
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/13208484C09311F0A7D8232BC4F9AE02.roa
File: 13208484C09311F0A7D8232BC4F9AE02.roa (raw, json)
Hash identifier: zlr6UQBMUyvgAlC88jG9jHU5lVu59fheFcyUu65KIAo=
Subject key identifier: 65:91:A3:ED:83:FA:A6:67:C3:28:B4:BF:39:F5:54:99:9A:53:64:21
Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD
Certificate serial: 020F
Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/13208484C09311F0A7D8232BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:07:35 +0000
ROA not before: Thu 13 Nov 2025 13:17:16 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137532
IP address blocks: 103.219.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl
rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD
Validity
Not Before: Nov 13 13:17:16 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45637-9fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:01:18:56:57:60:4e:b3:9a:56:3d:8f:ef:
74:7d:ab:0c:44:18:3f:3a:b4:9d:43:51:3e:ed:0f:
31:a0:06:6b:4a:bb:55:7d:7d:b8:66:14:f2:b0:9d:
38:9d:4b:46:b9:51:e8:d1:5f:50:3b:c4:af:9a:c2:
58:a8:2d:4e:8a:f2:2f:bb:f8:29:c5:f8:28:f2:1e:
27:cf:9e:57:08:a1:a0:04:3f:e6:56:eb:63:7e:7c:
87:ea:14:76:40:0b:2f:72:8e:7a:e2:c8:07:d9:cf:
f4:49:18:c6:df:d5:26:8f:14:1f:78:4b:fe:4b:df:
95:6e:18:bb:f0:af:f6:52:64:9a:7d:fd:5e:67:d0:
8b:0c:9b:1f:a9:6c:ab:bb:b8:5b:a9:13:8f:04:ce:
c4:5b:ac:70:0f:e2:5b:d2:fb:75:73:e0:93:e3:c1:
cf:84:3c:e8:95:a1:48:b8:cc:7c:80:e8:58:5c:15:
0c:12:40:5a:8e:bd:fd:4e:91:7c:cb:b4:b7:2e:bd:
1d:65:1f:23:f0:6b:bd:08:92:6c:ef:bb:fd:07:0b:
ad:60:52:5f:ce:23:83:14:2c:82:0d:18:ad:8b:e5:
41:71:93:65:24:56:f5:f0:4a:94:c4:ed:d9:ec:b2:
75:32:ee:35:d2:b8:38:a0:d8:b5:ca:73:3d:86:be:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:91:A3:ED:83:FA:A6:67:C3:28:B4:BF:39:F5:54:99:9A:53:64:21
X509v3 Authority Key Identifier:
keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/13208484C09311F0A7D8232BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:16:5e:24:4e:26:48:38:80:39:61:04:af:40:51:ab:c6:14:
de:12:e4:61:7e:ed:50:86:d5:91:41:09:a9:ad:b7:d9:f7:9d:
a4:36:dc:95:86:b5:d3:42:77:a8:9c:bb:d4:17:88:b9:d0:cb:
bb:26:cf:e6:da:a7:79:fa:34:b9:94:84:0d:ba:3a:4d:99:0a:
33:49:5b:bc:93:5f:5f:98:f1:f2:35:40:5d:2b:d9:10:fc:23:
a2:87:b4:d5:59:71:54:c6:94:f7:80:f7:73:62:82:bb:c3:ed:
09:7d:b8:d5:ec:c1:80:5a:01:86:04:16:f4:8b:23:3f:64:84:
76:aa:49:ca:7c:32:18:f6:8d:90:ad:a6:af:be:e1:81:5d:70:
4d:87:d1:81:81:2d:0d:a3:5b:f4:d5:a7:80:85:64:c6:aa:38:
fe:d6:7d:3e:22:c8:c4:ae:30:8a:c4:4c:3e:aa:53:d8:cd:ee:
f5:1e:0f:15:44:69:f7:eb:fc:ad:0b:74:9c:c0:33:bc:30:fc:
9c:82:54:91:db:b6:0a:50:95:f4:34:d7:03:a1:f8:e3:74:6e:
2a:7f:32:d5:20:63:49:9d:54:dc:a3:0e:5f:56:6a:64:71:3a:
7b:05:43:78:95:93:11:1d:8b:20:2e:d1:0f:68:0b:f9:4a:e0:
a9:44:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:45 2026 by rpki-client