
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/7D4E6EDCC3A511E78971975FC4F9AE02.roa
File: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (raw, json)
Hash identifier: Ab1is/evOLhc3g4DpSbGl1Q9LWF8CNxrAAAtmCT5wDg=
Subject key identifier: 48:CC:34:4C:67:95:1F:6A:9A:CC:E6:93:DB:67:19:70:23:8A:CC:FA
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 1869
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/7D4E6EDCC3A511E78971975FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:43:43 +0000
ROA not before: Wed 20 Aug 2025 16:54:58 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136726
IP address blocks: 103.94.184.0/24 maxlen: 24
2001:df1:7f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6249 (0x1869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Aug 20 16:54:58 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4428e-c065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:34:13:f1:87:a7:ea:ba:45:3a:62:4a:54:
f4:2d:75:8d:42:66:fe:10:e4:db:19:a0:f5:e4:11:
8e:60:87:9c:98:59:4c:94:fe:c3:67:28:8e:f9:42:
f1:07:5c:c5:e2:ab:92:f6:14:ed:c9:73:87:40:94:
d7:f9:e2:5e:2e:d4:92:0c:f7:81:21:7c:49:f2:05:
ba:ae:dc:fd:31:e2:f2:1b:5c:4f:59:fb:2c:04:2a:
e4:4e:49:28:34:6a:54:c1:ff:8e:c3:ef:c2:1b:f5:
e4:19:5a:d6:d5:62:4f:66:3c:2b:ad:40:9b:74:b2:
03:d6:a1:78:3c:d7:43:dc:53:b4:b3:4d:d0:61:ab:
ce:b8:69:e7:08:6a:65:4b:a3:ce:e3:fb:17:cc:eb:
63:5c:e8:e3:67:6b:51:29:b8:23:1f:a9:7f:2e:fe:
14:6e:89:46:84:73:1e:53:61:37:5c:50:31:a6:18:
74:54:6d:ad:b5:89:62:b1:bf:f6:8a:58:6d:89:90:
95:c7:f1:ef:17:f4:f7:5b:b8:55:fe:04:82:7d:34:
57:39:84:3d:20:2c:ab:28:3e:8b:c3:4f:c9:67:23:
8f:fd:80:0f:54:94:b6:70:d6:0f:da:a9:b7:7e:9c:
f2:fd:ca:e9:60:d1:91:5e:8e:94:95:bf:ad:e1:ce:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:34:4C:67:95:1F:6A:9A:CC:E6:93:DB:67:19:70:23:8A:CC:FA
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/7D4E6EDCC3A511E78971975FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.184.0/24
IPv6:
2001:df1:7f00::/48
Signature Algorithm: sha256WithRSAEncryption
aa:c6:12:d4:12:2e:b2:09:05:68:c7:e8:81:47:37:79:c0:d5:
cc:79:0a:33:8a:42:c6:64:72:aa:bf:2d:07:d9:d6:85:3c:6c:
d4:b7:ab:c9:c9:be:1b:87:fc:33:1e:fc:10:67:c5:37:20:fe:
05:76:e6:17:86:48:9d:f4:f9:73:ac:2b:d4:ad:d4:92:73:76:
f7:a1:ae:36:4a:2f:98:02:55:9f:31:80:2e:b3:91:a2:b1:0d:
76:5b:f7:75:48:fc:8f:a9:32:09:d2:14:ac:03:13:03:a9:f7:
82:6f:fd:34:d0:89:77:58:9c:69:a3:ab:5f:6a:b4:37:bc:f5:
30:71:c0:da:55:61:93:a2:c3:c5:a3:ce:81:df:57:60:e6:7c:
1b:8c:a0:85:96:0c:47:be:1e:24:9d:8e:2d:1e:95:b9:05:17:
bb:6c:54:bb:20:0e:65:65:d4:4b:a7:2b:e7:aa:82:70:dc:07:
97:79:70:96:3f:ba:3b:bf:b9:04:88:de:12:2e:4c:47:2b:cc:
ad:22:d9:95:00:73:38:6e:2a:e5:dd:34:5d:92:fa:6f:db:f4:
85:2f:47:00:e5:19:ef:52:44:2b:51:c3:57:b2:fd:76:2b:cc:
3f:02:17:e9:18:2c:12:12:b7:16:ed:f0:b9:42:6a:e3:62:c6:
c3:b8:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:18 2026 by rpki-client