
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa
File: 203FA37E750611ED95126872C4F9AE02.roa (raw, json)
Hash identifier: 1UhMMEwrSvxSK5SenyWo1EuSLvOXjxy88H+VRidBB7E=
Subject key identifier: D0:0B:D4:1D:B6:E9:C5:F9:4F:8E:92:6B:71:4C:9A:A8:5C:A5:FA:F6
Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Certificate serial: 0267
Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:56:19 +0000
ROA not before: Wed 31 Dec 2025 01:21:31 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150438
IP address blocks: 103.99.187.0/24 maxlen: 24
2001:df1:91c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Validity
Not Before: Dec 31 01:21:31 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43773-87bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:e6:55:70:fc:ef:2c:0e:96:c8:a7:12:19:
9f:76:48:9a:f2:a9:25:de:26:a0:f8:45:4c:01:4f:
5a:97:43:cb:7a:2c:40:2b:b5:5c:04:16:12:6a:e9:
1d:ee:c8:71:63:b4:05:f5:dc:15:c3:95:ac:17:45:
11:a2:b6:aa:d8:fe:13:f4:0a:43:65:2d:73:48:46:
b7:72:44:82:17:25:f2:ce:a5:c0:5a:28:0f:b5:e1:
3a:2d:c7:7d:30:e0:31:a0:47:2d:6c:c0:0a:81:d3:
e6:95:9c:91:d5:f3:49:60:58:0b:bd:02:13:ac:8f:
73:bd:5a:b0:a6:e6:4d:c4:48:cd:2c:c1:2b:57:d6:
9e:07:25:d8:54:32:4f:2f:14:20:f6:d2:42:16:3b:
32:d8:34:3b:e0:b4:bd:48:5a:99:06:07:d5:e2:43:
f4:ed:2d:41:9f:5c:72:58:e9:cb:45:ed:95:ef:7e:
2a:65:3e:55:26:83:51:82:16:bd:47:1d:08:72:f0:
76:3d:b4:60:b3:89:a6:35:20:f3:17:c6:74:d9:17:
4d:7b:49:76:bb:ad:fd:fd:84:46:06:87:7d:d0:24:
a5:23:e9:77:74:ce:03:38:e8:3e:96:f3:26:9b:8c:
d5:9a:32:79:91:93:62:3b:0f:0d:67:48:27:ae:e5:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:D4:1D:B6:E9:C5:F9:4F:8E:92:6B:71:4C:9A:A8:5C:A5:FA:F6
X509v3 Authority Key Identifier:
keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.187.0/24
IPv6:
2001:df1:91c0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:d3:34:d5:04:91:82:b4:35:9b:77:94:21:05:3b:3b:b7:b3:
87:e9:a0:2d:8f:7c:56:06:a6:df:29:0c:52:c4:fa:f2:9d:91:
3e:2f:a4:4b:53:31:34:6b:f3:0a:6c:b9:66:55:08:6b:ef:a5:
ab:25:eb:e6:34:84:a8:a3:3c:79:59:6b:aa:8c:79:11:77:b7:
48:33:05:fd:7a:12:59:fb:de:ed:67:60:d5:9c:6e:98:97:bd:
4d:20:47:99:cd:e0:27:f4:b9:42:06:54:00:bb:38:32:b8:88:
63:5a:0b:c7:f9:58:24:60:a5:de:5b:0d:8a:65:ab:be:af:25:
6f:a2:37:19:bf:4a:7c:2e:b1:82:6d:a2:ff:0d:04:f5:53:20:
21:40:6e:9b:59:9c:6e:f3:da:bb:78:3b:51:d9:0a:d2:a8:b9:
bd:5c:a1:fe:3d:03:02:e0:09:4e:4f:99:fd:80:c2:9a:aa:aa:
63:50:d9:60:df:57:5c:56:c5:c4:30:91:40:64:e6:37:18:2b:
ec:70:9d:0f:d3:09:64:02:3f:70:05:26:ee:98:8d:2b:f8:cd:
80:b3:56:74:d4:89:e8:26:46:ca:9e:9c:38:ea:40:b3:61:bb:
cf:f9:7b:65:86:c2:5c:f5:96:01:09:e6:b1:2c:3b:41:af:6c:
20:19:8d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:39 2026 by rpki-client