
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa
File: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (raw, json)
Hash identifier: RqxDx9bCRY+0s397irGG8bkIt+cY6kmLOparLyvTxmk=
Subject key identifier: 4E:31:4F:5E:90:B3:D3:09:0C:0C:77:84:56:31:AD:40:13:D1:14:D3
Certificate issuer: /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial: 0217
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:34:56 +0000
ROA not before: Sat 07 Jun 2025 03:43:03 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135158
IP address blocks: 103.69.78.0/24 maxlen: 24
103.69.79.0/24 maxlen: 24
2400:f960::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Validity
Not Before: Jun 7 03:43:03 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3de10-9969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:70:3b:17:38:53:66:08:08:cd:78:ff:ca:
88:09:82:23:c9:c0:f1:92:de:4c:ac:d4:1e:de:d7:
44:fa:ca:b4:5b:69:c4:74:04:be:1a:7e:cc:99:9b:
a3:16:41:83:82:b6:e1:e3:ca:36:31:16:ec:0b:a2:
a3:d1:84:ea:f5:08:ed:c0:b1:64:3c:62:bf:af:33:
83:5d:84:c4:4b:e1:bc:5c:a9:47:97:6a:10:a6:e6:
ca:0d:c1:33:78:c9:74:83:38:4b:41:91:be:86:48:
e1:bd:81:6e:5d:ae:e1:6c:dd:52:21:1b:1b:0e:25:
34:0e:d7:ce:a8:1d:52:8b:c1:37:b9:5d:6c:e1:ae:
e9:60:a7:f5:b0:46:4c:27:cd:27:65:46:fc:44:18:
83:c8:98:72:a1:2c:3b:d7:c4:65:0d:09:4e:6e:20:
96:2b:bc:ef:dc:51:9d:cf:df:11:f6:79:41:e2:b3:
b6:1e:d8:56:eb:be:47:3f:f4:1e:6f:64:d5:33:3e:
76:98:9f:33:5b:3f:37:ee:c3:54:44:17:5b:f8:62:
0e:91:af:a2:6e:d7:5e:6f:ad:76:88:a4:b3:37:1b:
20:1e:cb:da:06:4d:6c:3b:7d:00:ef:aa:25:39:a0:
f2:bf:f9:e5:98:cd:2b:40:8f:fc:62:33:63:44:dd:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:31:4F:5E:90:B3:D3:09:0C:0C:77:84:56:31:AD:40:13:D1:14:D3
X509v3 Authority Key Identifier:
keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.78.0/23
IPv6:
2400:f960::/36
Signature Algorithm: sha256WithRSAEncryption
bc:fc:38:9a:5d:f2:c9:a0:b8:f4:85:80:d6:1c:9f:19:58:70:
54:03:1c:86:ec:52:b4:eb:e4:37:bf:04:19:15:00:cc:48:fb:
95:75:ac:26:53:46:17:8f:08:0d:82:be:d5:36:d7:39:d4:1d:
0b:2e:f7:63:88:61:43:7a:eb:c1:ca:e7:a7:cd:3b:3a:1f:1a:
ff:22:04:10:a7:7a:ac:15:5f:e9:9d:a5:4f:ab:01:a2:b5:db:
c0:09:3d:80:cb:f0:56:97:6b:45:20:1a:d3:1e:3b:2d:a2:bc:
6b:b1:ea:fb:4d:98:eb:21:66:37:1a:50:84:76:69:1a:f3:60:
76:e4:f7:c0:24:88:3d:3c:66:bf:f6:bd:78:b5:e7:be:95:eb:
ee:16:54:84:51:4d:c9:de:5c:f9:70:9a:07:61:62:95:30:be:
de:21:45:74:2c:24:b1:6f:9c:ed:c0:d0:e3:92:80:17:7d:be:
3e:d8:af:c1:27:2e:24:88:83:58:1f:b9:41:2e:67:4e:1f:e8:
b8:8d:ba:8f:61:b3:94:48:33:57:f7:75:43:b7:f5:15:fa:60:
9b:41:89:47:21:58:9b:b9:e6:7f:34:4a:82:07:d3:b6:45:81:
1a:48:49:91:66:64:02:11:77:b6:12:ca:a8:c0:ea:2d:83:39:
43:14:12:04
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I3NjMxMTAvBgNVBAUTKDMzNTEyRjlDNjc2QzMwOUUzNUYzNTU4RjAzQjlBRTY0
MTlCRjc0MTUwHhcNMjUwNjA3MDM0MzAzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZGUxMC05OTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo6VwOxc4U2YICM14/8qICYIjycDxkt5MrNQe3tdE+sq0W2nEdAS+Gn7MmZuj
FkGDgrbh48o2MRbsC6Kj0YTq9QjtwLFkPGK/rzODXYTES+G8XKlHl2oQpubKDcEz
eMl0gzhLQZG+hkjhvYFuXa7hbN1SIRsbDiU0DtfOqB1Si8E3uV1s4a7pYKf1sEZM
J80nZUb8RBiDyJhyoSw718RlDQlObiCWK7zv3FGdz98R9nlB4rO2HthW675HP/Qe
b2TVMz52mJ8zWz837sNURBdb+GIOka+ibtdeb612iKSzNxsgHsvaBk1sO30A76ol
OaDyv/nlmM0rQI/8YjNjRN2WywIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFE4xT16Q
s9MJDAx3hFYxrUAT0RTTMB8GA1UdIwQYMBaAFDNRL5xnbDCeNfNVjwO5rmQZv3QV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2My84RjAyMUY4OEU5
QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01KNDE4MVdQQTdtdVpCbV9k
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00xRXZuR2RzTUo0MTgxV1BBN211WkJtX2RCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0I3NjMvOEYwMjFGODhFOUE3MTFFREIxQzZCMTQxQzRGOUFFMDIvMUZCOEFBNThF
OUFCMTFFRDhCNjE0QzQzQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM
BAIAATAGAwQBZ0VOMA4EAgACMAgDBgQkAPlgADANBgkqhkiG9w0BAQsFAAOCAQEA
vPw4ml3yyaC49IWA1hyfGVhwVAMchuxStOvkN78EGRUAzEj7lXWsJlNGF48IDYK+
1TbXOdQdCy73Y4hhQ3rrwcrnp807Oh8a/yIEEKd6rBVf6Z2lT6sBorXbwAk9gMvw
VpdrRSAa0x47LaK8a7Hq+02Y6yFmNxpQhHZpGvNgduT3wCSIPTxmv/a9eLXnvpXr
7hZUhFFNyd5c+XCaB2FilTC+3iFFdCwksW+c7cDQ45KAF32+PtivwScuJIiDWB+5
QS5nTh/ouI26j2GzlEgzV/d1Q7f1Ffpgm0GJRyFYm7nmfzRKggfTtkWBGkhJkWZk
AhF3thLKqMDqLYM5QxQSBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:14 2026 by rpki-client