
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/429AFADCF25E11EE9E1B8A09C4F9AE02.roa
File: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (raw, json)
Hash identifier: cTUX/2s8iNC6uaZx0t7QPFUUArYd6yiz96CdsR8glaA=
Subject key identifier: 33:86:54:7E:D3:25:FE:4D:25:4D:E1:50:72:47:46:AC:05:21:3D:E6
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 0282
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/429AFADCF25E11EE9E1B8A09C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:19:18 +0000
ROA not before: Mon 03 Nov 2025 02:16:43 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134562
IP address blocks: 103.31.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: Nov 3 02:16:43 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43cd6-43a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:f3:c6:fa:a2:56:39:77:b3:1a:1a:ed:8a:
e0:f1:af:5b:bd:18:d8:ad:ff:ec:98:a3:c2:b9:da:
44:72:d9:9e:23:5c:96:7c:57:3f:97:dc:23:64:3d:
19:a8:4c:31:48:9b:59:b6:93:5c:82:62:18:98:ba:
41:87:b0:e2:62:8e:ba:33:5b:dd:86:82:de:cc:54:
77:fa:d1:06:d7:3f:1e:22:9a:19:e2:bd:72:68:41:
53:2a:93:0b:31:61:a9:25:67:93:51:04:62:b8:8a:
c8:8d:56:6e:b7:96:ab:05:91:d4:1d:26:e6:9a:17:
ea:eb:bb:4c:cb:d4:c2:a1:e3:9b:ad:12:5c:f3:13:
93:58:a9:dc:41:4f:c4:8b:98:62:e7:bc:d3:20:b7:
99:ef:43:4b:9e:b2:f4:d9:3a:0e:c7:3b:24:f5:8d:
e4:5e:02:3b:71:85:19:d1:8c:79:96:0d:4a:1a:a4:
02:08:0b:b7:3d:11:8d:5a:bf:04:77:b0:c1:1c:e3:
e3:4a:90:66:7b:1a:13:0e:59:68:20:85:2d:74:af:
78:c7:b6:16:b1:a6:7d:fe:31:8d:4b:a8:c7:2e:38:
1d:32:47:32:30:7a:41:2d:72:68:c3:8a:7e:1f:60:
b4:23:73:b2:91:20:50:ae:ce:68:f8:55:76:9e:5d:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:86:54:7E:D3:25:FE:4D:25:4D:E1:50:72:47:46:AC:05:21:3D:E6
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/429AFADCF25E11EE9E1B8A09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.31.11.0/24
Signature Algorithm: sha256WithRSAEncryption
70:43:e3:cf:4b:b9:9b:d1:b6:5c:99:be:31:89:87:67:ad:09:
3e:de:34:67:cf:55:22:b1:c3:72:08:68:fc:f6:8f:44:36:14:
66:a2:66:cf:16:06:4b:65:66:50:c4:ae:58:ae:28:91:73:26:
4b:50:e1:21:bb:13:aa:e6:26:35:85:f5:a3:9e:aa:0e:a8:70:
52:10:4c:ad:be:b4:83:f0:91:d0:3c:a0:8c:55:76:2a:2a:f9:
65:a7:16:92:ea:7a:ad:70:83:6a:b1:0d:c7:82:f1:8c:c7:5d:
52:70:30:69:82:1e:9f:29:c5:53:69:41:76:1b:5e:3f:84:52:
05:3b:f0:97:47:9b:d0:c4:1f:59:6d:74:7a:53:6a:b1:0a:e6:
06:15:54:cc:98:56:8b:cf:e9:a0:15:5a:11:18:7c:3c:17:25:
a3:d7:21:05:ca:de:d2:24:97:02:4c:53:29:e6:12:75:7b:ca:
b5:d0:1f:3b:6d:b7:53:6b:a4:e5:d0:3e:76:5d:18:7a:1b:7f:
7b:ca:b5:aa:7c:60:eb:39:23:d0:f7:af:2f:9e:32:be:ca:76:
8e:2c:5c:9f:b2:4a:fc:b2:fe:3f:10:b2:f6:27:61:10:6e:69:
ae:82:0b:3d:87:83:29:cb:4a:2b:47:76:1f:e5:3e:a9:1a:e9:
5b:b3:13:79
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3
Mjc3QTczMjQwHhcNMjUxMTAzMDIxNjQzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2NkNi00M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApVjzxvqiVjl3sxoa7Yrg8a9bvRjYrf/smKPCudpEctmeI1yWfFc/l9wjZD0Z
qEwxSJtZtpNcgmIYmLpBh7DiYo66M1vdhoLezFR3+tEG1z8eIpoZ4r1yaEFTKpML
MWGpJWeTUQRiuIrIjVZut5arBZHUHSbmmhfq67tMy9TCoeObrRJc8xOTWKncQU/E
i5hi57zTILeZ70NLnrL02ToOxzsk9Y3kXgI7cYUZ0Yx5lg1KGqQCCAu3PRGNWr8E
d7DBHOPjSpBmexoTDlloIIUtdK94x7YWsaZ9/jGNS6jHLjgdMkcyMHpBLXJow4p+
H2C0I3OykSBQrs5o+FV2nl2BqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDOGVH7T
Jf5NJU3hUHJHRqwFIT3mMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG
NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REU5Q0MvNjBCNDQ3QkE1RjRBMTFFREFENjg2NTdFQzRGOUFFMDIvNDI5QUZBRENG
MjVFMTFFRTlFMUI4QTA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZx8LMA0GCSqGSIb3DQEBCwUAA4IBAQBwQ+PPS7mb0bZcmb4xiYdn
rQk+3jRnz1UiscNyCGj89o9ENhRmombPFgZLZWZQxK5YriiRcyZLUOEhuxOq5iY1
hfWjnqoOqHBSEEytvrSD8JHQPKCMVXYqKvllpxaS6nqtcINqsQ3HgvGMx11ScDBp
gh6fKcVTaUF2G14/hFIFO/CXR5vQxB9ZbXR6U2qxCuYGFVTMmFaLz+mgFVoRGHw8
FyWj1yEFyt7SJJcCTFMp5hJ1e8q10B87bbdTa6Tl0D52XRh6G397yrWqfGDrOSPQ
968vnjK+ynaOLFyfskr8sv4/ELL2J2EQbmmuggs9h4Mpy0orR3Yf5T6pGulbsxN5
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:46 2026 by rpki-client