
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/099A56FE2FB311F09E3A9373C4F9AE02.roa
File: 099A56FE2FB311F09E3A9373C4F9AE02.roa (raw, json)
Hash identifier: VyA4FwV1jUJa0H5I6GQCaYhvuK3VrfAiw+TrBk+L/pg=
Subject key identifier: 38:77:EE:84:28:7E:CF:28:BE:18:F9:2E:D1:9A:2C:61:92:DC:9A:3A
Certificate issuer: /CN=A91DBB66/serialNumber=E18D0AD18313E20220DEA1B8716DFBDF5D09CCF8
Certificate serial: 99
Authority key identifier: E1:8D:0A:D1:83:13:E2:02:20:DE:A1:B8:71:6D:FB:DF:5D:09:CC:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/099A56FE2FB311F09E3A9373C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:05:05 +0000
ROA not before: Tue 03 Jun 2025 08:18:08 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 131294
IP address blocks: 103.10.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.crl
rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBB66, serialNumber=E18D0AD18313E20220DEA1B8716DFBDF5D09CCF8
Validity
Not Before: Jun 3 08:18:08 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e521-bee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:fe:30:02:5b:86:a1:db:fd:cf:9c:f6:d1:
21:26:70:de:0c:8a:5e:38:d9:19:c7:d3:af:aa:76:
7b:e3:a7:1f:0e:cf:e6:08:9e:48:9a:c2:7e:2c:fa:
59:9c:3c:9d:e4:fc:69:c1:6c:0f:6a:2c:c5:b6:f8:
a1:2e:38:59:c5:71:62:3c:b6:08:86:02:52:44:f2:
02:cd:7c:13:3b:0e:4c:a0:24:da:e9:4e:b6:38:38:
29:c2:d3:28:e7:ae:41:16:82:49:a8:4d:bf:52:31:
89:3f:10:1e:a6:b0:85:71:37:6a:91:c9:52:7f:5c:
87:f6:33:5f:91:88:65:13:a8:7d:46:a8:39:1b:b5:
06:45:ce:3d:f1:26:8e:e8:68:f4:f8:e0:bb:76:4f:
e6:dc:ae:97:0d:2f:94:62:e2:19:7b:85:ba:65:e0:
4f:26:40:71:fa:13:19:85:6d:e9:00:de:fd:3a:8a:
23:49:8a:3b:94:6c:fd:95:4c:58:fe:41:34:e7:14:
9c:1a:97:07:40:d4:a5:a4:5f:4d:41:49:43:41:e8:
b9:2f:fc:c0:b7:ff:12:ae:87:87:8a:36:ab:e6:76:
04:0f:67:cd:52:c9:fd:2a:7a:bc:d6:f6:20:de:fa:
e0:8d:23:26:2e:ae:d3:92:6c:3e:72:43:41:66:d3:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:EE:84:28:7E:CF:28:BE:18:F9:2E:D1:9A:2C:61:92:DC:9A:3A
X509v3 Authority Key Identifier:
keyid:E1:8D:0A:D1:83:13:E2:02:20:DE:A1:B8:71:6D:FB:DF:5D:09:CC:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/099A56FE2FB311F09E3A9373C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.10.51.0/24
Signature Algorithm: sha256WithRSAEncryption
98:30:ce:1d:b0:98:80:24:f0:93:7c:94:e6:6b:71:cd:1b:c1:
18:08:54:99:1c:38:43:0e:5b:c1:13:05:3d:4a:3f:93:8e:7c:
35:74:be:2b:9f:7e:69:ca:1c:79:e6:e9:c4:4f:4e:b4:e0:31:
31:a8:5b:13:56:94:ca:ad:36:a5:ca:1f:c9:a8:5d:b4:16:3a:
b9:fd:1a:5b:84:cf:34:11:c0:36:52:5f:28:c0:ad:9c:b9:dd:
6f:85:4a:04:5f:38:a8:80:7c:9a:d7:af:35:d5:fa:93:8f:a8:
91:d5:8a:7a:81:c8:35:22:45:3c:79:58:2f:7d:f6:c9:03:b7:
94:3e:c0:aa:4f:78:a9:bb:88:4c:96:82:83:61:4d:a1:b0:5d:
d5:3f:d4:37:88:6e:b9:f3:27:d4:00:30:4f:56:00:52:c8:5a:
ce:bf:a5:a2:b8:fa:92:31:5b:66:63:01:28:5c:8b:2d:7d:b4:
42:d3:1f:50:63:18:bd:cb:6e:61:59:5d:f8:6f:18:d0:4a:9c:
0a:35:0f:ec:90:1c:69:29:cc:3d:5d:4e:de:ab:58:f1:8b:d2:
48:fb:a2:86:34:90:48:b8:c6:f5:85:ca:94:f7:8e:af:db:3f:
dc:e3:5c:ce:d2:46:56:f7:a3:3e:67:9f:8f:d7:fc:0e:09:b1:
7c:4e:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:32:21 2026 by rpki-client