
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa
File: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (raw, json)
Hash identifier: XxGdk2TiWSYL+s9+eYriQGRBlu9vhfdeWmlV4N+TUNs=
Subject key identifier: BD:B6:7F:48:2E:0D:9D:3D:D5:3F:3A:33:CE:13:E8:44:A1:AC:88:E6
Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Certificate serial: 0107
Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:28:36 +0000
ROA not before: Tue 25 Nov 2025 09:02:48 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 45491
IP address blocks: 103.109.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Validity
Not Before: Nov 25 09:02:48 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59084-d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:1c:00:53:97:0f:7a:29:b6:15:9e:67:bb:
bb:fc:c6:f6:04:f2:fa:17:02:00:5a:4c:b2:bd:4c:
11:e6:f1:f5:50:7d:98:8b:ec:86:9f:be:26:3c:93:
d5:91:05:f7:c7:3a:c2:ab:75:f4:a1:04:88:ce:6c:
2b:f0:0c:90:f4:88:8f:57:0e:f9:73:e9:ee:09:bc:
4c:68:86:89:c3:9d:54:62:c5:ac:1a:e1:f3:d8:9e:
af:6d:2c:dd:d2:71:2e:84:ee:80:58:c4:2e:0d:96:
c1:20:43:9b:bc:b8:6d:6a:07:8c:02:23:a7:7f:85:
ce:e8:a6:74:24:04:0c:55:22:93:fd:48:f5:e0:c1:
97:57:4b:aa:6a:fd:89:26:8d:71:75:f9:a9:c9:0e:
f3:98:16:eb:2f:1a:a0:77:59:fe:e4:99:56:5d:5a:
5b:ca:0f:c4:76:65:04:ea:d5:ca:9a:9d:e1:c9:b5:
a4:c4:5f:64:97:8b:e4:b6:05:31:03:55:30:97:4c:
a5:fb:3f:f4:1c:7b:d2:34:a9:6d:3e:45:cb:2c:94:
73:17:1b:f8:29:4a:27:93:90:63:bd:70:17:5f:ff:
57:fc:3b:9c:c0:fd:c5:13:7a:e9:a1:7e:bb:72:8b:
40:90:04:02:d1:0f:53:7a:9b:0a:71:75:01:82:a9:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B6:7F:48:2E:0D:9D:3D:D5:3F:3A:33:CE:13:E8:44:A1:AC:88:E6
X509v3 Authority Key Identifier:
keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/835EF5A2C9DD11F09DEB004DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:46:01:7f:69:23:3f:44:30:d7:c2:ee:2b:4b:bd:9f:46:da:
72:f1:c7:6b:f1:a7:ee:ce:04:24:c7:d6:24:71:10:44:78:c3:
da:5b:bd:a9:1d:75:64:33:89:4c:6e:11:d3:a3:ef:e1:fb:47:
09:5e:d4:50:25:81:4b:60:47:4d:64:ac:65:a0:ed:7b:8c:22:
56:93:79:d5:88:19:9f:db:89:fa:07:a8:b7:b9:89:bf:be:40:
11:be:14:07:15:04:da:75:02:b2:1c:f3:7c:4b:71:01:50:2f:
b5:4c:2f:81:d9:f6:7e:6c:93:24:3e:bf:f4:dc:bb:29:33:4d:
45:91:7b:61:a4:64:50:4e:14:95:c5:86:c1:76:73:43:40:1e:
4e:66:e6:d4:d6:7e:71:b2:8f:41:67:23:5a:ec:56:ca:0b:6a:
00:bc:63:85:c3:75:06:f9:85:0f:e0:4c:45:c5:03:b8:ba:25:
cb:5a:7c:a0:a9:2f:ee:87:51:d2:a0:88:1e:e5:83:0a:b1:f3:
8a:db:d8:45:82:aa:23:92:43:42:c9:71:d6:93:13:ba:e1:95:
8e:e2:89:8e:79:f5:75:93:f0:71:41:ef:c3:82:2f:ed:98:9d:
a4:0f:73:eb:a3:d2:75:10:42:81:08:bd:c3:d3:77:73:40:23:
99:34:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:10 2026 by rpki-client