
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/C6D6364E125111F1B8BE3F1A2A3D8C67.roa
File: C6D6364E125111F1B8BE3F1A2A3D8C67.roa (raw, json)
Hash identifier: 2s0kYzcxntnOC74EHeYBKILmLaGPsj8ZMironzxM9RM=
Subject key identifier: 25:C3:FD:0B:5D:E0:8D:E8:9F:88:06:1F:5B:47:1E:D4:F3:F7:ED:3C
Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial: 06DC
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/C6D6364E125111F1B8BE3F1A2A3D8C67.roa
Signing time: Sun 01 Mar 2026 12:33:59 +0000
ROA not before: Wed 25 Feb 2026 13:56:26 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.97.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Validity
Not Before: Feb 25 13:56:26 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a43237-ca0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:1e:34:c3:fa:b0:f2:84:3a:51:af:f9:c8:
b2:35:a3:df:cb:9a:f1:38:98:13:a8:a2:0e:34:05:
5f:3f:f7:52:00:68:64:c0:97:dc:07:43:3c:db:a0:
54:65:e8:2c:b8:c2:f4:b8:dd:58:08:f6:c5:0a:54:
3f:e9:f2:64:f8:14:2f:b5:0b:9c:41:28:2f:34:0e:
97:3c:d7:d0:5d:00:46:fc:d6:6a:d3:ad:a2:5f:5f:
8c:2e:8c:c7:c8:8d:b8:6c:d6:74:98:9a:96:ef:29:
7f:8c:d6:97:26:f6:d4:dc:61:2a:b5:a9:48:e2:78:
af:59:38:bc:6f:1a:c5:c6:2c:56:dc:68:02:bc:a1:
2d:19:16:eb:6a:b9:90:5d:f2:65:99:33:46:c4:ff:
b4:b8:dc:86:2f:fb:79:ce:96:03:17:77:c9:c8:ad:
ed:d4:b2:3a:ad:6c:a5:c2:49:60:ea:df:0d:b4:0c:
e0:6b:74:15:76:6b:d5:70:6d:7f:66:66:1c:68:e9:
17:7a:7e:cd:16:04:64:08:f7:44:eb:31:e0:ce:a5:
fa:18:b0:7a:e4:ea:3c:00:a7:48:7a:eb:ac:2d:ed:
84:b4:9d:1a:b8:bf:3a:a1:9f:aa:d0:80:a9:17:a7:
ac:59:51:d1:38:32:08:aa:18:a5:5e:d2:5e:e7:40:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:FD:0B:5D:E0:8D:E8:9F:88:06:1F:5B:47:1E:D4:F3:F7:ED:3C
X509v3 Authority Key Identifier:
keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/C6D6364E125111F1B8BE3F1A2A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:20:72:76:94:cf:cf:87:3e:bf:5d:cb:ed:6b:fe:d8:8c:e7:
a8:ba:7c:b6:fe:e0:75:a3:60:ba:83:59:47:7e:79:0e:b5:e0:
c4:e2:9b:b7:e9:29:b0:6f:58:c0:93:f8:6e:5e:5f:a8:b7:39:
8d:c2:13:f1:62:34:9c:57:f0:18:d2:2f:d5:49:86:be:a1:07:
46:61:3b:28:67:85:be:6e:93:e6:e9:b8:d4:58:7c:ae:68:62:
46:69:af:18:2b:87:98:32:8a:11:28:05:3a:77:8b:61:1f:68:
4c:c3:72:08:d1:c9:97:24:09:5d:b2:27:38:9f:73:2c:e7:1e:
ae:4e:51:c0:e1:0a:c3:60:de:49:e1:97:35:1c:0f:3d:35:5b:
5a:92:02:f7:98:ab:46:51:6f:59:6f:8b:e0:c5:c5:e2:6a:54:
78:11:84:c0:72:9c:cf:cd:b4:a7:c7:a3:13:75:11:7b:19:66:
a8:b1:00:39:ca:e4:74:3e:0c:0c:b5:d4:9c:6e:74:76:c3:d0:
0a:4a:e3:d8:08:f9:1d:01:7f:5a:aa:48:23:40:fc:3f:9f:62:
6a:e0:71:c6:a8:77:ec:c3:18:7d:1c:b0:43:ea:fb:8a:0d:2d:
55:f4:8a:22:74:96:63:40:b3:5e:98:3b:3d:20:c2:be:6a:28:
23:73:37:cf
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5
NEU5RjUwOTUwHhcNMjYwMjI1MTM1NjI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzIzNy1jYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArzoeNMP6sPKEOlGv+ciyNaPfy5rxOJgTqKIONAVfP/dSAGhkwJfcB0M826BU
ZegsuML0uN1YCPbFClQ/6fJk+BQvtQucQSgvNA6XPNfQXQBG/NZq062iX1+MLozH
yI24bNZ0mJqW7yl/jNaXJvbU3GEqtalI4nivWTi8bxrFxixW3GgCvKEtGRbrarmQ
XfJlmTNGxP+0uNyGL/t5zpYDF3fJyK3t1LI6rWylwklg6t8NtAzga3QVdmvVcG1/
ZmYcaOkXen7NFgRkCPdE6zHgzqX6GLB65Oo8AKdIeuusLe2EtJ0auL86oZ+q0ICp
F6esWVHRODIIqhilXtJe50C0PwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCXD/Qtd
4I3on4gGH1tHHtTz9+08MB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1
QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUE4OTcvRTFEMTE3NzA5NUJBMTFFQkIyODEyMzcxQzRGOUFFMDIvQzZENjM2NEUx
MjUxMTFGMUI4QkUzRjFBMkEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ2HlMA0GCSqGSIb3DQEBCwUAA4IBAQBuIHJ2lM/Phz6/Xcvta/7Y
jOeouny2/uB1o2C6g1lHfnkOteDE4pu36Smwb1jAk/huXl+otzmNwhPxYjScV/AY
0i/VSYa+oQdGYTsoZ4W+bpPm6bjUWHyuaGJGaa8YK4eYMooRKAU6d4thH2hMw3II
0cmXJAldsic4n3Ms5x6uTlHA4QrDYN5J4Zc1HA89NVtakgL3mKtGUW9Zb4vgxcXi
alR4EYTAcpzPzbSnx6MTdRF7GWaosQA5yuR0PgwMtdScbnR2w9AKSuPYCPkdAX9a
qkgjQPw/n2Jq4HHGqHfswxh9HLBD6vuKDS1V9IoidJZjQLNemDs9IMK+aigjczfP
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:33 2026 by rpki-client