
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa
File: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (raw, json)
Hash identifier: OrGWOjKaq8LbnZvZB603X7/PZgRovjlf9H8990xA32M=
Subject key identifier: 74:61:2B:CD:67:F4:F3:BA:61:8A:B0:93:24:C1:7A:52:AE:E6:A5:CF
Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Certificate serial: 05B5
Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:40:12 +0000
ROA not before: Sun 28 Sep 2025 23:56:41 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142623
IP address blocks: 103.171.36.0/24 maxlen: 24
103.171.37.0/24 maxlen: 24
2001:df7:3580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Validity
Not Before: Sep 28 23:56:41 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a433ac-c32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:78:31:e3:89:63:4d:fd:b0:69:09:81:61:
3a:2a:bc:48:02:cd:ee:40:30:ac:82:4d:71:be:b6:
04:57:58:48:83:df:4e:ab:d0:cf:b9:58:4c:e4:4d:
60:4d:aa:2b:4f:6f:aa:98:63:9d:a1:78:c6:b7:47:
a2:6c:1d:fa:13:49:3c:23:fa:f5:db:13:03:a5:91:
25:0c:16:b7:15:39:ae:79:c3:26:be:cc:e4:70:02:
b8:eb:f9:19:c1:d2:de:2e:3c:19:5c:77:33:64:37:
84:32:a6:47:81:af:e8:0a:25:bf:6d:59:e8:07:cf:
1c:51:d1:86:c7:aa:92:90:0f:ca:47:ab:f3:0e:aa:
fc:e6:b6:38:75:61:0d:bf:99:d0:51:69:80:2c:15:
3f:d5:57:8e:3a:81:a7:f3:63:27:63:18:6a:82:8b:
3f:dc:d4:85:1b:2c:c2:ed:76:28:7d:09:3c:14:a0:
85:09:4b:18:6b:a0:d8:ed:bf:2e:22:b0:99:97:25:
d9:91:0a:82:84:93:53:f4:82:be:7c:4e:28:08:c9:
7c:98:e0:ca:5a:01:76:17:a1:cb:46:bc:8b:dc:6a:
49:fd:5c:cd:04:b1:55:fb:fe:91:80:7d:fe:d5:4b:
27:51:49:88:7a:b4:46:e5:5c:9b:34:58:16:3c:a3:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:2B:CD:67:F4:F3:BA:61:8A:B0:93:24:C1:7A:52:AE:E6:A5:CF
X509v3 Authority Key Identifier:
keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.36.0/23
IPv6:
2001:df7:3580::/48
Signature Algorithm: sha256WithRSAEncryption
b3:27:ea:90:c8:1e:3e:33:5c:71:ff:c4:bf:a0:a4:f3:e8:bf:
ff:7a:cd:ac:55:9c:09:fe:a9:22:23:16:10:07:6f:4f:77:e2:
7e:12:b4:f9:36:c8:e8:25:07:b4:ff:ff:90:b4:30:93:e4:26:
29:70:c1:3f:57:9a:5b:6d:ac:ec:cd:84:ae:89:b1:b1:b9:f0:
ea:23:b2:d6:d4:bc:52:aa:ca:11:6a:6a:10:b7:22:e2:44:53:
7c:17:5e:29:68:fc:dd:47:0d:fc:7b:3c:7e:6b:4d:20:02:12:
9c:71:2e:bd:b2:cb:0a:c6:70:cc:9b:2e:c3:19:ca:9b:c9:f1:
15:dd:8f:a0:8c:4f:62:7f:51:7d:42:ce:12:c5:09:91:3e:b4:
dc:0c:bf:86:53:0d:ea:7d:c2:33:87:20:94:07:cd:0f:61:69:
d3:8a:a5:32:89:46:d6:2b:00:91:4a:1c:25:14:1e:c8:69:b9:
ec:7d:9a:4f:40:a9:9e:90:e2:5d:49:05:b2:3a:ee:0c:df:18:
9d:b2:9e:9d:4e:3d:0b:aa:51:89:3e:1b:1c:b8:a7:8b:9a:1b:
b5:d9:53:b6:7a:81:a0:fe:46:b1:0f:4d:ec:88:c3:50:b0:7c:
e5:9e:fd:0d:d3:33:5f:92:d6:a4:74:ee:de:37:77:52:29:97:
57:f8:44:bf
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4
Njc3OTVFRjcwHhcNMjUwOTI4MjM1NjQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzNhYy1jMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4x54MeOJY039sGkJgWE6KrxIAs3uQDCsgk1xvrYEV1hIg99Oq9DPuVhM5E1g
TaorT2+qmGOdoXjGt0eibB36E0k8I/r12xMDpZElDBa3FTmuecMmvszkcAK46/kZ
wdLeLjwZXHczZDeEMqZHga/oCiW/bVnoB88cUdGGx6qSkA/KR6vzDqr85rY4dWEN
v5nQUWmALBU/1VeOOoGn82MnYxhqgos/3NSFGyzC7XYofQk8FKCFCUsYa6DY7b8u
IrCZlyXZkQqChJNT9IK+fE4oCMl8mODKWgF2F6HLRryL3GpJ/VzNBLFV+/6RgH3+
1UsnUUmIerRG5VybNFgWPKNJqQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHRhK81n
9PO6YYqwkyTBelKu5qXPMB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw
QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDc5NUIvQTg4RkIzRTIwMEMwMTFFQzk2QzJENTgzQzRGOUFFMDIvN0MwNUFDRUU3
NUIzMTFFRjgzRUM2Rjc4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6skMA8EAgACMAkDBwAgAQ33NYAwDQYJKoZIhvcNAQELBQADggEB
ALMn6pDIHj4zXHH/xL+gpPPov/96zaxVnAn+qSIjFhAHb0934n4StPk2yOglB7T/
/5C0MJPkJilwwT9XmlttrOzNhK6JsbG58OojstbUvFKqyhFqahC3IuJEU3wXXilo
/N1HDfx7PH5rTSACEpxxLr2yywrGcMybLsMZypvJ8RXdj6CMT2J/UX1CzhLFCZE+
tNwMv4ZTDep9wjOHIJQHzQ9hadOKpTKJRtYrAJFKHCUUHshpuex9mk9AqZ6Q4l1J
BbI67gzfGJ2ynp1OPQuqUYk+Gxy4p4uaG7XZU7Z6gaD+RrEPTeyIw1CwfOWe/Q3T
M1+S1qR07t43d1Ipl1f4RL8=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:25 2026 by rpki-client