
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa
File: 9917A4D6285311ED9DD8324EC4F9AE02.roa (raw, json)
Hash identifier: aefMK2H8VuJURMPwEnmuT8GCvTBNLWTHQiekOGLIEHw=
Subject key identifier: DD:25:15:82:27:8D:41:13:8B:B9:F5:22:57:09:70:A4:D3:FC:7A:CE
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 02CC
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:28:36 +0000
ROA not before: Wed 15 Oct 2025 04:27:36 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150176
IP address blocks: 103.204.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: Oct 15 04:27:36 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44d14-e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:63:49:a8:b3:db:a3:e3:ad:8a:05:a4:f4:
69:fd:44:da:71:6b:53:74:15:47:47:32:92:78:4a:
1d:65:4e:48:a3:e0:97:49:d5:82:97:0d:a8:01:ce:
09:8c:e9:1a:df:32:e6:7a:be:92:c5:a6:2f:4c:18:
14:3b:1f:01:06:48:58:4b:b5:09:03:ae:5d:3a:af:
ac:84:f6:02:3e:02:7d:08:ab:f8:c4:1c:e3:2e:ba:
f1:b9:f1:fa:0e:40:f6:cd:39:f3:5f:01:93:d4:08:
b2:6f:de:8f:3c:a0:e6:ac:b5:47:43:cb:02:c1:c5:
3f:69:b3:4b:5c:db:92:21:a9:43:fa:4d:c8:45:62:
ea:dd:cf:f3:ca:f1:6e:48:f3:fa:f5:79:94:cf:44:
f2:50:aa:bd:eb:77:c0:7b:8e:0b:8d:66:9e:43:78:
22:68:5c:7e:72:3d:31:ac:35:d8:5a:8e:53:b1:14:
74:44:63:b8:09:fe:f0:bc:a3:da:24:0b:2a:5f:34:
ff:d4:71:19:e3:ac:ea:6b:81:48:b8:b9:0d:d3:26:
5a:ca:f6:fc:d6:5c:5c:c2:f5:bb:7b:55:e0:f7:e6:
8c:51:f8:0b:35:5e:01:3a:44:92:c2:b1:52:6f:59:
73:44:41:94:0f:cd:aa:35:56:a4:00:3a:60:af:12:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:25:15:82:27:8D:41:13:8B:B9:F5:22:57:09:70:A4:D3:FC:7A:CE
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
80:86:57:b8:e8:7f:4a:59:ba:6f:17:97:bf:95:f6:49:6c:53:
f7:cd:fd:46:15:26:0c:49:d9:ae:66:fc:15:8d:e6:19:38:8e:
37:70:0e:d3:d1:de:78:7d:9d:44:63:13:0c:4e:05:50:e6:cf:
d3:91:4d:88:3f:1f:ba:77:f4:61:07:86:be:1f:0d:b2:7c:4b:
ea:2c:9e:f2:8b:00:82:68:59:16:20:02:1b:63:9d:b6:95:66:
18:de:2d:b1:35:a9:44:4d:c3:91:06:4c:7e:64:fb:44:bc:9f:
3e:51:b8:3a:2a:d7:61:72:51:0b:bb:4d:35:fd:72:f0:7e:e9:
bc:c3:2f:41:75:47:25:51:48:39:4d:b2:ae:a5:56:e1:ef:61:
ff:4a:b2:6d:9d:81:33:12:7b:d1:99:ec:b4:c0:4a:16:19:07:
b7:a9:a8:ec:bc:5f:50:d2:c0:4c:01:96:93:aa:87:53:9e:72:
6a:75:ae:9c:93:bf:c6:3f:26:0e:42:10:54:ca:3c:aa:9f:c2:
a0:9b:91:e8:bd:cf:12:4d:05:2e:15:db:e4:9a:a3:55:37:f0:
0e:1e:ef:65:73:98:6b:1b:7b:f0:27:5b:b2:cd:c0:7f:10:e8:
08:60:26:c9:4c:c5:bc:e6:ae:4c:d8:70:48:93:c4:29:f1:45:
87:2e:cd:ee
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2
QThDMEE5NUEwHhcNMjUxMDE1MDQyNzM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGQxNC1lMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2djSaiz26PjrYoFpPRp/UTacWtTdBVHRzKSeEodZU5Io+CXSdWClw2oAc4J
jOka3zLmer6SxaYvTBgUOx8BBkhYS7UJA65dOq+shPYCPgJ9CKv4xBzjLrrxufH6
DkD2zTnzXwGT1Aiyb96PPKDmrLVHQ8sCwcU/abNLXNuSIalD+k3IRWLq3c/zyvFu
SPP69XmUz0TyUKq963fAe44LjWaeQ3giaFx+cj0xrDXYWo5TsRR0RGO4Cf7wvKPa
JAsqXzT/1HEZ46zqa4FIuLkN0yZayvb81lxcwvW7e1Xg9+aMUfgLNV4BOkSSwrFS
b1lzREGUD82qNVakADpgrxI0kQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN0lFYIn
jUETi7n1IlcJcKTT/HrOMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4
NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjE4RTEvMTEzMTY2MkMyODUwMTFFRDhDODk3OTRBQzRGOUFFMDIvOTkxN0E0RDYy
ODUzMTFFRDlERDgzMjRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ8xEMA0GCSqGSIb3DQEBCwUAA4IBAQCAhle46H9KWbpvF5e/lfZJ
bFP3zf1GFSYMSdmuZvwVjeYZOI43cA7T0d54fZ1EYxMMTgVQ5s/TkU2IPx+6d/Rh
B4a+Hw2yfEvqLJ7yiwCCaFkWIAIbY522lWYY3i2xNalETcORBkx+ZPtEvJ8+Ubg6
KtdhclELu001/XLwfum8wy9BdUclUUg5TbKupVbh72H/SrJtnYEzEnvRmey0wEoW
GQe3qajsvF9Q0sBMAZaTqodTnnJqda6ck7/GPyYOQhBUyjyqn8Kgm5Hovc8STQUu
FdvkmqNVN/AOHu9lc5hrG3vwJ1uyzcB/EOgIYCbJTMW85q5M2HBIk8Qp8UWHLs3u
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:30 2026 by rpki-client