
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa
File: 7083BABC100311EE8B670F78C4F9AE02.roa (raw, json)
Hash identifier: +VhyB55Zh0hjkfPYwsoyjhbgme4zH5U8N6Q80trrH1M=
Subject key identifier: 20:FB:79:AB:E2:30:3F:66:11:6D:C4:D8:30:12:6E:F1:81:37:60:E4
Certificate issuer: /CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0
Certificate serial: 0212
Authority key identifier: 76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:07:43 +0000
ROA not before: Sat 27 Sep 2025 04:01:29 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 141153
IP address blocks: 103.192.38.0/23 maxlen: 23
103.192.38.0/24 maxlen: 24
103.192.39.0/24 maxlen: 24
2407:6480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl
rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1022, serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0
Validity
Not Before: Sep 27 04:01:29 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4563f-8749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:9b:23:63:1f:51:4a:2c:75:ed:8e:92:d2:
8b:37:62:48:31:a3:e6:31:13:8d:8f:1c:d9:77:e7:
93:73:20:a8:e7:40:fb:d3:18:41:82:ad:cf:38:32:
4d:24:05:c1:84:89:af:92:e6:2a:e0:7a:f0:ba:e8:
b4:a8:70:76:4c:cc:e4:39:ac:74:09:c4:fa:ad:81:
d0:6a:85:1f:87:ac:d7:1f:25:42:14:42:55:74:6d:
62:3d:e8:13:93:46:c0:55:b3:cf:df:f6:28:74:f5:
da:73:59:03:80:11:43:0c:23:7d:94:52:aa:0e:55:
c3:ea:80:fc:21:3c:e8:40:f4:89:2b:70:f2:31:ba:
0f:d4:d9:ad:3c:2a:9b:c4:6f:d8:9e:8c:c8:4f:43:
dd:57:b0:44:8a:fb:b6:5a:a8:22:84:b1:2f:84:f6:
93:68:4b:b1:29:5b:1a:df:a7:e0:e5:77:82:b3:3a:
c6:e0:49:5d:3a:08:b0:a1:dc:b6:77:6e:92:bf:fd:
e3:ff:3a:79:fa:87:02:db:ad:5e:f6:9b:2b:e5:ef:
20:2c:57:03:e3:16:39:f0:61:a8:2e:9e:cf:da:31:
91:21:b9:36:96:d9:25:20:cd:5d:ef:e0:a2:94:f9:
9f:d4:43:aa:ba:95:40:1d:40:58:1e:a9:55:05:f1:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:79:AB:E2:30:3F:66:11:6D:C4:D8:30:12:6E:F1:81:37:60:E4
X509v3 Authority Key Identifier:
keyid:76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.192.38.0/23
IPv6:
2407:6480::/32
Signature Algorithm: sha256WithRSAEncryption
65:99:9b:a1:34:40:b8:c4:09:b7:ff:00:71:24:2f:5a:7b:17:
67:3d:b3:80:66:ca:78:47:ad:b7:15:27:73:9b:d2:74:84:74:
d6:8f:ce:50:f3:99:fa:83:ea:a3:5e:da:c6:57:3d:59:c4:d6:
c1:1f:48:d0:0d:a1:d2:54:3d:56:b1:2e:9f:17:39:52:40:aa:
dc:c2:c8:85:b3:d1:b8:63:51:29:a2:c0:35:43:d5:f7:38:eb:
30:b3:d6:15:67:71:db:28:b8:b6:e0:14:50:c3:b2:38:13:7a:
3d:82:2a:c5:71:c9:00:07:34:5d:46:61:de:a8:63:73:de:1a:
da:8e:ea:12:bd:84:76:aa:21:a1:e8:e7:55:19:53:8b:55:78:
f6:4d:5a:60:04:b3:7f:ac:54:ef:4b:7e:7b:6d:1e:05:65:f0:
52:1f:d9:14:40:ff:ac:a2:02:38:4b:45:e9:15:cd:6a:35:0a:
73:66:83:c4:21:e4:02:58:96:93:1c:d6:90:2e:0f:66:8f:5c:
b6:92:ca:12:f0:98:a1:3e:00:09:97:34:10:38:aa:84:f1:37:
4b:f4:bf:b8:5f:76:35:b2:83:40:fb:3d:4d:58:5a:fe:62:69:
9d:1c:8f:5a:5b:95:41:fd:db:48:3d:de:f1:fe:9f:50:af:b4:
29:fe:47:da
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTEwMjIxMTAvBgNVBAUTKDc2QUEyMENBMjRBNkMyRTMyODg3NkQwMDREMTMxNEUx
MTdBNkU3RDAwHhcNMjUwOTI3MDQwMTI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTYzZi04NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwuGbI2MfUUosde2OktKLN2JIMaPmMRONjxzZd+eTcyCo50D70xhBgq3PODJN
JAXBhImvkuYq4Hrwuui0qHB2TMzkOax0CcT6rYHQaoUfh6zXHyVCFEJVdG1iPegT
k0bAVbPP3/YodPXac1kDgBFDDCN9lFKqDlXD6oD8ITzoQPSJK3DyMboP1NmtPCqb
xG/YnozIT0PdV7BEivu2WqgihLEvhPaTaEuxKVsa36fg5XeCszrG4EldOgiwody2
d26Sv/3j/zp5+ocC261e9psr5e8gLFcD4xY58GGoLp7P2jGRIbk2ltklIM1d7+Ci
lPmf1EOqupVAHUBYHqlVBfGTFQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCD7eavi
MD9mEW3E2DASbvGBN2DkMB8GA1UdIwQYMBaAFHaqIMokpsLjKIdtAE0TFOEXpufQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTAyMi85Q0MwMEE0QTBG
RkUxMUVFQjYxOTJCNzZDNEY5QUUwMi9kcW9neWlTbXd1TW9oMjBBVFJNVTRSZW01
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Rxb2d5aVNtd3VNb2gyMEFUUk1VNFJlbTU5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTEwMjIvOUNDMDBBNEEwRkZFMTFFRUI2MTkyQjc2QzRGOUFFMDIvNzA4M0JBQkMx
MDAzMTFFRThCNjcwRjc4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ8AmMA0EAgACMAcDBQAkB2SAMA0GCSqGSIb3DQEBCwUAA4IBAQBl
mZuhNEC4xAm3/wBxJC9aexdnPbOAZsp4R623FSdzm9J0hHTWj85Q85n6g+qjXtrG
Vz1ZxNbBH0jQDaHSVD1WsS6fFzlSQKrcwsiFs9G4Y1EposA1Q9X3OOsws9YVZ3Hb
KLi24BRQw7I4E3o9girFcckABzRdRmHeqGNz3hrajuoSvYR2qiGh6OdVGVOLVXj2
TVpgBLN/rFTvS357bR4FZfBSH9kUQP+sogI4S0XpFc1qNQpzZoPEIeQCWJaTHNaQ
Lg9mj1y2ksoS8JihPgAJlzQQOKqE8TdL9L+4X3Y1soNA+z1NWFr+YmmdHI9aW5VB
/dtIPd7x/p9Qr7Qp/kfa
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:30 2026 by rpki-client