
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/315EA0CCA9B111EC9C177A56C4F9AE02.roa
File: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (raw, json)
Hash identifier: uuY6biwNx6CnG6hJI1CLEyhcpmFxYg8t8zVi0nA/iNY=
Subject key identifier: F2:0E:57:19:42:7E:2A:F7:A8:F5:80:DE:2B:99:EB:6D:81:A8:43:0A
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 11DF
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/315EA0CCA9B111EC9C177A56C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:34:19 +0000
ROA not before: Sat 27 Dec 2025 14:55:08 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 38136
IP address blocks: 103.135.100.0/23 maxlen: 23
103.135.100.0/24 maxlen: 24
103.135.102.0/23 maxlen: 24
2404:7ac0:4000::/34 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4575 (0x11df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Dec 27 14:55:08 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4789b-573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:3d:16:a0:79:98:7e:2c:11:9e:c2:f4:1d:
f7:39:3c:85:14:4f:6f:96:61:ed:6c:6b:df:1a:af:
18:cd:a7:fa:c7:d7:77:b5:97:b2:80:34:eb:66:ae:
ff:f2:dc:0c:ba:57:c1:3e:e6:b5:c0:63:9e:13:38:
06:c4:35:a3:0f:65:4f:19:0a:37:4f:85:af:be:53:
64:a0:56:62:eb:72:76:8a:9a:02:97:37:74:5c:ff:
21:fa:28:c0:49:38:7e:16:73:4c:7f:3d:11:63:16:
a9:56:7c:a4:f5:76:4a:ec:c7:2c:20:e8:07:a9:80:
5e:88:fa:2f:82:16:4a:90:d2:73:45:20:c6:ea:31:
7e:ff:5f:4b:7b:9f:25:16:48:62:79:22:b3:f4:2b:
3b:b6:b0:8c:29:19:2c:8e:e1:04:80:1b:cd:11:a9:
f3:cc:35:1c:dc:03:fb:51:bb:3a:40:6d:31:27:6e:
82:d6:1e:de:33:60:1c:03:96:a4:bf:ac:49:11:53:
af:89:e6:2e:58:84:87:44:d9:0f:00:dc:52:c8:51:
60:a7:f5:df:19:13:a5:fb:e6:72:6d:74:d8:bb:85:
56:f8:32:0c:9c:e8:95:c5:f8:c4:c6:f7:0a:60:10:
1b:6c:6e:e5:c7:8c:40:38:e9:d4:2c:f2:b7:00:78:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:57:19:42:7E:2A:F7:A8:F5:80:DE:2B:99:EB:6D:81:A8:43:0A
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/315EA0CCA9B111EC9C177A56C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.100.0/22
IPv6:
2404:7ac0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
31:31:26:1c:4b:52:05:bd:39:61:b3:bc:98:fe:d4:e2:43:88:
11:4e:15:a4:db:47:1e:17:a9:c9:25:0c:3e:77:6a:cd:3d:63:
2a:b2:3b:c3:df:10:dc:2a:09:c6:cb:54:0e:ea:33:3a:c2:c4:
47:6e:62:e7:43:e3:a0:ff:41:22:df:50:dd:36:08:7f:3b:bc:
2a:62:18:87:fb:5f:1f:82:32:12:82:03:6d:07:b4:83:48:e0:
9a:8f:d7:3b:88:8e:88:7f:3c:54:89:43:05:71:df:e8:40:7a:
62:3b:16:a8:3e:5d:10:0a:b8:d6:98:0f:f3:47:52:43:1b:db:
1f:03:e4:05:56:42:75:ba:c7:a0:a5:b4:02:91:bf:7f:9d:23:
3c:b2:67:62:20:ed:35:63:11:35:52:bf:c7:77:31:9f:7c:3d:
9c:cb:83:ba:d0:e4:36:d5:47:50:05:c6:ef:07:7a:cb:49:d5:
77:b4:ef:0a:b7:9e:ea:3a:a8:df:6a:bc:a8:c4:cd:a4:f4:d5:
f3:b5:5b:31:20:8b:74:e5:ea:fe:6c:8f:11:47:95:0f:75:cc:
97:8f:eb:1f:37:57:e1:2e:5d:03:f9:69:b1:49:51:ef:ad:a5:
ea:63:2f:84:b3:04:d6:22:f0:94:47:f8:1b:28:62:40:7d:17:
de:d1:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:03 2026 by rpki-client