
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa
File: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (raw, json)
Hash identifier: rldYerid782NHhYg5gZeKDeP8nw5hDBo5ce1otmijHk=
Subject key identifier: AE:E9:46:DD:40:6C:90:BB:71:16:DE:4F:BA:7E:F8:B2:D2:3A:C2:BF
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D12
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:06:50 +0000
ROA not before: Mon 28 Jul 2025 06:26:16 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17408
IP address blocks: 103.15.76.0/24 maxlen: 24
103.15.77.0/24 maxlen: 24
103.15.78.0/24 maxlen: 24
103.21.105.0/24 maxlen: 24
103.21.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3346 (0xd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Jul 28 06:26:16 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a48e4a-a728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:b5:8d:8f:92:26:cc:83:7b:c0:dc:d9:5c:
49:3a:55:7c:96:cc:c5:60:d1:a0:81:60:e5:e9:58:
c6:79:81:ee:65:c1:1f:b5:6d:b7:81:55:50:6d:4b:
92:7b:87:53:82:8a:a1:70:24:84:89:b6:10:8f:1f:
e3:80:90:0a:83:82:ed:2f:85:0f:47:b4:f6:25:72:
e1:d2:3e:55:56:2f:fd:d6:0f:e6:e5:43:a2:5e:8f:
ac:d9:a9:f7:1d:4f:f7:48:36:c2:13:70:ce:39:fd:
e3:c6:c7:d0:bb:aa:93:06:b4:00:42:2b:7d:59:91:
52:a1:ac:4e:85:00:c9:7c:b3:3b:eb:99:c9:4c:38:
be:a1:5a:96:99:bc:d6:aa:a7:6a:34:38:c9:5e:b6:
6c:5f:e0:d6:66:25:54:ff:14:b7:cc:54:94:eb:cf:
a8:66:f5:2c:3d:02:3e:82:3d:a7:12:f0:d5:0f:d0:
f8:bc:32:55:74:a5:87:85:b3:26:48:ce:3c:33:88:
bc:e4:d9:cd:5a:82:c4:e2:2a:38:02:cf:a9:42:8b:
f0:f6:3c:65:00:72:11:f6:14:61:94:fc:06:46:19:
7b:6a:3f:c3:7b:8c:2b:d3:1f:74:8d:ea:c0:32:62:
2a:8c:a2:92:47:c8:33:a7:58:e8:0b:12:17:c6:ad:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:46:DD:40:6C:90:BB:71:16:DE:4F:BA:7E:F8:B2:D2:3A:C2:BF
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.76.0-103.15.78.255
103.21.105.0/24
103.21.107.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:49:9a:b0:0f:8a:96:f1:29:ac:4e:77:fa:96:9d:1f:87:5b:
6d:93:af:94:f1:6d:db:2a:e7:7e:43:e3:bb:6c:b6:42:0d:4f:
45:d7:0b:b1:fc:53:ea:cc:dc:a2:19:da:ff:8c:8d:87:4a:c3:
2a:2d:b4:31:bf:3e:f9:5c:69:cb:66:2b:86:56:2d:de:b1:89:
04:c3:7a:ed:42:0c:ca:d5:8f:92:78:1c:5a:1e:10:da:3b:4d:
9e:17:49:99:82:3d:73:08:95:85:28:fc:d7:1e:fe:4b:3a:19:
21:48:6a:be:09:64:ca:6b:7d:fa:6a:a7:b0:98:6e:a2:3e:3a:
13:07:0a:6d:05:bd:be:a5:83:d2:e7:0a:06:b9:50:a8:aa:d5:
79:b6:96:d1:62:a3:8f:e8:cc:d4:b8:9b:b8:45:66:da:d5:b3:
37:e0:f9:4c:c7:37:bd:19:ea:c5:eb:4a:0f:c0:81:dd:7a:d3:
f4:9e:d8:ff:38:0d:53:0b:93:20:a0:68:ff:5b:48:47:54:56:
d5:3a:c2:6a:bd:b7:b8:13:31:e7:63:0b:ca:f1:5b:46:76:79:
ab:5e:bf:6a:a3:60:5b:2e:2d:52:7b:47:9c:b7:fb:2c:05:cf:
c2:9c:84:ab:3d:f3:75:fd:cd:a5:37:43:4f:07:b4:56:66:88:
ad:1c:01:85
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG
NjlDQkE4NDYwHhcNMjUwNzI4MDYyNjE2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGU0YS1hNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfS1jY+SJsyDe8Dc2VxJOlV8lszFYNGggWDl6VjGeYHuZcEftW23gVVQbUuS
e4dTgoqhcCSEibYQjx/jgJAKg4LtL4UPR7T2JXLh0j5VVi/91g/m5UOiXo+s2an3
HU/3SDbCE3DOOf3jxsfQu6qTBrQAQit9WZFSoaxOhQDJfLM765nJTDi+oVqWmbzW
qqdqNDjJXrZsX+DWZiVU/xS3zFSU68+oZvUsPQI+gj2nEvDVD9D4vDJVdKWHhbMm
SM48M4i85NnNWoLE4io4As+pQovw9jxlAHIR9hRhlPwGRhl7aj/De4wr0x90jerA
MmIqjKKSR8gzp1joCxIXxq21MQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFK7pRt1A
bJC7cRbeT7p++LLSOsK/MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE
OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvQzNDRkU4QTA2
QjdCMTFGMEI2RDE2RTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaMAwDBAJnD0wDBABnD04DBABnFWkDBABnFWswDQYJKoZIhvcNAQELBQAD
ggEBABxJmrAPipbxKaxOd/qWnR+HW22Tr5Txbdsq535D47tstkINT0XXC7H8U+rM
3KIZ2v+MjYdKwyottDG/PvlcactmK4ZWLd6xiQTDeu1CDMrVj5J4HFoeENo7TZ4X
SZmCPXMIlYUo/Nce/ks6GSFIar4JZMprffpqp7CYbqI+OhMHCm0Fvb6lg9LnCga5
UKiq1Xm2ltFio4/ozNS4m7hFZtrVszfg+UzHN70Z6sXrSg/Agd160/Se2P84DVML
kyCgaP9bSEdUVtU6wmq9t7gTMedjC8rxW0Z2eatev2qjYFsuLVJ7R5y3+ywFz8Kc
hKs983X9zaU3Q08HtFZmiK0cAYU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:48 2026 by rpki-client