
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/350CDCB44ED611ED84336740C4F9AE02.roa
File: 350CDCB44ED611ED84336740C4F9AE02.roa (raw, json)
Hash identifier: W4rFkElbmX5rYBlt2gYFc15XR8Y95bhLKA/QCeeyTpk=
Subject key identifier: B2:BE:B0:95:C6:90:13:83:A6:7C:9A:04:FA:62:CC:15:9F:2D:A2:75
Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
Certificate serial: 028C
Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/350CDCB44ED611ED84336740C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:09:38 +0000
ROA not before: Mon 05 May 2025 02:08:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149659
IP address blocks: 103.185.176.0/23 maxlen: 23
103.185.176.0/24 maxlen: 24
103.185.177.0/24 maxlen: 24
2001:df0:9940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl
rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
Validity
Not Before: May 5 02:08:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40252-1305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:9c:02:68:6b:01:29:56:e4:4a:99:6e:0f:
ee:7b:b9:33:26:67:55:34:9d:45:9d:20:47:12:97:
eb:a8:ec:93:27:74:9b:e2:1c:88:73:8b:0c:57:e7:
4a:3d:11:19:cd:78:72:30:2b:aa:20:28:69:9f:65:
25:f1:72:28:9d:73:3e:63:3f:92:97:d5:63:28:e0:
f4:49:15:4f:d4:2f:5b:cb:17:61:f7:11:59:d4:06:
58:ba:48:10:af:0c:f7:8c:5f:f0:e6:a9:b9:e4:f5:
76:6e:d2:c5:2c:45:33:50:fe:64:39:74:cd:e9:90:
0e:6e:5e:d8:bd:2b:51:07:92:b5:e1:25:40:81:f6:
06:e4:7d:e8:47:f6:ae:fd:c8:74:ec:ff:6a:d0:82:
5b:67:df:52:4d:1f:08:d8:da:b8:2e:0b:70:7b:a4:
14:cd:30:d4:e5:98:cb:85:7f:ea:e9:53:d6:fc:1c:
3f:be:0a:4e:ac:fe:3c:e9:4b:60:b8:08:f6:c4:c8:
60:91:cf:a2:05:d9:32:a0:4b:e6:52:0e:1e:17:e0:
72:84:24:d9:20:54:5a:06:d1:20:01:a8:29:f5:f8:
ad:4d:95:2f:39:9e:8e:18:4e:28:4c:06:44:15:3c:
9b:28:66:f8:bc:78:bb:da:60:b3:5d:a3:87:29:dc:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BE:B0:95:C6:90:13:83:A6:7C:9A:04:FA:62:CC:15:9F:2D:A2:75
X509v3 Authority Key Identifier:
keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/350CDCB44ED611ED84336740C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.185.176.0/23
IPv6:
2001:df0:9940::/48
Signature Algorithm: sha256WithRSAEncryption
11:11:a0:9c:89:4d:fb:2f:a5:f5:ca:7d:6d:e0:ee:a0:ec:6c:
db:8e:b8:c9:ca:f8:dd:51:9b:23:06:b7:86:e1:5f:2c:22:98:
3e:d8:f2:c5:a4:ec:96:51:48:39:b1:41:e3:65:b1:17:a8:70:
99:24:ed:f5:c4:3d:8b:66:bb:83:4d:b6:70:93:c1:25:70:42:
9e:40:52:1a:ca:0e:2e:38:19:7e:cb:54:be:50:c3:31:7f:20:
97:ab:f0:e0:a6:0c:c4:25:b8:e6:7f:21:d4:c0:c4:66:73:82:
81:1e:68:8a:74:18:9b:05:78:e9:c7:fc:f5:3a:e6:53:31:e7:
ec:e5:91:95:34:38:36:41:b4:ea:5c:07:d3:58:cb:a5:a4:65:
e4:e3:ea:1b:dd:f8:b2:7e:e3:34:a6:d4:8a:53:7f:44:f2:bf:
e6:c9:0e:f7:ad:19:18:39:f9:fd:74:9c:5c:19:d2:ad:5b:a9:
ab:80:3e:1a:b4:c4:b1:a2:1a:6f:ff:7d:41:5b:b9:84:39:4e:
1e:b1:73:35:57:50:84:e3:62:08:13:ee:5a:80:b9:47:0d:1a:
0b:b7:19:a4:ee:6d:e4:fc:1c:5a:a4:59:4b:fc:76:e9:87:29:
54:43:0e:10:f5:d4:f7:a4:6c:16:21:0f:9e:4e:38:59:66:81:
f0:69:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:14 2026 by rpki-client