
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/952AA4424DAF11EC86ED5273C4F9AE02.roa
File: 952AA4424DAF11EC86ED5273C4F9AE02.roa (raw, json)
Hash identifier: WtYZrAE+e3zK4y9KGKdGiWbVW7K/2w3q6znJvP2CBBc=
Subject key identifier: 5F:70:5E:A5:3C:2A:C4:30:9B:7F:A0:16:1A:D0:DB:78:30:F7:2B:BF
Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial: 0515
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/952AA4424DAF11EC86ED5273C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:13:21 +0000
ROA not before: Sat 27 Sep 2025 00:27:39 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 37978
IP address blocks: 103.173.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Validity
Not Before: Sep 27 00:27:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a481c1-1280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:ad:10:1a:c0:b5:2b:d9:fa:57:27:d4:f8:
c3:9c:83:43:0c:0a:3e:41:0b:da:c2:18:8c:98:62:
9c:a6:db:0a:01:32:f0:5e:58:f8:9b:e3:51:31:07:
fb:a3:8c:45:7f:b1:96:9f:80:9a:91:f0:00:8d:4e:
39:62:62:b7:7e:f6:bd:72:be:94:34:6d:e0:d8:4c:
b6:b4:ea:fc:39:e1:3e:2c:18:f8:ee:9b:51:d3:e9:
4c:bf:5d:1e:e2:9f:2a:0a:62:65:91:24:4d:16:9d:
b0:43:a2:df:73:fd:59:2e:37:87:34:ca:1f:35:e8:
52:67:55:ba:cd:ac:f8:38:de:15:b7:a8:74:b3:ca:
81:bf:34:ec:fa:41:9b:6b:02:04:75:b4:c7:ca:ae:
e3:a2:f7:52:af:f0:75:df:f2:ec:78:63:8f:26:15:
10:87:b3:8e:cd:35:e9:91:33:be:70:95:8c:f8:45:
b3:9b:97:54:aa:22:14:44:4c:72:71:60:53:b6:eb:
7b:5a:bc:7b:ef:63:42:28:f7:36:f8:0f:f8:94:e2:
b9:6b:34:1c:33:71:b5:bc:12:c7:f1:9e:b7:7b:a0:
ac:90:a6:7d:16:a0:f2:92:27:8d:79:bb:94:6f:c2:
3d:be:bd:68:0a:1d:c7:c6:b9:70:54:e3:0f:62:43:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:5E:A5:3C:2A:C4:30:9B:7F:A0:16:1A:D0:DB:78:30:F7:2B:BF
X509v3 Authority Key Identifier:
keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/952AA4424DAF11EC86ED5273C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.176.0/24
Signature Algorithm: sha256WithRSAEncryption
10:9e:e4:96:72:22:99:3b:78:b6:67:0d:9a:d1:b7:af:e5:95:
72:16:8e:78:60:78:5c:5a:e6:0b:46:f4:86:33:81:7b:a0:42:
12:81:01:38:ec:71:1e:e7:d4:ab:cc:69:32:cf:df:3d:c9:27:
44:cb:fd:06:9f:8d:3b:d4:0e:d5:7c:67:48:df:3a:53:95:ac:
fa:c2:9f:85:16:63:33:ce:00:1d:6b:43:16:6c:c4:c7:23:8f:
6c:07:9d:a4:a9:38:d2:e0:d5:82:e6:95:0c:f5:9f:ba:3c:7b:
ab:74:00:9b:3b:08:4e:7c:17:11:e6:ff:3d:06:ea:5a:78:8a:
f6:f7:3b:16:ac:c0:dc:b5:63:4c:47:6e:1d:20:3b:b4:76:53:
7f:1f:c8:6e:0d:a1:0a:71:d2:ff:23:d9:7c:c8:96:9c:2c:6e:
fd:95:30:01:c6:b7:fb:d5:ff:0c:83:9f:1b:e4:a3:bc:74:1f:
40:28:92:d7:c6:e4:2b:cb:15:9c:62:3d:d1:e2:64:b5:4f:69:
65:64:02:92:0d:37:39:fe:a2:6d:e7:ec:14:b5:01:87:1e:e7:
11:5a:a8:a5:aa:04:ea:a1:3f:45:87:17:c2:40:c3:ca:6d:c1:
5d:3e:54:5d:4a:0d:1d:aa:18:3e:a3:56:74:59:25:5c:a1:b7:
73:b2:d2:20
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1
NTBCM0VGRjgwHhcNMjUwOTI3MDAyNzM5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODFjMS0xMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cWtEBrAtSvZ+lcn1PjDnINDDAo+QQvawhiMmGKcptsKATLwXlj4m+NRMQf7
o4xFf7GWn4CakfAAjU45YmK3fva9cr6UNG3g2Ey2tOr8OeE+LBj47ptR0+lMv10e
4p8qCmJlkSRNFp2wQ6Lfc/1ZLjeHNMofNehSZ1W6zaz4ON4Vt6h0s8qBvzTs+kGb
awIEdbTHyq7jovdSr/B13/LseGOPJhUQh7OOzTXpkTO+cJWM+EWzm5dUqiIURExy
cWBTtut7Wrx772NCKPc2+A/4lOK5azQcM3G1vBLH8Z63e6CskKZ9FqDykieNebuU
b8I9vr1oCh3HxrlwVOMPYkMGYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF9wXqU8
KsQwm3+gFhrQ23gw9yu/MB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE
QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTNGRkYvODJBRDM3N0E0REFCMTFFQzkyMTRGNTIxQzRGOUFFMDIvOTUyQUE0NDI0
REFGMTFFQzg2RUQ1MjczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ62wMA0GCSqGSIb3DQEBCwUAA4IBAQAQnuSWciKZO3i2Zw2a0bev
5ZVyFo54YHhcWuYLRvSGM4F7oEISgQE47HEe59SrzGkyz989ySdEy/0Gn4071A7V
fGdI3zpTlaz6wp+FFmMzzgAda0MWbMTHI49sB52kqTjS4NWC5pUM9Z+6PHurdACb
OwhOfBcR5v89BupaeIr29zsWrMDctWNMR24dIDu0dlN/H8huDaEKcdL/I9l8yJac
LG79lTABxrf71f8Mg58b5KO8dB9AKJLXxuQryxWcYj3R4mS1T2llZAKSDTc5/qJt
5+wUtQGHHucRWqilqgTqoT9FhxfCQMPKbcFdPlRdSg0dqhg+o1Z0WSVcobdzstIg
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:29 2026 by rpki-client