
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
File: 507C31C21D7211EFA095B25AC4F9AE02.roa (raw, json)
Hash identifier: 2X6rU+Jt1kusg1IcBqKvM06CQwBTBfrmqQ7drmfa1tQ=
Subject key identifier: FE:95:22:56:21:AD:18:B8:6B:26:17:E4:FC:74:03:8F:B7:5C:A5:58
Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial: 015B
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:45:49 +0000
ROA not before: Fri 09 May 2025 05:17:06 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17559
IP address blocks: 203.14.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Validity
Not Before: May 9 05:17:06 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a29c-a188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:4e:16:43:f2:d0:7d:1b:d4:05:82:96:96:
96:86:b3:ff:00:5f:30:14:93:52:60:fd:f5:b3:12:
94:7b:62:af:bf:b3:a5:59:3f:2e:78:8c:12:9c:43:
e4:54:85:a1:7a:f1:f2:98:3c:8a:b3:0e:a9:17:97:
00:3b:d0:09:6d:bb:33:44:69:4a:2f:ba:69:b8:f3:
8e:f0:c5:00:30:59:c1:2c:16:5f:22:14:0d:3c:49:
5e:f3:4c:75:01:bc:ec:53:f2:f7:ce:db:22:4e:a1:
7d:d3:6a:ad:4d:3e:7f:04:14:56:2b:ce:7f:47:40:
36:07:b3:79:ee:11:50:fe:0a:44:12:ff:39:a8:fc:
92:81:87:8d:11:4e:bd:bf:d0:bd:7e:3a:82:f7:3f:
19:b6:b9:9c:5e:80:03:4a:6a:c2:9b:fe:1d:8b:34:
04:4f:8a:90:59:28:84:2b:da:ef:03:04:45:d7:7b:
4d:6e:7e:95:91:38:49:76:32:04:d9:9b:a7:3d:fa:
0f:92:98:53:80:a8:71:67:b5:0f:b8:73:9c:6c:c8:
f4:9e:4f:f4:cb:99:ec:d0:fe:4a:d4:36:51:72:09:
58:17:d9:47:26:6a:27:9e:34:71:68:28:a5:b1:a0:
97:51:b5:8b:5a:42:72:19:2e:e8:f8:24:f2:a6:61:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:95:22:56:21:AD:18:B8:6B:26:17:E4:FC:74:03:8F:B7:5C:A5:58
X509v3 Authority Key Identifier:
keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.14.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ec:cb:1a:0e:ce:68:a4:1c:59:34:88:de:87:7e:de:23:ca:
23:32:ad:e2:eb:b0:c8:65:e3:45:86:d5:6e:7d:4d:cc:92:2b:
7e:37:86:f0:a6:3d:93:20:03:91:06:34:06:96:6e:7e:54:11:
44:18:b4:4f:38:b9:36:93:e7:2d:59:53:7f:6b:ff:e5:3b:0e:
34:7d:07:df:b3:bc:5b:c3:c9:07:7a:5c:a5:f6:be:da:d6:53:
14:d5:d9:3d:f3:54:e9:6f:f9:36:cd:1d:21:33:08:c9:a9:67:
20:0a:48:2a:3f:f0:25:6f:05:4f:c4:db:42:bf:86:f8:4e:69:
ba:ab:c7:c2:7e:1c:cb:8f:79:da:ae:a7:4c:35:9b:f3:03:48:
f3:3e:b0:09:41:8c:15:3f:00:33:d2:04:65:cf:92:11:8e:a9:
fa:46:f0:a2:e5:85:b3:a0:25:03:c2:ba:c9:1b:f3:44:41:22:
c9:8a:d2:42:6e:24:b7:58:6a:8c:cc:d5:b0:72:d3:45:cf:c4:
5a:f8:c4:2a:82:a8:f4:5e:bb:ef:14:d5:5a:82:d9:56:51:42:
94:da:2f:44:51:a1:15:c2:f4:1c:ce:2d:0a:48:c9:1c:be:c0:
e0:1c:77:97:8d:34:af:c5:46:61:dd:0f:76:18:47:19:9e:ab:
96:a0:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:45 2026 by rpki-client