XPQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKqtsYjW
LqzZpwWgdAbcggCRjsiMMB8GA1UdIwQYMBaAFFwxXa/FOoL91ixyAFx2RDM7wCl6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjRBRi83NkM3RjBGNDUx
RjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhVNmd2M1dMSElBWEhaRU16dkFL
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hERmRyOFU2Z3YzV0xISUFYSFpFTXp2QUtYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTI0QUYvNzZDN0YwRjQ1MUY2MTFFQzlFM0M2QzNBQzRGOUFFMDIvODc4NDBGM0FG
QkQxMTFFRkI0ODA0RjI3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7FIMA8EAgACMAkDBwAgAQ3wHsAwDQYJKoZIhvcNAQELBQADggEB
AFC6tKtyRqTJNiCcC+GkV3qepfepugrFxKrJc52sN/2P12YdfDEEQs+HXzrqEk2C
1AO4lHIDCmJVr1cx/XongISDzB/omEXD+iSxVFKoZl19+A7ON80bwgyimFHUW4Vj
kY9X4sc7fNdJb2l/Rv2XEvrBbANIYCXjIsun4/qazBZjulHGlCZzpgHsm8HvGhCB
yTvtKJPA3/ryvEwKjvcQR58dokcVi3cTJVPj3+7tGV6HTW9+nduPrv43ejvWbNrd
iu9pozl/2vHB+tuvFU0rwFbQDUVshjr/tRqY60P/BEuahaCnCxywHL4i4IotHcCT
c3UzArMl4yYomaoSW1GoavM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:15 2026 by rpki-client