
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/5705E30EFC7A11E8BFCC760AC4F9AE02.roa
File: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (raw, json)
Hash identifier: DIyg3hCr1Y9NdOfgeI/ZXFfK6SpzJryy3dSC2tBY21k=
Subject key identifier: BF:35:7E:17:58:18:FF:6D:5D:06:99:DF:EF:F0:79:E4:F9:9E:0D:83
Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial: 1971
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/5705E30EFC7A11E8BFCC760AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:00:31 +0000
ROA not before: Mon 27 Oct 2025 03:32:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 137962
IP address blocks: 103.99.50.0/24 maxlen: 24
103.99.51.0/24 maxlen: 24
103.118.81.0/24 maxlen: 24
2403:29c0:20::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6513 (0x1971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Validity
Not Before: Oct 27 03:32:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a470af-8bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:ee:d8:46:49:9f:ef:ab:ac:c8:4c:94:4e:
a1:a2:19:88:3e:df:b0:cc:02:e6:fd:be:7b:4b:85:
1f:25:f5:b9:2d:81:d4:3c:ac:e9:7e:c3:62:95:16:
94:29:3e:c1:a9:d1:47:1d:13:f9:05:0f:9c:80:5f:
d3:19:a2:23:ee:f8:59:e0:0d:f6:52:aa:9a:4e:d8:
a8:e4:ee:09:79:1c:ca:a4:8d:fd:b0:8f:1a:12:38:
04:62:6e:05:21:7e:1c:57:6f:a2:9a:98:52:64:17:
42:17:34:95:63:1d:f1:0b:ad:e2:97:f2:b7:1e:3f:
fd:93:8e:6b:3c:4b:94:83:1e:5e:ba:16:e1:ed:34:
fc:c4:3e:fe:5d:49:d0:f4:69:65:65:cb:e7:1a:10:
ad:81:71:ce:fe:02:91:29:bf:9e:34:46:01:09:1c:
64:78:49:24:cb:ee:13:c7:cc:d8:2b:6d:05:17:94:
e5:8d:3a:2e:a2:57:cc:9e:1e:30:37:a1:91:1c:60:
c8:80:6b:15:90:50:b3:3c:28:ac:54:1d:b2:4a:00:
23:2d:ad:e0:d5:1d:0a:2f:f7:6c:05:d9:a4:4f:f6:
af:2f:91:6b:5a:e8:04:b2:df:6e:5f:63:4b:af:67:
56:01:7c:fc:cc:52:ba:b3:41:68:35:8a:fa:44:b5:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:7E:17:58:18:FF:6D:5D:06:99:DF:EF:F0:79:E4:F9:9E:0D:83
X509v3 Authority Key Identifier:
keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/5705E30EFC7A11E8BFCC760AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.50.0/23
103.118.81.0/24
IPv6:
2403:29c0:20::/47
Signature Algorithm: sha256WithRSAEncryption
ae:ec:b9:72:0c:41:39:a4:6a:36:b3:49:cc:99:4b:77:49:34:
3e:66:b2:cd:32:23:8a:e1:b9:35:86:1a:16:21:91:da:e7:69:
5c:87:88:45:3e:68:fa:00:27:95:a9:a8:6f:45:65:21:11:8b:
b5:87:c8:bf:7b:d7:9a:bc:02:be:78:bc:45:a1:64:7a:51:17:
73:65:8a:c2:82:df:0d:5a:a6:70:9b:17:88:03:53:91:77:ed:
9d:8f:18:cc:01:fb:03:1c:67:03:c0:81:86:c9:d5:99:53:4c:
78:cf:d5:6a:82:8b:0c:e9:f4:af:6e:66:fe:3b:97:62:8b:f7:
47:bf:6f:50:57:29:91:87:d0:9d:45:50:0f:56:ae:90:67:01:
c0:a3:50:ea:56:3d:41:5a:be:57:ed:a8:42:af:9d:59:52:e8:
e9:07:d1:f8:70:f8:c5:06:f5:f0:a0:0e:29:41:94:f3:bc:e1:
06:83:9f:b2:29:23:7f:ea:63:26:31:4c:64:26:fe:d6:8f:d4:
4d:31:57:04:2d:00:2b:9c:60:90:bf:65:3d:4d:3c:7e:77:1d:
00:fa:22:92:af:cb:0b:b0:bd:1b:5f:30:de:3b:9b:70:fa:7b:
5f:ae:79:96:f9:67:b4:b6:ac:18:6a:91:7d:87:d2:3f:29:af:
a9:24:e4:b2
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICGXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG
OEFCQUQxQjAwHhcNMjUxMDI3MDMzMjU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzBhZi04YmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Qju2EZJn++rrMhMlE6hohmIPt+wzALm/b57S4UfJfW5LYHUPKzpfsNilRaU
KT7BqdFHHRP5BQ+cgF/TGaIj7vhZ4A32UqqaTtio5O4JeRzKpI39sI8aEjgEYm4F
IX4cV2+imphSZBdCFzSVYx3xC63il/K3Hj/9k45rPEuUgx5euhbh7TT8xD7+XUnQ
9GllZcvnGhCtgXHO/gKRKb+eNEYBCRxkeEkky+4Tx8zYK20FF5TljTouolfMnh4w
N6GRHGDIgGsVkFCzPCisVB2ySgAjLa3g1R0KL/dsBdmkT/avL5FrWugEst9uX2NL
r2dWAXz8zFK6s0FoNYr6RLX2LQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFL81fhdY
GP9tXQaZ3+/weeT5ng2DMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2
REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0RFQjMvNUQ3MzVENDY5NkRFMTFFN0JBN0QyQTc3QzRGOUFFMDIvNTcwNUUzMEVG
QzdBMTFFOEJGQ0M3NjBBQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQBZ2MyAwQAZ3ZRMA8EAgACMAkDBwEkAynAACAwDQYJKoZIhvcNAQEL
BQADggEBAK7suXIMQTmkajazScyZS3dJND5mss0yI4rhuTWGGhYhkdrnaVyHiEU+
aPoAJ5WpqG9FZSERi7WHyL9715q8Ar54vEWhZHpRF3NlisKC3w1apnCbF4gDU5F3
7Z2PGMwB+wMcZwPAgYbJ1ZlTTHjP1WqCiwzp9K9uZv47l2KL90e/b1BXKZGH0J1F
UA9WrpBnAcCjUOpWPUFavlftqEKvnVlS6OkH0fhw+MUG9fCgDilBlPO84QaDn7Ip
I3/qYyYxTGQm/taP1E0xVwQtACucYJC/ZT1NPH53HQD6IpKvywuwvRtfMN47m3D6
e1+ueZb5Z7S2rBhqkX2H0j8pr6kk5LI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:39 2026 by rpki-client