
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa
File: 111C77744E1811EDADB36913C4F9AE02.roa (raw, json)
Hash identifier: d1iO3gAzVwzGco48zES+x8THVQiyCm25qGNJbQLDHWQ=
Subject key identifier: F2:48:BD:49:8F:B1:DC:58:9F:23:55:FD:20:36:FD:3D:EC:59:EB:90
Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial: 0284
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:09:49 +0000
ROA not before: Mon 07 Apr 2025 02:08:52 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 58876
IP address blocks: 103.8.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Validity
Not Before: Apr 7 02:08:52 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a4025d-fe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:14:21:26:45:b2:c1:0b:20:47:87:ee:54:
87:a1:81:e2:86:bb:3d:fc:1a:aa:25:41:6c:6d:dd:
95:64:3f:62:8d:86:c7:ee:41:2a:41:e0:a6:c9:10:
51:a4:12:23:1f:08:82:bc:c9:9f:86:61:7f:c2:d1:
33:94:c4:e8:fd:b5:58:9b:3e:2c:d0:3d:0f:68:74:
bd:11:7b:67:8e:bb:f6:8c:fc:a8:19:21:14:74:34:
ad:57:ed:70:05:82:a6:dd:0e:66:09:69:47:76:05:
e2:6d:c9:dc:8f:c3:b4:c2:77:e6:b2:df:54:8f:a1:
9b:3b:f2:9c:7e:0c:ea:58:56:2c:47:b9:7c:01:6b:
c7:2b:86:96:b1:a0:c5:7a:75:63:03:9e:1a:82:63:
5e:6f:fc:b3:94:c6:e6:a7:a7:32:2d:12:02:b8:9e:
17:f1:2a:1d:ec:52:aa:2f:f8:bc:ff:09:bf:68:2c:
a4:3d:6d:3b:08:f7:3b:c2:1c:6b:ba:8f:22:e8:5f:
60:7b:73:86:cc:10:f2:63:48:6e:73:47:ef:bc:64:
d5:d6:2a:39:c7:61:ef:89:2a:c6:41:0b:55:09:97:
ae:49:4b:17:eb:f3:eb:ea:a6:f4:2a:cb:12:d5:82:
7c:5c:20:c1:32:64:0f:66:1f:23:20:f9:92:8f:9d:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:48:BD:49:8F:B1:DC:58:9F:23:55:FD:20:36:FD:3D:EC:59:EB:90
X509v3 Authority Key Identifier:
keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.8.231.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0d:cc:0e:d0:5f:be:b6:e6:f3:11:81:5e:55:39:a0:4f:92:
76:63:2e:9e:1b:da:cd:03:3d:46:b2:f1:94:12:e5:69:f4:c8:
e1:4b:28:fc:e7:d4:b5:ac:a0:ef:42:fc:46:1b:95:ab:ec:a0:
c6:80:86:ad:50:b2:02:4a:69:75:46:5c:94:0f:17:3b:73:96:
bf:82:82:db:83:9e:29:90:4c:80:08:63:b5:c4:b7:7c:49:65:
c1:9e:09:c1:cd:a2:3a:75:64:0c:30:74:2f:29:b5:ff:f8:5b:
f5:3a:46:7d:e9:a5:77:cd:4c:62:a6:b6:b2:83:9e:91:e0:f7:
e1:e7:72:7a:2a:54:e5:96:6a:7d:43:56:ce:22:65:9d:97:9f:
53:09:db:fa:a0:cf:c6:85:ad:e6:a1:0b:b1:2e:ab:ea:90:9f:
9f:89:e2:cc:a9:01:2f:8c:95:e6:b5:a1:c1:02:da:8d:cf:e2:
d5:f5:ff:21:a7:07:25:2f:2e:da:0d:88:d8:4d:e4:a2:04:9c:
3e:25:47:06:d4:95:9d:b5:64:18:35:70:15:bf:49:d9:8f:3c:
1d:a8:6b:96:68:bd:68:27:24:20:56:d4:42:34:90:69:f2:7e:
dc:45:44:96:46:1a:0b:91:40:89:44:e9:ac:ab:4f:46:d4:a3:
41:94:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:40 2026 by rpki-client