
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa
File: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (raw, json)
Hash identifier: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=
Subject key identifier: EC:A4:36:DD:E6:7C:86:86:71:DA:24:AC:8C:C7:5D:39:95:DA:B3:BB
Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
Certificate serial: 0203
Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:16:28 +0000
ROA not before: Wed 19 Nov 2025 07:07:11 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 147314
IP address blocks: 103.228.10.0/24 maxlen: 24
103.228.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl
rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
Validity
Not Before: Nov 19 07:07:11 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4665c-c8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:27:95:04:88:11:37:7b:6a:0b:55:36:4e:
7f:bb:13:57:a9:a8:3a:40:4a:b0:d7:0f:d4:8b:f1:
dd:fd:4b:86:3b:4b:36:27:8b:15:60:a9:1d:52:91:
0e:84:9b:d3:8e:45:c1:ad:da:24:6a:0d:f8:f3:2d:
16:fd:73:34:5a:0d:75:c3:f9:d2:37:41:33:e8:71:
61:10:29:d9:ac:76:cc:59:2e:24:24:54:a9:53:ed:
89:a0:4b:07:10:06:38:ea:26:0f:07:60:9f:ef:20:
a6:e7:e1:2a:9f:d2:7f:ed:f6:9a:2a:73:bf:1f:bb:
73:8f:8c:2d:d6:15:46:7a:fe:18:db:e6:fc:05:56:
88:ae:49:b1:59:4b:ed:46:60:cb:15:47:c0:37:8b:
01:05:16:c4:e4:48:c6:f0:ff:fb:5d:bb:74:2f:78:
cc:bf:7c:ae:13:cb:91:e9:41:ef:b7:a1:80:db:de:
34:ce:05:98:67:c1:21:4c:0a:a8:6b:9f:6f:56:52:
4b:b1:be:58:24:3b:44:41:db:04:e1:e4:56:b8:0c:
c1:65:5b:05:8d:9c:c0:87:a5:25:7b:31:4c:39:2c:
56:05:7c:b4:8e:58:14:36:13:79:22:2a:1a:a5:38:
7a:2f:d0:08:37:08:59:aa:b7:91:17:e6:6f:d8:cc:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A4:36:DD:E6:7C:86:86:71:DA:24:AC:8C:C7:5D:39:95:DA:B3:BB
X509v3 Authority Key Identifier:
keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.228.10.0/23
Signature Algorithm: sha256WithRSAEncryption
98:6f:b6:af:d6:13:1f:72:3b:1f:b8:58:b6:6b:1c:0b:17:d4:
79:f6:85:3e:24:f0:f0:ee:76:38:1c:c9:b7:3f:1b:1e:8a:e3:
b6:c0:8b:a4:91:0a:77:82:18:d8:bc:d4:4a:15:00:45:cc:5c:
72:92:17:46:f4:06:82:1f:98:12:ab:92:64:f0:45:54:1f:a7:
85:f0:8c:cb:0e:75:95:4c:cd:46:39:0d:35:ff:20:3f:47:bf:
11:05:74:23:25:a6:86:bb:77:a1:07:93:47:92:d8:44:26:78:
4f:ac:2b:21:9d:20:ad:76:68:ee:77:ac:ef:bb:db:0a:ce:52:
0e:d0:1a:95:a2:51:fc:ce:97:43:19:6e:b7:29:35:8a:75:96:
05:31:12:7b:4f:a0:af:dc:f8:17:4c:5b:87:62:98:72:5c:d2:
a6:8c:49:ba:6c:d2:da:c7:36:28:9c:5d:ad:41:83:53:32:0e:
9e:cf:2d:9f:33:dc:81:cd:e9:ea:ab:ec:94:ac:39:75:b9:a5:
fa:d5:34:da:cb:bf:2a:85:0f:84:30:1e:a6:cb:62:49:be:2b:
18:1c:5c:bd:27:71:2d:59:45:34:d2:7a:75:c5:9f:72:69:22:
ae:df:a4:b9:ac:d7:02:fc:36:df:0c:9b:65:0f:d5:81:97:b9:
4d:08:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:44 2026 by rpki-client