
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/CCC98C06516B11EBB8942876C4F9AE02.roa
File: CCC98C06516B11EBB8942876C4F9AE02.roa (raw, json)
Hash identifier: lPrloJGC9fRoPJ5nXnuFUs4bSREmY0P/1nt0P5cs2LM=
Subject key identifier: 90:E7:F2:82:9A:7F:CA:35:9D:C8:BE:8D:F8:95:82:8F:58:7F:97:43
Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Certificate serial: 0782
Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/CCC98C06516B11EBB8942876C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:32:48 +0000
ROA not before: Thu 30 Oct 2025 16:03:30 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134747
IP address blocks: 103.197.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl
rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Validity
Not Before: Oct 30 16:03:30 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44e0f-a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:4c:0f:e0:4a:73:70:e0:16:59:0e:e9:0d:
3d:3f:3b:06:7b:9d:ea:48:26:4e:27:2f:4e:ac:7f:
f3:ed:1e:05:e6:1f:ce:27:64:cc:fe:55:f7:16:f2:
82:78:24:5a:9b:89:a7:55:64:cd:1a:e1:9c:3c:29:
85:24:95:44:e5:6e:d7:1d:01:58:96:9d:9e:e1:93:
8e:67:bf:ef:ca:f0:e0:92:13:a1:0a:df:af:0a:a0:
88:2d:dc:54:a5:05:17:9b:23:9b:90:6f:db:c3:b8:
ad:78:0b:20:05:40:c6:bb:8e:58:ab:8d:13:2c:49:
5d:b6:90:f5:32:ab:07:e6:99:cf:a2:ab:00:c1:9e:
b0:da:c9:f2:87:7e:90:6c:21:40:73:06:fd:b6:e6:
bf:04:d1:b3:7f:8e:d8:d2:88:e3:d8:99:42:20:19:
cc:8e:ac:14:b6:52:96:87:9b:52:d1:79:96:02:50:
2d:e3:e5:59:78:b4:9a:de:15:9e:ce:60:5e:e6:e7:
9d:e3:bb:58:79:11:8a:ab:ff:d9:fe:ba:49:5f:fd:
11:f5:8e:a6:43:3b:c5:9d:b2:ae:c6:2f:bf:4b:26:
24:80:5b:88:0c:36:69:93:ae:d3:55:e9:7a:aa:0c:
4a:0d:f5:7c:9b:28:be:b1:71:31:ed:84:1e:35:bb:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E7:F2:82:9A:7F:CA:35:9D:C8:BE:8D:F8:95:82:8F:58:7F:97:43
X509v3 Authority Key Identifier:
keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/CCC98C06516B11EBB8942876C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.197.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:58:ae:51:10:d4:d4:9e:8f:02:52:43:55:26:59:ec:df:92:
1d:bb:f8:80:65:6e:4e:e7:ec:dc:e0:b2:a1:c1:f6:01:91:72:
aa:bf:52:6b:ee:89:78:78:d1:93:c0:c4:08:5d:75:e1:67:72:
bd:a3:e0:d6:98:e5:35:01:4a:d6:8b:d2:ba:cb:65:31:f4:82:
1e:50:de:1a:e9:e0:62:20:27:ca:91:99:ab:bc:a7:a5:1d:92:
2d:5f:91:46:a2:b2:30:2a:48:a6:0b:fd:cb:fb:fb:7e:cd:9f:
42:ec:59:28:3e:9d:f2:ff:45:06:83:7c:17:f8:6c:1e:61:31:
3f:cb:d6:b8:cb:73:41:bb:80:76:dc:e0:bf:e4:84:ef:24:6e:
7a:b3:75:11:b3:88:41:7b:74:4b:16:a5:98:03:29:c2:79:8b:
a1:7e:6c:a4:8d:08:24:15:15:4e:93:ce:d3:2a:68:4e:de:12:
43:e1:77:c4:55:72:05:24:d8:30:cb:7b:a4:ec:1e:06:c3:74:
de:3e:82:92:f5:e3:8d:4c:26:70:9d:8f:0c:aa:9b:59:ab:89:
27:d6:8e:df:fd:e4:e3:00:ef:01:01:2d:36:24:2d:35:90:35:
24:27:6a:04:95:d6:34:7e:2b:a5:da:bb:96:1e:69:bd:19:05:
09:7d:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:27 2026 by rpki-client