
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/31C03F8A148D11F19BFA55B13D3D8C67.roa
File: 31C03F8A148D11F19BFA55B13D3D8C67.roa (raw, json)
Hash identifier: 2P8tm1L1/hHeozdOLIkZxpU7TBO+3OCMP2HCt5QPwpg=
Subject key identifier: 5C:E5:E5:28:55:09:91:FB:2C:BC:19:D4:BF:84:6F:51:43:6C:9D:31
Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial: 093B
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/31C03F8A148D11F19BFA55B13D3D8C67.roa
Signing time: Sat 28 Feb 2026 10:06:48 +0000
ROA not before: Sat 28 Feb 2026 10:06:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135030
IP address blocks: 103.111.164.0/23 maxlen: 23
103.111.164.0/24 maxlen: 24
103.111.165.0/24 maxlen: 24
103.111.166.0/24 maxlen: 24
2402:9f40::/32 maxlen: 32
2402:9f40:1::/48 maxlen: 48
2402:9f40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363 (0x93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Validity
Not Before: Feb 28 10:06:48 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a2be38-2412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:7c:bb:dd:74:14:89:3d:bf:0e:7b:07:81:
69:73:8f:54:cf:a7:76:31:e5:de:8c:cb:1d:f4:dc:
98:f2:39:31:82:77:04:ce:0f:b0:a2:8d:eb:2b:4d:
49:2f:97:03:9e:7c:d0:69:63:97:22:58:d3:39:96:
6a:fc:2b:ad:65:c5:65:61:31:20:06:25:0b:f9:79:
e3:ef:33:00:8a:e8:ed:28:48:f8:cc:d7:09:97:3e:
67:1e:ed:ac:34:6b:3d:e0:bc:b4:8c:cd:ea:b4:fe:
88:70:58:52:c7:60:f6:76:2b:78:b7:ea:fe:8d:1c:
d9:6e:92:da:cc:1a:68:03:75:f2:05:ca:c5:a1:75:
ef:2c:43:de:4a:b8:1e:21:c4:23:8a:5a:9d:f2:59:
e1:4a:68:65:3e:a2:c8:83:5a:d1:4f:52:9a:0b:a5:
d2:b7:f7:9a:3d:0d:34:8f:ed:bc:bd:21:a8:92:86:
60:09:85:d9:7f:ef:c1:4c:2a:45:ac:fd:12:b7:5f:
2f:a0:de:2b:af:04:44:b9:ae:68:9a:47:32:1a:1a:
15:f3:a0:ba:2a:5a:0b:d1:a5:51:ee:a7:5f:87:ca:
6c:06:77:e5:61:fa:ed:04:38:f4:4a:7c:ef:71:33:
d9:17:04:c5:b6:1f:4b:2f:ba:02:17:56:b9:8c:ea:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E5:E5:28:55:09:91:FB:2C:BC:19:D4:BF:84:6F:51:43:6C:9D:31
X509v3 Authority Key Identifier:
keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/31C03F8A148D11F19BFA55B13D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.164.0-103.111.166.255
IPv6:
2402:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
bd:48:e8:dd:1f:18:f5:bf:74:17:7a:c4:bd:04:fc:37:75:5f:
80:7e:b2:de:c3:8b:8f:ff:51:f1:de:c3:30:26:f9:f1:a5:88:
16:a0:f1:17:27:57:c2:91:77:72:5f:55:d0:c7:f4:52:3b:23:
15:01:2b:19:e9:8a:27:60:fd:40:dd:f7:80:08:f4:34:d7:df:
75:be:b6:07:53:d7:67:37:18:2e:80:37:5b:c6:9c:e3:f0:8a:
7b:7a:1d:27:32:59:3f:ee:30:4a:9b:0d:27:c9:8f:15:4f:69:
c5:80:07:57:87:5b:3c:aa:b2:2d:44:f9:56:58:6c:de:e2:7d:
8e:12:78:d8:26:83:b4:ad:a7:bf:6a:98:d2:f7:a1:a6:ab:56:
ed:fb:ad:bf:96:4a:ea:e6:ff:08:3a:10:07:ef:bf:42:3b:04:
51:47:f9:e2:29:f8:89:3e:cf:79:49:70:e3:2a:f2:03:ea:63:
39:9c:6d:9f:a2:bf:9b:fc:34:aa:c1:10:d0:37:34:84:8e:cd:
54:70:92:c2:ca:e1:21:d6:e3:18:17:81:b1:04:12:33:e8:b1:
6c:fa:80:b4:11:82:f7:9c:67:9e:52:62:b8:e8:f5:4a:b0:df:
f9:fd:62:2c:5d:eb:2c:ca:7a:a8:9d:1a:ab:c9:39:ab:6c:66:
58:ec:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:17 2026 by rpki-client