
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/93E8AC909CA111ED97E7FC20C4F9AE02.roa
File: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (raw, json)
Hash identifier: Ht1RtlrEvpJprnXpzi27AqBChmOPSDOow73vkTiQStQ=
Subject key identifier: 48:34:01:64:BE:3A:9F:75:B0:19:81:30:86:77:C9:D6:2E:62:80:32
Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Certificate serial: 0247
Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/93E8AC909CA111ED97E7FC20C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:31:25 +0000
ROA not before: Thu 27 Mar 2025 03:09:29 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 59323
IP address blocks: 103.111.160.0/23 maxlen: 23
103.111.160.0/24 maxlen: 24
103.111.161.0/24 maxlen: 24
103.226.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Validity
Not Before: Mar 27 03:09:29 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3dd3d-930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:f1:1e:d9:0b:17:22:71:17:db:81:45:9b:
b2:c3:5e:c6:05:56:f9:c5:0f:39:ff:7d:3d:08:3f:
87:d3:8f:5b:3b:5c:f4:c5:62:d9:1d:b3:88:39:37:
4f:27:4b:48:a8:74:eb:03:a4:8d:3f:18:f6:36:3a:
0b:ff:f8:ec:47:d7:35:80:3f:84:02:32:3c:9c:1e:
52:5c:0a:12:e2:03:5d:f9:ee:2a:f8:27:40:24:92:
01:b8:57:28:3d:a3:44:b6:7f:59:8b:cd:cd:82:d9:
49:4a:b1:68:3f:e8:32:b0:5b:c2:5e:3d:72:1e:65:
2d:8e:e0:50:19:b5:83:55:e7:40:09:c9:95:c8:df:
e8:15:72:2e:d5:14:16:28:e4:a3:52:eb:a1:57:04:
5c:89:37:7d:26:6f:74:dc:6d:04:dd:dd:95:ae:a7:
68:69:da:63:00:53:80:65:26:82:38:14:48:d1:3d:
e9:2b:20:5a:e6:de:0f:54:aa:8f:b7:5e:52:21:1a:
97:f1:21:6a:7b:50:c2:36:67:b9:58:54:81:1c:43:
03:60:41:fe:1f:ab:07:41:e0:5f:c5:c0:c7:eb:57:
25:08:4c:38:24:f7:3f:71:7c:3c:17:8b:ac:9e:2f:
8d:6b:8d:27:72:1c:19:0a:00:13:4f:6b:c0:a9:b8:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:34:01:64:BE:3A:9F:75:B0:19:81:30:86:77:C9:D6:2E:62:80:32
X509v3 Authority Key Identifier:
keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/93E8AC909CA111ED97E7FC20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.160.0/23
103.226.216.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:93:72:1b:4e:1e:7a:57:f2:9c:27:06:8b:9c:da:79:d1:cc:
10:52:25:53:8e:12:56:ea:42:50:f4:ad:55:5c:8a:03:ee:2d:
1e:10:92:22:bb:e8:3e:01:49:5b:41:68:93:b9:31:2c:ef:69:
b5:f4:38:c9:a4:a6:5b:c6:7f:c7:7f:c7:e4:3c:16:5e:83:9b:
30:31:47:66:ca:ef:e5:bc:b6:37:67:0e:6a:9a:80:0c:a8:78:
89:72:a0:46:56:04:8d:db:79:55:28:43:85:8d:1e:20:96:f0:
0b:49:e9:c2:40:6d:7c:03:0f:0a:d9:1b:c0:7d:ff:4d:0d:58:
46:7b:8f:99:c2:ca:a7:18:22:6d:b2:09:89:76:67:66:9e:3c:
bd:eb:19:a8:c1:21:af:15:65:da:e6:17:56:33:d3:07:0c:d8:
8b:3c:e8:7b:59:b9:22:de:24:a8:fc:bb:c6:5e:a1:e9:45:70:
40:cf:9e:67:57:f2:16:ae:8b:ec:f9:9c:a1:87:13:16:09:84:
0d:f2:7c:06:6b:33:f0:81:ff:c2:b0:0d:76:59:b5:3c:e6:c3:
b9:9e:5d:ad:57:c3:59:1b:e0:3c:23:cd:b1:5d:70:fd:ef:1f:
03:83:f7:a8:82:6e:d5:98:39:4e:68:a1:85:7a:4b:f4:0d:ab:
80:79:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:50:01 2026 by rpki-client