
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/97871B1E759A11EBB06FC386C4F9AE02.roa
File: 97871B1E759A11EBB06FC386C4F9AE02.roa (raw, json)
Hash identifier: 5p6KcnLc05tJjviw0bQLNNvRQf/lT9uBBLbX63CSm5U=
Subject key identifier: FA:5B:30:5F:F8:CB:2B:8A:2E:79:D8:2A:43:6D:F2:C2:C4:76:39:A9
Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Certificate serial: 0711
Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/97871B1E759A11EBB06FC386C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:42:23 +0000
ROA not before: Sun 02 Mar 2025 23:21:52 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141740
IP address blocks: 103.163.50.0/23 maxlen: 23
103.163.50.0/24 maxlen: 24
103.163.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809 (0x711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Validity
Not Before: Mar 2 23:21:52 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fbef-82cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:0b:44:c9:82:45:f8:b5:d5:89:f4:e2:15:
5c:d0:e8:03:a7:67:5d:7e:fb:49:05:7a:82:05:61:
e0:d9:dc:f3:3d:5f:fa:c8:7a:bc:4a:a5:f5:5d:55:
09:80:37:51:9f:31:bf:9c:a8:f2:a5:86:48:a9:c5:
7a:de:51:98:e1:a6:6a:40:00:aa:e0:27:cf:af:5b:
1a:12:35:24:df:bb:29:25:05:b9:d5:a5:a4:52:5f:
bb:b6:97:ba:bb:6f:94:f2:12:b3:10:ea:ee:68:36:
5d:64:8c:74:b2:f4:8a:e6:2a:df:31:d0:35:72:d2:
fc:e3:b6:41:9f:0a:4d:f5:3c:75:a1:15:30:2f:fe:
86:90:74:27:77:81:12:8a:62:c5:db:70:de:cc:95:
88:cf:fa:7e:1f:96:01:88:34:98:f9:df:b5:d6:49:
19:25:a8:88:a6:c9:75:c1:52:b2:6c:72:74:20:5f:
04:c5:62:e1:94:61:58:60:d9:ca:e9:07:15:50:84:
ee:21:bf:78:67:82:b1:80:c8:e1:9c:1f:63:bd:c8:
e0:8a:c3:9e:7a:d0:82:fc:58:5c:5f:22:7a:97:5f:
83:b0:68:4e:bc:c2:28:f0:9c:bc:f3:0d:3b:83:ef:
36:73:21:f8:3a:7d:39:66:24:bf:9d:49:64:eb:fd:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:30:5F:F8:CB:2B:8A:2E:79:D8:2A:43:6D:F2:C2:C4:76:39:A9
X509v3 Authority Key Identifier:
keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/97871B1E759A11EBB06FC386C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.50.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:6c:0e:a9:5c:85:ed:e7:c1:59:16:0b:5e:ea:ca:eb:c7:67:
53:64:06:3d:a1:36:cb:7f:6e:ed:16:7b:98:78:3f:10:31:14:
20:37:ed:29:b0:cb:c1:34:b2:1c:0e:23:28:fe:a9:74:2a:55:
6f:ed:10:24:04:ff:63:6b:94:44:7f:38:63:67:29:6a:81:5c:
f1:77:60:ca:b9:ac:1c:fb:a3:f8:05:e4:33:66:b2:bd:4e:e3:
fb:cb:94:93:09:1e:6e:5a:db:30:c0:d7:ab:98:a1:70:20:3d:
60:3a:f6:66:1e:3e:8f:1f:8a:ff:51:75:c5:2b:92:c5:b2:23:
87:30:db:ff:e4:0b:56:f9:35:29:d0:73:cf:a1:76:e6:1e:e3:
38:e3:f1:34:7a:bb:28:0d:49:2c:39:5a:95:1d:bd:60:fa:0c:
38:c0:99:ef:4e:b1:20:27:a2:df:36:08:91:23:1d:c5:e2:14:
cf:21:36:c8:dd:88:84:6d:ef:37:e4:71:00:b6:b0:ed:30:08:
cb:e3:9b:c2:f7:fa:92:28:27:ca:51:3a:4c:3e:fb:c3:f5:87:
f5:be:62:86:5f:b6:5f:83:2d:a4:fc:5c:5d:0c:19:fc:77:26:
1e:d9:a7:7b:7b:84:b1:8f:0e:83:5c:90:34:91:b7:22:fd:f2:
ec:44:6b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:21 2026 by rpki-client