
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/84CFF0D6D2F311EEAFCF3273C4F9AE02.roa
File: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (raw, json)
Hash identifier: MNLepmkmDKIhV6gh+S8mCUAnPQoTINkDmI9IbqljxRQ=
Subject key identifier: 93:74:CB:CD:51:B1:90:3D:53:A2:21:D6:E7:EF:A3:FB:96:30:15:B5
Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial: 0CD7
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/84CFF0D6D2F311EEAFCF3273C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:21:59 +0000
ROA not before: Wed 08 Oct 2025 18:48:37 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150748
IP address blocks: 103.100.233.0/24 maxlen: 24
103.100.234.0/24 maxlen: 24
103.100.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Validity
Not Before: Oct 8 18:48:37 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a475b7-e8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:a5:75:79:bc:da:38:11:05:e3:86:6b:9c:
f1:8d:c5:76:e3:8e:69:2d:32:1f:12:b1:b6:6b:31:
37:63:b4:9a:cf:7b:b6:d3:48:e3:19:bd:30:e6:2e:
c6:d9:b5:1d:78:64:a6:94:64:ec:cf:f8:bc:de:87:
ac:1c:ea:9d:75:32:07:51:69:a8:41:ed:6f:fa:81:
29:00:72:7f:d9:74:dd:a4:9f:e1:a8:8e:dc:87:1e:
2d:97:e1:ca:ba:c7:0f:47:91:a8:da:f4:ad:da:8f:
1d:ae:3b:0a:70:72:15:14:fe:3c:43:2f:e3:e3:c2:
ec:6a:43:7a:a3:a7:a8:1d:90:6d:98:99:ff:e1:6a:
bf:7c:e8:48:01:da:46:65:fd:fd:62:0b:d8:fc:ab:
ec:87:51:16:12:b3:92:58:7f:8d:86:83:c5:4f:20:
ef:f6:dc:37:6a:15:70:64:85:cd:eb:17:a3:b1:cd:
90:f6:b1:1c:2d:f7:67:dc:90:25:2b:ae:6b:99:5c:
5a:07:bc:e2:eb:b7:0e:bc:ef:7b:c3:49:4d:6e:a5:
e0:94:c7:63:1b:bf:2f:61:9f:86:66:3a:cc:f3:c2:
ff:2d:36:f7:3a:d4:4c:12:3e:bb:95:7d:33:20:dc:
3d:70:82:e5:72:d0:2a:bc:39:f6:8e:2e:86:ce:07:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:CB:CD:51:B1:90:3D:53:A2:21:D6:E7:EF:A3:FB:96:30:15:B5
X509v3 Authority Key Identifier:
keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/84CFF0D6D2F311EEAFCF3273C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.100.233.0-103.100.235.255
Signature Algorithm: sha256WithRSAEncryption
01:3e:1b:c8:ba:27:37:0c:4b:77:9c:2b:5f:da:52:62:30:38:
ea:0d:f5:07:e8:49:a2:9e:cb:68:42:a6:d9:20:f9:5e:ac:9d:
97:3b:b3:6c:a7:e0:f1:47:21:c4:45:46:14:d1:c5:ec:aa:a2:
8e:b0:cb:8d:fd:f6:9d:8c:50:37:65:7a:7f:9c:3b:c5:35:64:
5e:a2:7b:bd:4b:c9:50:0a:be:fd:0a:f7:1d:1e:f1:5f:1f:ce:
c8:47:fa:54:3d:7d:97:85:bb:08:a5:16:15:6b:e3:c9:ea:67:
0b:2d:0c:34:b7:1a:dd:e2:ac:64:41:4f:1b:46:49:22:08:c1:
a8:42:d6:f1:63:41:fb:cd:22:00:14:c5:c9:87:3c:c1:18:40:
40:8c:56:90:6a:35:bd:4a:64:93:4f:27:c1:41:18:21:dc:6a:
7f:6c:0b:4e:dc:a7:3a:0b:49:d8:41:a1:1f:a5:75:ce:0a:94:
5f:c5:f6:30:3f:5d:38:5b:17:3d:c9:45:ec:bc:67:a6:7b:b1:
fe:69:e3:68:38:26:8e:fb:4b:dd:77:34:66:d2:55:a8:cb:91:
38:35:bf:e2:0f:cc:22:be:f4:d2:6c:65:65:d1:6c:24:07:ee:
7a:ba:91:96:3d:a9:b8:a0:d3:35:6f:37:79:5b:68:90:22:33:
79:68:07:96
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2
MTcwNERDRTkwHhcNMjUxMDA4MTg0ODM3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzViNy1lOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoH6ldXm82jgRBeOGa5zxjcV2445pLTIfErG2azE3Y7Saz3u200jjGb0w5i7G
2bUdeGSmlGTsz/i83oesHOqddTIHUWmoQe1v+oEpAHJ/2XTdpJ/hqI7chx4tl+HK
uscPR5Go2vSt2o8drjsKcHIVFP48Qy/j48LsakN6o6eoHZBtmJn/4Wq/fOhIAdpG
Zf39YgvY/Kvsh1EWErOSWH+NhoPFTyDv9tw3ahVwZIXN6xejsc2Q9rEcLfdn3JAl
K65rmVxaB7zi67cOvO97w0lNbqXglMdjG78vYZ+GZjrM88L/LTb3OtRMEj67lX0z
INw9cILlctAqvDn2ji6GzgceuQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFJN0y81R
sZA9U6Ih1ufvo/uWMBW1MB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx
M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ1RTAvMjNCRjJGMjYxMTNFMTFFQTg4RTg3ODc2QzRGOUFFMDIvODRDRkYwRDZE
MkYzMTFFRUFGQ0YzMjczQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABnZOkDBAJnZOgwDQYJKoZIhvcNAQELBQADggEBAAE+G8i6JzcM
S3ecK1/aUmIwOOoN9QfoSaKey2hCptkg+V6snZc7s2yn4PFHIcRFRhTRxeyqoo6w
y4399p2MUDdlen+cO8U1ZF6ie71LyVAKvv0K9x0e8V8fzshH+lQ9fZeFuwilFhVr
48nqZwstDDS3Gt3irGRBTxtGSSIIwahC1vFjQfvNIgAUxcmHPMEYQECMVpBqNb1K
ZJNPJ8FBGCHcan9sC07cpzoLSdhBoR+ldc4KlF/F9jA/XThbFz3JRey8Z6Z7sf5p
42g4Jo77S913NGbSVajLkTg1v+IPzCK+9NJsZWXRbCQH7nq6kZY9qbig0zVvN3lb
aJAiM3loB5Y=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:10:11 2026 by rpki-client