
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/797BF786FB2C11EFA405F334C4F9AE02.roa
File: 797BF786FB2C11EFA405F334C4F9AE02.roa (raw, json)
Hash identifier: HFvIVd/rWVPzXXKKiOWON2cvnwjOeJoH4rrOAqA8YGg=
Subject key identifier: CA:B4:63:57:6C:9E:F2:58:B2:EE:B7:0F:B2:DF:2D:BF:AA:39:AC:FA
Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial: 10E7
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/797BF786FB2C11EFA405F334C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:19:19 +0000
ROA not before: Fri 02 May 2025 17:56:51 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 18190
IP address blocks: 103.114.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4327 (0x10e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Validity
Not Before: May 2 17:56:51 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40497-8b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:fa:2b:4a:10:ef:34:86:bc:5e:3f:e9:c5:
40:d6:c9:6e:77:09:82:9a:0b:c5:eb:0f:78:f8:74:
77:37:86:5d:de:2a:87:f1:a6:e8:dd:d5:29:81:28:
9c:7b:d2:e1:e7:63:c8:b5:0d:75:7f:6a:65:55:c3:
74:ac:b3:00:3a:d9:a6:70:5f:15:56:78:f4:ca:10:
a1:81:a6:c9:12:f5:ff:f9:48:2d:bd:4e:fb:0d:3c:
5d:dc:ad:0e:3f:52:88:77:b4:81:1e:1f:cc:b8:a6:
07:cf:ba:39:8d:f1:23:8a:ef:ab:12:b1:9c:aa:b0:
04:7d:98:31:02:cf:b2:16:f4:5c:e9:b5:3e:1a:63:
8a:4d:5d:ba:9b:51:35:a7:55:d7:09:31:b8:5e:44:
bf:df:42:08:cd:59:1b:36:ce:e1:5a:d2:8e:b0:77:
75:d2:6b:08:19:ff:4c:e8:6a:d6:65:d4:5f:f4:03:
fb:bb:ca:ff:6e:7e:54:58:2c:e8:8a:24:98:6a:bf:
e3:74:be:4a:ee:86:09:bc:cd:bf:ef:b6:b4:a4:08:
70:17:2a:bc:a8:d6:b5:b7:2b:f6:24:7b:7c:43:01:
74:1e:e1:b0:67:fd:e2:c9:26:c1:f3:4b:d8:87:ce:
b0:65:42:7c:bf:48:b8:ac:65:4e:52:e3:92:a6:a7:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B4:63:57:6C:9E:F2:58:B2:EE:B7:0F:B2:DF:2D:BF:AA:39:AC:FA
X509v3 Authority Key Identifier:
keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/797BF786FB2C11EFA405F334C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.8.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fd:87:6b:31:e2:c9:e2:26:6b:bb:ed:7b:9a:c7:e4:24:21:
a7:1c:0f:be:c8:4e:2a:22:9f:5b:4f:3a:5a:96:c0:0d:df:d8:
7d:aa:a7:ee:96:41:ee:5b:d1:cd:f7:70:e3:07:2b:e9:1c:dd:
dc:97:62:b4:7b:0c:01:b2:3f:71:e5:b6:83:0c:fc:d2:ea:b7:
58:9f:67:29:64:93:6a:05:69:f8:f4:56:e8:0f:22:90:67:3f:
84:59:b0:63:8d:00:7c:dc:53:63:8b:d0:09:7a:3d:95:ec:d5:
bf:65:30:a7:76:3d:85:b6:81:96:a2:ed:fa:05:f6:63:50:56:
37:f1:ca:58:3b:11:af:ba:e1:83:26:b6:59:0f:67:63:f4:ed:
18:20:87:7e:58:10:1e:81:c8:72:71:46:db:79:e2:71:31:14:
b2:60:27:78:70:5d:36:43:80:83:85:ce:6b:89:1d:43:fc:1f:
b8:f0:11:2f:65:dc:06:21:c0:48:c8:8c:d3:ba:43:b9:39:f7:
6e:97:17:6f:7c:13:05:09:9b:c6:5e:fa:fe:74:de:cb:fc:1b:
8d:46:2d:1d:d4:b6:dd:f8:a1:22:df:47:91:ba:fd:33:95:62:
29:c9:fc:0c:bc:5f:d4:2f:ee:26:e0:dd:e4:a6:73:ed:8f:90:
12:a0:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:55 2026 by rpki-client