
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
File: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (raw, json)
Hash identifier: jJBBqp0n1dcla2CfO5nioVw0ckuTS67twgXm6uBPlv4=
Subject key identifier: 0C:1E:32:A3:CD:F5:3D:89:EC:10:5C:3B:EF:CE:E8:F2:DE:28:6E:C7
Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial: 095F
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:51:40 +0000
ROA not before: Thu 04 Sep 2025 21:00:55 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131582
IP address blocks: 103.69.130.0/24 maxlen: 24
103.69.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Validity
Not Before: Sep 4 21:00:55 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4284b-3982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3c:21:2a:2e:8c:09:94:d6:8b:91:88:e6:e0:
8e:35:e9:4e:3b:b0:8b:b2:f1:c3:7b:02:17:e0:1f:
91:65:88:af:c3:d6:28:d5:13:df:ba:89:5d:72:b2:
7d:00:7c:d0:c9:57:ee:bf:60:f6:53:e2:2f:7d:92:
64:35:17:6f:c5:3f:4c:49:e6:8f:0e:db:9c:5b:73:
32:42:94:06:65:98:bc:5d:01:8e:19:24:4f:0b:98:
01:88:c4:bc:e5:e8:e1:c5:46:c9:33:f5:78:eb:8f:
5d:f6:dc:fe:32:af:23:fa:67:76:f2:e0:36:db:07:
4f:74:43:c6:15:3e:82:3d:32:6d:a2:73:28:17:66:
5e:8b:0a:f0:13:ef:97:84:16:e2:75:d8:e0:91:62:
26:1b:20:c8:3e:41:92:89:e9:e0:cd:6c:20:ff:cd:
b8:11:c1:40:4d:aa:06:39:49:2f:87:9a:e1:f4:f4:
4b:c7:b9:e0:e4:f1:07:19:12:0f:d3:14:bc:e9:08:
ce:d0:65:be:0b:9f:4e:38:fd:53:be:3f:da:b0:dc:
97:a7:58:90:db:c6:31:15:08:e8:ef:45:0f:b2:aa:
79:27:81:29:0f:45:58:c7:fc:b6:15:b3:f3:e4:c0:
2b:2b:72:86:0d:ad:7d:fb:7b:6e:ed:be:86:14:dc:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:32:A3:CD:F5:3D:89:EC:10:5C:3B:EF:CE:E8:F2:DE:28:6E:C7
X509v3 Authority Key Identifier:
keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.130.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:c2:43:40:07:86:24:c8:bd:45:94:19:c4:2a:8e:77:99:f3:
cf:c7:03:d2:4f:e7:4f:c9:65:38:11:c9:7b:ee:e7:6d:7d:5b:
61:4e:c3:85:c5:3f:7d:b1:91:99:a8:9e:40:15:8c:2c:4e:cd:
12:18:60:fa:45:9e:dd:98:b5:18:da:53:2c:5c:bf:7b:ab:af:
96:be:e9:cb:2e:5d:6e:45:0c:b1:48:a7:50:1d:f3:0f:f2:e4:
07:50:a1:02:db:c9:b6:37:80:7c:7e:23:94:81:6e:ed:eb:4e:
98:30:c4:e9:3f:50:d2:a1:e1:59:fe:67:99:de:a6:ef:75:32:
16:aa:69:65:18:b8:f0:14:77:b6:67:a3:5f:2d:6c:6c:e0:fc:
6c:c6:f2:50:db:ad:3a:b4:32:39:cc:0e:dd:8c:df:74:5a:79:
9a:bc:57:c8:62:3f:f1:a8:4e:31:77:85:e8:13:57:3f:e8:37:
b7:69:3d:4d:05:7c:9b:8f:41:45:c5:4f:77:d2:4c:7e:f1:b0:
27:cd:18:0d:0a:64:3b:80:a1:93:10:55:52:ad:82:2b:fc:9a:
da:09:54:0c:73:8a:db:78:20:65:b4:23:03:69:6a:63:f5:20:
6f:a8:c3:83:72:4f:28:01:cf:d8:6b:69:c3:f5:e7:c1:29:f1:
29:35:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:56:22 2026 by rpki-client