
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa
File: 659779341A4511EAA4C46765C4F9AE02.roa (raw, json)
Hash identifier: jueT/sEIfGhcIX+lfDsoQuvBQ/fe7qQfDHT4nVQj/TQ=
Subject key identifier: E4:7D:FF:00:B9:D5:16:DF:20:E8:93:4C:3B:8F:9D:3E:C3:BB:1C:38
Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Certificate serial: 0C68
Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:24:41 +0000
ROA not before: Fri 30 May 2025 19:13:33 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137575
IP address blocks: 103.113.244.0/24 maxlen: 24
103.113.245.0/24 maxlen: 24
103.115.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 18:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Validity
Not Before: May 30 19:13:33 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a405d9-d62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:2b:9a:35:7c:53:e0:c0:4e:2b:ea:7e:13:
02:97:3a:d4:e6:f0:6b:0c:26:35:dd:6c:ad:de:09:
f9:21:cc:89:6f:84:81:d9:05:6d:33:7f:4c:c6:19:
9e:c2:20:75:b7:26:f0:39:90:43:31:13:c9:20:65:
6a:0e:81:fa:fe:e3:7b:8f:e2:17:68:20:bf:e1:5e:
46:c4:02:20:67:5c:7b:4c:fd:f3:d6:6a:61:d2:7b:
55:6e:42:9d:b1:50:f9:e3:df:1c:54:5f:63:dd:6d:
ba:f9:f5:73:67:ea:ac:6b:79:e9:c1:96:68:f8:97:
84:c6:c6:be:65:d2:3d:ce:8a:ef:bb:26:dc:ee:da:
83:15:65:22:8f:2a:49:91:d0:cc:f9:5c:48:96:e9:
10:50:6e:5f:12:c6:2d:18:26:b3:05:ae:ac:68:40:
3a:37:46:26:e1:14:50:de:f9:59:fe:e9:1c:8b:4a:
53:38:51:ca:e1:46:98:6a:f3:33:ec:a2:ab:41:f0:
76:49:15:e0:ff:ea:a3:62:fe:7f:20:dd:85:db:cd:
72:79:f2:0c:f6:bc:2e:03:4d:f1:d3:9a:b0:81:2c:
8a:79:4a:3d:55:c3:12:1c:7b:13:9b:64:1f:31:6f:
a3:1d:9c:de:dc:00:d5:26:ea:29:d9:bf:80:7f:9e:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7D:FF:00:B9:D5:16:DF:20:E8:93:4C:3B:8F:9D:3E:C3:BB:1C:38
X509v3 Authority Key Identifier:
keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.244.0/23
103.115.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3e:dd:73:a2:88:17:f7:b9:3f:7f:8d:97:2e:2c:a9:f0:52:
f6:c6:14:04:c3:cd:2d:9f:d2:5d:e7:57:00:ae:6e:83:24:91:
59:44:94:1c:d1:e4:a3:bf:db:98:5b:03:13:11:9c:fd:91:4d:
44:4d:18:d0:b3:f4:54:14:ad:99:dc:04:38:0f:72:47:45:a9:
69:ec:fb:a9:8a:70:85:83:70:b1:76:bc:3e:94:f6:c9:63:94:
f0:91:59:d7:75:80:b3:4f:e6:20:31:59:8b:d8:94:80:85:14:
5c:cf:0d:33:58:ce:b0:0f:18:11:43:81:0d:c6:5b:72:cd:55:
57:7c:10:32:a5:6f:73:e0:cc:6d:61:2b:ef:b8:bd:c2:30:5c:
31:fc:50:85:e7:92:75:b1:31:63:4f:34:94:53:c8:11:25:b1:
3e:1c:29:dc:2b:24:9d:02:55:17:5c:77:b5:6c:bf:aa:85:5a:
4d:80:ef:22:13:76:dc:da:d0:c0:5e:ed:ed:e7:be:07:53:6c:
43:5b:f9:9f:dc:35:ec:a2:bc:ff:c7:46:5d:ab:30:18:a2:15:
5a:b7:3b:43:36:90:23:88:db:0d:36:3f:59:43:0b:a2:51:42:
5f:23:15:13:dd:a8:29:53:c7:bf:94:4a:b9:72:55:32:3e:a3:
d9:09:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:48:59 2026 by rpki-client