
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/69EFC826355811F19E199801B7833773.roa
File: 69EFC826355811F19E199801B7833773.roa (raw, json)
Hash identifier: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=
Subject key identifier: 67:DE:1A:F1:C5:92:51:06:7F:B8:8F:90:CE:D6:12:07:13:FC:0B:2A
Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial: 69
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/69EFC826355811F19E199801B7833773.roa
Signing time: Sat 11 Apr 2026 04:05:11 +0000
ROA not before: Sat 11 Apr 2026 04:05:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133139
IP address blocks: 103.253.29.0/24 maxlen: 24
103.253.30.0/23 maxlen: 23
103.253.30.0/24 maxlen: 24
103.253.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Validity
Not Before: Apr 11 04:05:11 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69d9c876-3b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:62:63:16:1e:83:f8:e4:37:56:81:9c:d7:
3c:ad:77:70:d3:b5:23:97:83:ec:c8:d7:68:91:2f:
5e:4d:d0:99:7b:73:94:c6:eb:15:2a:3d:4d:17:b0:
90:30:22:67:cd:ed:a2:df:6e:f4:30:fd:5c:f9:78:
e4:a9:c1:d8:da:99:94:26:86:bf:ea:22:47:59:4b:
8c:c7:3f:a5:50:ba:af:88:5c:e8:f8:a9:46:f2:f9:
c6:fd:a7:63:89:e1:22:5f:60:7b:cb:ce:aa:f4:7b:
49:2b:f1:df:73:19:0d:0f:79:99:a5:45:db:31:1c:
d9:ed:c0:51:d7:d5:f1:7c:f2:8f:2e:b2:93:4f:92:
b5:31:b7:0a:f2:02:ca:00:04:4e:f4:3b:6e:d3:44:
5e:d3:0f:42:2e:65:da:aa:e3:11:e4:8b:7e:3d:2b:
71:82:f5:03:a7:c2:93:f6:54:09:3d:55:52:26:8d:
0a:d7:99:39:c9:f6:6e:be:16:cc:d2:90:3f:ad:f2:
6f:6b:4d:c3:22:e6:42:e5:6e:2a:e9:3e:76:ae:f5:
a2:8d:91:2f:02:53:9a:f9:7b:9a:4c:d9:3a:41:6b:
4e:7b:db:81:d1:59:11:22:79:04:55:fb:e0:94:31:
ca:94:75:3a:b8:89:01:9d:bb:a6:e4:a3:c0:55:43:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:1A:F1:C5:92:51:06:7F:B8:8F:90:CE:D6:12:07:13:FC:0B:2A
X509v3 Authority Key Identifier:
keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/69EFC826355811F19E199801B7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.253.29.0-103.253.31.255
Signature Algorithm: sha256WithRSAEncryption
46:0c:f6:51:35:c5:b6:dd:c1:b9:52:bf:2e:74:15:49:6d:52:
58:d2:ad:58:eb:98:ed:ab:7d:63:05:83:b5:d4:2b:42:3f:31:
40:24:7f:6f:70:d4:b5:96:4d:53:51:55:c4:b5:9e:ff:40:5b:
42:3a:22:b2:e7:6a:ef:1d:15:6c:85:af:a6:d6:c6:a9:93:a0:
5c:97:94:0d:a8:b8:4e:a3:ac:c5:d7:45:4e:5b:8c:e4:5a:f2:
4b:a5:d3:32:06:d3:32:a2:99:d0:3e:e6:49:fa:da:d7:65:7f:
3d:1b:8c:ca:48:89:89:ac:dd:ff:4e:ca:a2:f9:0d:fa:ee:a6:
00:bf:f4:4b:57:2a:4e:57:49:a9:af:79:58:f1:45:c8:68:11:
e8:d1:d8:66:74:45:4c:db:fb:6f:66:18:31:24:1e:cd:4c:a3:
de:c0:34:d8:ee:54:ff:de:b3:72:c6:e3:6e:f0:1c:ef:89:4a:
13:15:4a:e0:a6:b1:55:9f:ba:8e:04:e9:16:84:53:73:51:95:
6a:4b:f6:68:d9:fb:86:01:d4:fa:95:90:3a:61:db:f4:ce:7c:
40:80:a1:3b:c8:63:16:5c:7a:cb:6d:8c:92:df:32:a1:0e:17:
30:aa:ad:4e:63:42:de:1f:8f:40:55:25:b3:61:a2:bb:55:d0:
5c:88:33:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:24 2026 by rpki-client