
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa
File: 7633392033B411EB98035F74C4F9AE02.roa (raw, json)
Hash identifier: p6hXF7E6xlvbRKYmPzeG7CcENSLwetloa0sJ8/RE+N0=
Subject key identifier: 92:7B:BF:D9:33:7B:D7:AD:41:4A:CE:F9:AF:4A:FF:5A:79:0D:36:11
Certificate issuer: /CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Certificate serial: 07C1
Authority key identifier: BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:27:37 +0000
ROA not before: Thu 18 Sep 2025 22:03:39 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138339
IP address blocks: 103.130.148.0/22 maxlen: 22
2403:bc40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985 (0x7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCA34, serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Validity
Not Before: Sep 18 22:03:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a430b9-838c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:39:1e:f4:18:12:1b:87:36:c7:81:1d:16:
d5:ee:ae:d0:99:f9:69:7b:2c:53:53:9b:89:5d:50:
3e:73:6e:a7:a8:08:f2:09:b4:b6:96:c8:64:53:96:
f0:5d:fc:7a:5a:94:2c:91:82:07:66:e3:96:41:f2:
bb:3e:f2:68:b0:f2:47:ac:25:7c:9c:69:2a:d5:c5:
e1:4b:16:bf:f8:e7:60:91:37:b8:07:d6:75:0b:b8:
f1:46:84:43:6a:3f:64:51:eb:97:60:c2:d5:f0:44:
eb:a9:05:b0:e4:f8:8d:bf:1c:98:a9:72:88:1e:00:
b6:c9:4b:76:43:09:2c:c4:1d:85:82:a9:f6:78:7b:
b5:7a:ea:aa:d8:df:73:e6:98:4e:2e:85:e8:14:06:
65:97:b6:83:54:57:f9:8f:e8:97:7b:44:e5:d1:17:
b6:ea:c5:03:42:d1:7b:07:b3:6e:9f:0e:25:1f:01:
ad:fd:9d:4b:49:5f:03:b0:98:86:b7:59:26:01:52:
40:da:38:df:07:79:3a:64:de:be:d6:37:95:76:c6:
4e:6f:a8:c8:07:60:1f:8f:5d:0e:fb:d2:07:7b:a5:
b0:35:2e:c9:fe:c9:86:03:59:b6:65:9c:1c:80:ce:
e1:ff:37:65:f0:d2:68:fe:63:38:cb:1d:cd:70:ef:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:BF:D9:33:7B:D7:AD:41:4A:CE:F9:AF:4A:FF:5A:79:0D:36:11
X509v3 Authority Key Identifier:
keyid:BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.130.148.0/22
IPv6:
2403:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
b4:0b:9b:9f:e8:06:55:c6:aa:85:42:c1:70:35:c8:c2:65:78:
21:12:45:b2:81:ba:bb:8e:52:0a:5d:69:31:88:e6:3c:96:84:
c8:29:40:2e:4d:7f:c5:fc:ac:8b:1b:3a:35:da:f7:6c:03:86:
fd:7a:b3:11:cc:11:ca:a0:1b:8b:f2:ba:23:21:19:6c:d2:d6:
06:50:21:7b:d8:3a:09:35:bb:7a:4d:18:83:97:d7:90:57:be:
28:51:2f:5b:ce:e0:93:c7:c6:4b:90:36:8c:d3:8c:21:86:00:
bb:3f:2b:03:41:f6:2d:31:f3:8d:6f:77:cc:9b:33:65:6e:64:
d7:a3:17:a0:0b:1e:7a:b5:11:79:7f:77:f6:6d:ff:e4:07:88:
be:54:65:4b:a6:88:ad:7d:32:bb:ff:5f:3c:1f:39:f8:60:25:
63:8d:6f:28:0b:a0:64:9e:d3:02:d1:8e:e3:61:cf:8e:d1:f6:
50:c1:0e:42:73:ee:15:bd:42:d4:2d:c5:f2:30:53:9c:29:d7:
62:9e:f3:90:ad:c1:87:a4:fb:66:5e:8b:b8:a9:2c:82:7c:c5:
43:e5:da:6a:9e:88:29:d3:8f:35:f9:ca:ee:39:91:42:0f:a2:
f0:f2:2d:21:26:32:ce:ea:e5:eb:22:3b:ee:30:e8:2e:9a:a9:
72:9f:b5:b3
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NBMzQxMTAvBgNVBAUTKEJDMTQ0OUVFOTc5MTExQUI3MEQ4REY5OERBQkE0RTI2
QkE2QkM2NUIwHhcNMjUwOTE4MjIwMzM5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzBiOS04MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZk5HvQYEhuHNseBHRbV7q7QmflpeyxTU5uJXVA+c26nqAjyCbS2lshkU5bw
Xfx6WpQskYIHZuOWQfK7PvJosPJHrCV8nGkq1cXhSxa/+OdgkTe4B9Z1C7jxRoRD
aj9kUeuXYMLV8ETrqQWw5PiNvxyYqXKIHgC2yUt2QwksxB2Fgqn2eHu1euqq2N9z
5phOLoXoFAZll7aDVFf5j+iXe0Tl0Re26sUDQtF7B7Nunw4lHwGt/Z1LSV8DsJiG
t1kmAVJA2jjfB3k6ZN6+1jeVdsZOb6jIB2Afj10O+9IHe6WwNS7J/smGA1m2ZZwc
gM7h/zdl8NJo/mM4yx3NcO8jJQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJJ7v9kz
e9etQUrO+a9K/1p5DTYRMB8GA1UdIwQYMBaAFLwUSe6XkRGrcNjfmNq6Tia6a8Zb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0EzNC82RkFBMzY3ODMz
QjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVhdHcyTi1ZMnJwT0pycHJ4
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZCUko3cGVSRWF0dzJOLVkycnBPSnJwcnhscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0NBMzQvNkZBQTM2NzgzM0IyMTFFQkE4OEEwQTZGQzRGOUFFMDIvNzYzMzM5MjAz
M0I0MTFFQjk4MDM1Rjc0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ4KUMA0EAgACMAcDBQAkA7xAMA0GCSqGSIb3DQEBCwUAA4IBAQC0
C5uf6AZVxqqFQsFwNcjCZXghEkWygbq7jlIKXWkxiOY8loTIKUAuTX/F/KyLGzo1
2vdsA4b9erMRzBHKoBuL8rojIRls0tYGUCF72DoJNbt6TRiDl9eQV74oUS9bzuCT
x8ZLkDaM04whhgC7PysDQfYtMfONb3fMmzNlbmTXoxegCx56tRF5f3f2bf/kB4i+
VGVLpoitfTK7/188Hzn4YCVjjW8oC6BkntMC0Y7jYc+O0fZQwQ5Cc+4VvULULcXy
MFOcKddinvOQrcGHpPtmXou4qSyCfMVD5dpqnogp0481+cruOZFCD6Lw8i0hJjLO
6uXrIjvuMOgumqlyn7Wz
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:42 2026 by rpki-client