
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/7510FBA2928911EBB0B38272C4F9AE02.roa
File: 7510FBA2928911EBB0B38272C4F9AE02.roa (raw, json)
Hash identifier: 1QVha8WZ/zcOH92BRLJAh5okmG4VseGZWRktSE8OCCY=
Subject key identifier: 0E:24:AB:B6:E7:82:CD:0C:D4:06:CE:BF:35:68:71:69:08:D2:B8:E9
Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E
Certificate serial: 06CF
Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/7510FBA2928911EBB0B38272C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:14:20 +0000
ROA not before: Fri 02 Jan 2026 22:18:13 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134498
IP address blocks: 103.161.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl
rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E
Validity
Not Before: Jan 2 22:18:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a449bc-635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:db:f7:3b:67:bb:df:91:85:94:67:4b:34:ad:
7f:92:52:14:a9:52:c8:16:7f:e4:6c:0c:5a:9b:1d:
d7:b7:09:68:e2:89:e5:50:88:c9:40:42:01:25:94:
6d:cb:e0:40:92:8b:fd:41:9e:a3:40:c7:4c:82:8c:
7f:91:93:8d:f3:75:16:1e:e6:f3:b7:8c:4a:06:53:
43:12:6c:c8:00:d5:cd:aa:b7:0c:d8:1a:7a:f3:0c:
84:36:42:22:8e:fd:b6:3b:08:72:49:de:ef:e3:9f:
5b:d2:ff:0e:2c:f0:85:c4:22:b4:19:69:25:8e:a6:
99:a5:ec:ac:d9:1d:86:83:da:54:1c:72:04:5c:1a:
eb:1f:a8:da:b6:21:4f:8c:41:b1:d3:64:1f:72:24:
e1:b5:ef:e2:0e:43:62:7b:10:ae:4a:4c:1c:0f:41:
15:e1:a6:a0:a0:6b:56:40:88:a7:a2:57:a5:8d:2d:
31:b1:97:96:82:20:e3:9f:12:97:29:25:a9:b4:03:
0f:9c:9f:37:6c:b9:f4:b2:29:e0:09:1e:4b:dc:cf:
a5:34:fb:1f:3e:49:61:ca:4a:5d:8f:4d:a0:e7:be:
79:e2:00:cb:87:21:96:85:b3:1a:73:a2:aa:5e:ac:
1d:50:22:51:0b:2c:92:59:8a:b9:2d:07:d7:d2:8e:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:24:AB:B6:E7:82:CD:0C:D4:06:CE:BF:35:68:71:69:08:D2:B8:E9
X509v3 Authority Key Identifier:
keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/7510FBA2928911EBB0B38272C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.58.0/24
Signature Algorithm: sha256WithRSAEncryption
38:41:26:5e:b5:83:a6:cd:a1:cf:77:79:63:cb:0f:6f:fc:c9:
16:1e:89:1b:07:05:5c:dc:56:66:29:00:12:89:27:12:c6:a8:
3b:e7:d7:3c:70:68:a9:c3:5b:ea:2d:da:c9:87:e0:dd:3a:c5:
1c:21:56:f3:78:ef:5b:2e:4c:af:42:3b:40:6d:e1:83:33:60:
5e:35:31:9e:25:72:ca:ef:6c:a1:5f:8e:79:60:4b:c0:a5:ef:
7a:10:43:a4:85:0e:1d:09:52:c9:ec:c5:64:32:97:bd:a3:43:
ea:dc:13:87:64:29:a0:4e:6b:60:48:85:16:7e:d7:b2:40:4e:
3f:fb:8e:96:19:7f:71:c6:e1:a9:cb:0c:0a:9c:0a:62:37:99:
ad:d9:f4:8a:32:19:60:34:37:ca:7b:46:64:24:6c:5f:6d:b4:
36:91:9d:d1:f7:a9:d3:f6:00:c6:50:f4:a6:d9:0f:2d:e0:e2:
6a:f9:dc:5d:68:5d:1d:5c:6a:c0:c9:c5:b4:b1:b6:99:1d:6a:
99:ca:1e:a7:d1:77:dd:88:d9:85:14:c7:22:a4:b4:49:71:f4:
61:a3:78:07:ed:55:c4:0b:5c:b6:bc:c4:61:74:76:47:df:4f:
e1:b9:48:61:3a:26:4f:38:ad:3a:4b:b8:43:7b:36:33:91:c4:
fc:ca:7f:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG
NUY4MkU4MkUwHhcNMjYwMTAyMjIxODEzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDliYy02MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4tv3O2e735GFlGdLNK1/klIUqVLIFn/kbAxamx3Xtwlo4onlUIjJQEIBJZRt
y+BAkov9QZ6jQMdMgox/kZON83UWHubzt4xKBlNDEmzIANXNqrcM2Bp68wyENkIi
jv22OwhySd7v459b0v8OLPCFxCK0GWkljqaZpeys2R2Gg9pUHHIEXBrrH6jatiFP
jEGx02QfciThte/iDkNiexCuSkwcD0EV4aagoGtWQIinoleljS0xsZeWgiDjnxKX
KSWptAMPnJ83bLn0singCR5L3M+lNPsfPklhykpdj02g57554gDLhyGWhbMac6Kq
XqwdUCJRCyySWYq5LQfX0o6u8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA4kq7bn
gs0M1AbOvzVocWkI0rjpMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky
ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2
QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDgzOTIvMTREOUUzOEE5Mjg4MTFFQkJCRDQ1NjcxQzRGOUFFMDIvNzUxMEZCQTI5
Mjg5MTFFQkIwQjM4MjcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6E6MA0GCSqGSIb3DQEBCwUAA4IBAQA4QSZetYOmzaHPd3ljyw9v
/MkWHokbBwVc3FZmKQASiScSxqg759c8cGipw1vqLdrJh+DdOsUcIVbzeO9bLkyv
QjtAbeGDM2BeNTGeJXLK72yhX455YEvApe96EEOkhQ4dCVLJ7MVkMpe9o0Pq3BOH
ZCmgTmtgSIUWfteyQE4/+46WGX9xxuGpywwKnApiN5mt2fSKMhlgNDfKe0ZkJGxf
bbQ2kZ3R96nT9gDGUPSm2Q8t4OJq+dxdaF0dXGrAycW0sbaZHWqZyh6n0XfdiNmF
FMcipLRJcfRho3gH7VXEC1y2vMRhdHZH30/huUhhOiZPOK06S7hDezYzkcT8yn/q
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:34 2026 by rpki-client