
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/A9511B7AA0B511EA94365A38C4F9AE02.roa
File: A9511B7AA0B511EA94365A38C4F9AE02.roa (raw, json)
Hash identifier: HrofD4RIlZ3Whw32SWjxu22d9eRBm77myjEh2jOWL1o=
Subject key identifier: 87:A5:52:6C:6B:8F:B8:00:6E:6D:3B:83:16:94:62:53:15:45:4E:42
Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Certificate serial: 09B8
Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/A9511B7AA0B511EA94365A38C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:32:23 +0000
ROA not before: Fri 28 Feb 2025 21:58:55 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137477
IP address blocks: 103.110.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Validity
Not Before: Feb 28 21:58:55 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a407a7-10b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:5f:57:6b:ce:7b:d0:8d:6d:98:c4:6e:38:
60:83:b9:7d:87:d6:dd:d9:c5:8d:f9:dc:d4:f1:ff:
ac:6f:40:b7:37:05:3c:d4:98:a1:a0:75:eb:90:5e:
f2:46:cc:e4:db:3d:b2:05:bf:b3:90:46:a8:16:97:
38:b3:da:89:97:08:bf:34:97:40:67:fa:e6:d6:ac:
bb:2b:c5:87:72:2f:93:ba:f2:ee:9e:c7:ea:c2:04:
09:6a:03:cf:7d:53:f2:a2:10:a2:23:f4:a2:05:0e:
a5:fc:00:d4:2c:d7:e8:7b:56:20:67:bd:b3:5f:51:
6b:4c:ff:02:0e:c0:0b:c7:d2:b2:e3:35:f9:0d:c6:
55:c1:8c:83:37:d8:d0:5b:33:d3:3f:26:8a:55:e3:
28:ae:f4:d7:8b:b6:db:f0:44:48:15:2d:0e:dd:3d:
b6:78:cd:e2:dc:75:48:92:f1:da:f5:f6:4c:85:cf:
d3:e4:8c:21:27:c7:93:c5:81:cf:3d:e7:30:5c:b1:
9d:01:4b:c6:75:72:3e:36:cf:15:ea:c9:ae:d5:8d:
ee:3e:19:bf:fa:3c:5e:eb:4b:f3:a4:e6:8a:88:c2:
37:ef:8a:a7:ec:51:3d:3d:84:f7:e3:e3:f4:d8:f6:
20:fd:b0:d8:59:c7:9e:7d:6c:dd:f8:6a:76:92:e6:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:52:6C:6B:8F:B8:00:6E:6D:3B:83:16:94:62:53:15:45:4E:42
X509v3 Authority Key Identifier:
keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/A9511B7AA0B511EA94365A38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.40.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ee:ca:f7:89:e4:77:2c:83:45:6d:cb:28:77:23:ab:9c:14:
b2:a7:ef:6e:75:3e:3e:cf:ab:7c:79:3c:8e:cd:b6:71:79:c4:
3d:5f:31:08:20:03:70:90:2b:01:43:f4:0a:55:ad:80:3c:56:
c0:94:86:23:c5:92:56:55:cc:50:59:18:d4:a6:55:13:65:db:
30:dc:07:77:4a:0d:a1:7b:53:53:ad:80:95:5c:2a:7d:95:96:
5c:32:96:fa:2f:d5:53:e6:44:f6:3f:71:a2:34:01:31:1d:c0:
c1:8f:99:aa:3f:12:1d:31:1d:83:06:d2:37:c6:01:fe:7c:bd:
5b:84:3b:9d:39:05:6f:51:df:12:ed:5a:2c:8d:2b:bf:a9:24:
96:c3:46:f8:91:ab:fc:50:e5:d0:cf:f8:dc:2c:a0:f2:b2:f8:
b5:1b:ea:1f:c9:a5:71:ce:cb:8c:ad:c9:0a:9f:0d:d5:55:f6:
ad:c8:f8:75:ee:0a:cd:71:6a:ce:d1:32:e1:9c:d0:81:e0:d6:
03:3f:14:27:d6:6b:84:51:6d:28:c2:96:b7:fb:a1:76:a6:af:
fa:8f:53:fa:b8:2c:c8:36:cf:82:eb:7c:a7:6a:e4:03:02:90:
5d:1c:19:47:7e:08:b6:b9:df:08:82:73:be:1c:bb:60:ab:97:
22:32:a1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:38 2026 by rpki-client