
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CE9A1068FD0B11F0B45A79BF3A6F56BC.roa
File: CE9A1068FD0B11F0B45A79BF3A6F56BC.roa (raw, json)
Hash identifier: NKMZFolC9Hm7C/oEEm0Kbb0cMaxbYq9rJ+XoFzJAzo0=
Subject key identifier: 30:25:30:34:0A:FC:95:73:A7:CE:DA:0B:E1:1D:82:4C:B3:C7:8E:B7
Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial: BF
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CE9A1068FD0B11F0B45A79BF3A6F56BC.roa
Signing time: Sun 01 Mar 2026 19:25:27 +0000
ROA not before: Thu 29 Jan 2026 12:12:40 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45905
IP address blocks: 103.77.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Validity
Not Before: Jan 29 12:12:40 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a492a7-734d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:62:2c:5a:82:71:d2:e1:a1:35:d7:4d:ed:
50:65:d9:b1:14:11:bd:4a:bc:59:98:96:f9:5a:79:
df:db:ca:40:eb:ac:50:d3:c0:c2:b2:f6:69:fa:dd:
ec:6b:98:be:36:7b:73:1d:b5:fc:8d:8b:2b:97:d3:
de:e5:76:c8:9f:86:8c:2e:fa:48:ed:61:28:51:9d:
84:a9:d5:ea:e6:72:84:99:a0:75:2a:00:96:e2:b6:
94:1b:5f:21:73:bc:88:06:31:9c:b7:18:1c:4c:67:
10:e8:13:54:9f:fc:67:16:9a:9b:6b:3e:87:d7:ec:
52:1b:77:79:df:dd:49:03:47:ce:0b:f8:40:79:5c:
37:3a:8e:07:52:42:f9:c3:62:df:fc:34:5f:ac:b2:
75:aa:54:1f:01:82:8c:62:52:56:b3:7e:ec:dd:9c:
aa:30:45:a5:65:f1:b1:70:c1:de:13:d6:b6:2a:e7:
86:f5:67:ce:9a:da:20:f9:7d:6b:88:d9:77:b3:8b:
89:3c:2f:d2:45:28:a6:1c:35:74:96:a7:32:0a:7f:
4a:eb:fc:b7:b0:68:3a:a6:45:77:d2:85:fb:42:cb:
47:36:bb:d5:24:76:ca:f5:ae:4c:aa:46:fe:c8:63:
6d:ba:cf:c8:e4:83:ed:59:31:af:eb:a1:c1:34:6a:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:30:34:0A:FC:95:73:A7:CE:DA:0B:E1:1D:82:4C:B3:C7:8E:B7
X509v3 Authority Key Identifier:
keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CE9A1068FD0B11F0B45A79BF3A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.100.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f9:f8:59:c1:87:24:d2:70:dd:6d:06:dd:de:db:2a:fd:13:
0a:65:09:ec:a2:1c:3a:d9:27:f6:d9:44:ad:50:73:bd:94:38:
46:ad:cd:4a:54:30:a4:bf:f5:b4:01:fa:94:23:45:31:84:fe:
36:7b:56:3c:c8:a4:16:dd:58:19:63:70:ab:e8:ae:06:ca:72:
19:5f:5a:8a:7b:9b:0c:41:19:f7:18:fb:55:64:52:69:18:e2:
33:9c:00:d7:ab:ed:70:71:c1:0d:b5:4c:d7:ac:45:36:b5:03:
c8:89:83:5a:ca:99:ec:20:3c:36:63:2e:a8:ff:c1:42:04:0b:
e6:0f:c8:d7:14:7c:a2:50:79:2c:4f:27:da:a4:23:07:83:59:
9a:d4:1f:00:f4:d1:bd:1b:93:eb:28:e3:63:c9:6c:33:0a:ca:
4d:9f:57:e2:48:63:96:29:22:6e:50:9f:b5:8b:d2:b6:68:c3:
3f:52:3f:b9:18:87:59:a1:ae:af:32:ce:ab:3c:01:70:a5:6b:
ac:39:cc:6e:09:07:b2:97:91:7d:7c:b4:7e:45:57:94:a5:27:
60:60:7a:f9:41:cd:45:47:fd:41:3e:b8:14:69:64:1a:ad:c8:
22:7c:ab:42:fb:55:71:3c:41:f7:7d:f5:c7:01:d1:48:3e:0f:
9b:c8:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:55 2026 by rpki-client