
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/834FFE88679911EEB8243436C4F9AE02.roa
File: 834FFE88679911EEB8243436C4F9AE02.roa (raw, json)
Hash identifier: ME7+zEz0Jsw4n7cBlOx4YfFdzfleALyDaomuxZAGAFI=
Subject key identifier: 59:57:C4:A5:48:2C:4B:42:79:58:A4:27:57:38:80:89:D1:6D:1B:B1
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 02F7
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/834FFE88679911EEB8243436C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:28:06 +0000
ROA not before: Wed 29 Oct 2025 01:45:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147292
IP address blocks: 103.174.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Oct 29 01:45:29 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44cf6-73e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:bf:de:29:1c:aa:71:38:f0:49:54:00:b6:
40:b3:80:26:5c:a7:2c:34:4e:37:94:d0:7f:2f:22:
54:18:c5:61:e1:ff:2f:6d:6d:9c:43:1d:cb:04:7b:
e2:c9:b8:ab:2c:66:8b:99:3a:ce:10:aa:aa:3c:9a:
82:ab:20:b3:e9:54:ca:09:6c:ab:1a:4b:f7:eb:10:
bf:78:52:d5:ed:dd:17:4b:c7:91:0f:f3:92:b1:ed:
9c:f7:af:2b:e4:e3:fe:07:38:d9:3f:00:3a:7d:eb:
e5:f7:5d:59:07:f5:05:47:2e:68:ab:32:aa:ea:5d:
6f:50:04:dd:ad:cb:66:3f:09:8a:97:ca:e9:94:b9:
7d:8f:65:a9:71:c5:ca:f9:03:81:cc:b9:ea:b1:3d:
28:ab:6e:55:14:92:85:e9:6e:e8:79:07:ad:b1:95:
1e:e3:ae:5a:a7:18:14:4e:e9:0f:5f:e9:d2:a5:c9:
5e:fe:42:52:05:1b:de:a8:f5:d0:9b:87:ea:96:1a:
5e:b9:ac:a5:5f:1b:be:37:ab:c3:b2:14:19:ad:7c:
26:0a:16:39:f4:b8:17:cd:17:42:43:e6:e9:d9:07:
a2:e5:6c:d0:51:a7:e9:52:c6:48:d2:70:ec:15:d1:
a9:63:00:cc:b9:79:42:77:6a:29:f0:48:8a:15:1b:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:57:C4:A5:48:2C:4B:42:79:58:A4:27:57:38:80:89:D1:6D:1B:B1
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/834FFE88679911EEB8243436C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.98.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0a:a4:5a:4b:a4:f3:eb:ad:2c:86:dd:c3:f9:68:c5:47:0f:
2c:15:4d:66:c6:3e:f9:8d:5f:3e:03:54:f9:36:ff:28:3e:7d:
b6:3d:85:c3:e9:fc:09:1d:2d:78:69:a5:12:c9:05:9e:4b:57:
77:f3:42:49:8d:db:02:dc:26:3c:c7:47:ca:3a:8a:60:11:5f:
bf:28:a1:e5:4d:e3:2d:82:79:c6:81:84:ab:25:7a:ce:03:15:
6f:c0:8d:7a:3b:5d:26:0e:21:13:08:79:87:17:5d:d8:10:a0:
d6:f3:51:52:8a:15:87:12:70:c1:d2:52:da:a2:36:5b:1e:6b:
cd:57:1b:0e:64:24:4e:e5:01:32:fd:3c:01:e6:a5:40:15:4b:
e0:15:e9:67:32:91:73:b1:48:84:fb:00:fd:45:e8:cb:ee:a3:
ed:ee:f9:46:b5:4a:1e:89:ca:dd:7e:8f:ae:81:44:05:81:55:
5d:91:6d:4b:11:e5:36:93:77:52:b1:07:06:9b:8f:14:be:07:
bf:bd:75:89:6b:5f:4d:64:2d:44:e1:fb:47:9c:d1:9b:56:61:
83:ac:89:08:b8:e4:cd:33:45:8d:51:b3:c3:48:99:de:eb:56:
7a:66:d6:bd:f2:16:43:6d:ce:d9:01:b3:21:9c:64:fb:1c:04:
3a:38:d7:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy
QjNEQUExOTQwHhcNMjUxMDI5MDE0NTI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGNmNi03M2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3XS/3ikcqnE48ElUALZAs4AmXKcsNE43lNB/LyJUGMVh4f8vbW2cQx3LBHvi
ybirLGaLmTrOEKqqPJqCqyCz6VTKCWyrGkv36xC/eFLV7d0XS8eRD/OSse2c968r
5OP+BzjZPwA6fevl911ZB/UFRy5oqzKq6l1vUATdrctmPwmKl8rplLl9j2WpccXK
+QOBzLnqsT0oq25VFJKF6W7oeQetsZUe465apxgUTukPX+nSpcle/kJSBRveqPXQ
m4fqlhpeuaylXxu+N6vDshQZrXwmChY59LgXzRdCQ+bp2Qei5WzQUafpUsZI0nDs
FdGpYwDMuXlCd2op8EiKFRtxawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFlXxKVI
LEtCeVikJ1c4gInRbRuxMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5
NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDFGOTUvRkY5M0VDNzIxOTVGMTFFREIyQkRGOTVFQzRGOUFFMDIvODM0RkZFODg2
Nzk5MTFFRUI4MjQzNDM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ65iMA0GCSqGSIb3DQEBCwUAA4IBAQCXCqRaS6Tz660sht3D+WjF
Rw8sFU1mxj75jV8+A1T5Nv8oPn22PYXD6fwJHS14aaUSyQWeS1d380JJjdsC3CY8
x0fKOopgEV+/KKHlTeMtgnnGgYSrJXrOAxVvwI16O10mDiETCHmHF13YEKDW81FS
ihWHEnDB0lLaojZbHmvNVxsOZCRO5QEy/TwB5qVAFUvgFelnMpFzsUiE+wD9RejL
7qPt7vlGtUoeicrdfo+ugUQFgVVdkW1LEeU2k3dSsQcGm48Uvge/vXWJa19NZC1E
4ftHnNGbVmGDrIkIuOTNM0WNUbPDSJne61Z6Zta98hZDbc7ZAbMhnGT7HAQ6ONfD
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:31 2026 by rpki-client