
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
File: 31AA8496B62811E7882B893BC4F9AE02.roa (raw, json)
Hash identifier: 6sLoFUeESrRwO2QcFsgOleUZ2lZsfKCDD+HCcQh7dNM=
Subject key identifier: E0:25:2B:32:0F:F7:06:D1:61:8A:DC:B5:59:6F:FC:0C:2B:02:16:5A
Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Certificate serial: 189F
Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:31:18 +0000
ROA not before: Mon 30 Jun 2025 17:06:36 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136618
IP address blocks: 103.94.134.0/24 maxlen: 24
103.94.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6303 (0x189f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE10F, serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Validity
Not Before: Jun 30 17:06:36 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42386-26ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:ed:3f:76:39:96:a1:ea:ed:2f:7c:40:32:
72:c9:94:f0:b8:17:3e:40:08:cb:63:74:49:e7:93:
4d:fe:2b:07:84:3d:c0:6c:b9:74:19:d2:cc:61:ae:
50:6b:8c:3a:0e:74:e2:b5:50:90:13:1c:06:f1:33:
73:88:11:5e:85:1d:e6:d5:bd:78:48:d5:b0:d9:3a:
02:fa:89:88:8a:41:2a:ba:6e:4d:7f:9c:30:88:ae:
d2:59:aa:9d:4c:0d:0d:6c:25:b0:56:f0:2f:94:d1:
3a:7e:6c:3b:13:a2:41:e3:47:bb:6c:5d:f8:65:ef:
de:96:d7:5b:89:91:ff:2d:aa:26:f9:f1:93:44:a5:
6b:9a:be:85:90:c0:30:bc:12:05:56:d2:34:93:b0:
de:48:0e:03:c0:fd:15:db:aa:20:e5:db:de:bc:c3:
ed:86:13:48:12:58:69:8f:6f:69:ea:10:ab:78:db:
a5:fe:8b:0e:c6:a3:18:d3:d3:98:1b:df:08:b6:2a:
43:7c:16:f0:9f:1e:67:4a:f3:15:3c:b6:05:ef:e1:
c0:c4:14:ac:37:a4:9c:a9:51:1a:48:61:b3:8d:1f:
16:97:53:83:70:6b:08:16:4b:a2:22:49:25:1b:bd:
5d:29:f6:f4:7c:b4:6b:66:5b:ab:fb:94:e5:a4:43:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:2B:32:0F:F7:06:D1:61:8A:DC:B5:59:6F:FC:0C:2B:02:16:5A
X509v3 Authority Key Identifier:
keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.134.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:8f:2c:c3:16:bf:eb:09:47:bd:36:ff:f6:1c:77:de:54:17:
b0:3c:51:55:8c:6d:a0:f6:b2:09:6e:9d:44:bd:a3:2b:2b:d8:
f6:81:f4:2f:0a:40:55:f4:96:f3:b0:6c:27:31:50:3a:b7:db:
be:50:3b:ea:c9:6c:1d:26:88:86:b1:9b:92:e2:f6:3d:d7:63:
b3:53:55:f1:f7:e0:7e:0a:b7:63:6f:2f:63:88:c2:d8:90:3d:
f9:fd:0e:11:74:b4:64:00:bf:1a:b8:f0:96:84:1e:0f:2f:62:
2b:4f:30:ee:5a:e5:21:dd:51:a5:c1:17:0d:ab:f6:2e:f9:f2:
ee:5f:75:60:63:bc:e8:d2:97:e3:58:52:b7:52:95:05:a6:95:
91:e4:ad:97:4e:b3:26:6f:e6:54:6c:9f:62:f7:0d:fc:3e:02:
98:b8:3e:1e:51:97:16:ab:29:bb:3d:b4:77:4c:a2:e1:57:ba:
e1:43:df:0c:b1:a2:ba:c5:6f:24:3f:d6:28:2d:15:57:1b:2f:
0c:65:57:00:80:3f:31:f8:af:7f:45:e0:26:a4:eb:73:f8:d1:
8b:75:9d:52:ad:62:23:f6:ad:bb:2c:5a:fe:ad:6f:e5:2f:2f:
9e:b9:2d:c7:23:f7:71:e9:38:f0:85:45:a9:3d:fe:28:c0:bb:
af:e3:0a:66
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE
RjlCNDZGMTUwHhcNMjUwNjMwMTcwNjM2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjM4Ni0yNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkT3tP3Y5lqHq7S98QDJyyZTwuBc+QAjLY3RJ55NN/isHhD3AbLl0GdLMYa5Q
a4w6DnTitVCQExwG8TNziBFehR3m1b14SNWw2ToC+omIikEqum5Nf5wwiK7SWaqd
TA0NbCWwVvAvlNE6fmw7E6JB40e7bF34Ze/eltdbiZH/Laom+fGTRKVrmr6FkMAw
vBIFVtI0k7DeSA4DwP0V26og5dvevMPthhNIElhpj29p6hCreNul/osOxqMY09OY
G98ItipDfBbwnx5nSvMVPLYF7+HAxBSsN6ScqVEaSGGzjR8Wl1ODcGsIFkuiIkkl
G71dKfb0fLRrZlur+5TlpEOMEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOAlKzIP
9wbRYYrctVlv/AwrAhZaMB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1
RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REUxMEYvNjBFQTVDMkNCNUQzMTFFN0I2QTJERDVEQzRGOUFFMDIvMzFBQTg0OTZC
NjI4MTFFNzg4MkI4OTNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ16GMA0GCSqGSIb3DQEBCwUAA4IBAQCbjyzDFr/rCUe9Nv/2HHfe
VBewPFFVjG2g9rIJbp1EvaMrK9j2gfQvCkBV9JbzsGwnMVA6t9u+UDvqyWwdJoiG
sZuS4vY912OzU1Xx9+B+Crdjby9jiMLYkD35/Q4RdLRkAL8auPCWhB4PL2IrTzDu
WuUh3VGlwRcNq/Yu+fLuX3VgY7zo0pfjWFK3UpUFppWR5K2XTrMmb+ZUbJ9i9w38
PgKYuD4eUZcWqym7PbR3TKLhV7rhQ98MsaK6xW8kP9YoLRVXGy8MZVcAgD8x+K9/
ReAmpOtz+NGLdZ1SrWIj9q27LFr+rW/lLy+euS3HI/dx6TjwhUWpPf4owLuv4wpm
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:11 2026 by rpki-client