
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/4A9F953EE29611EF8E06890AC4F9AE02.roa
File: 4A9F953EE29611EF8E06890AC4F9AE02.roa (raw, json)
Hash identifier: edI7/Y3QUQ2H0PLGPWgqOSTulDJowXskUVxpUOtA7Co=
Subject key identifier: D9:CE:8E:B0:C2:65:C3:03:31:17:85:A7:E9:15:53:CE:4A:55:D3:B2
Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Certificate serial: 08F6
Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/4A9F953EE29611EF8E06890AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:53:35 +0000
ROA not before: Sat 30 Aug 2025 21:12:22 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140999
IP address blocks: 103.153.18.0/23 maxlen: 23
103.207.29.0/24 maxlen: 24
2001:df4:2980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Validity
Not Before: Aug 30 21:12:22 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a428bf-5fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:b5:a0:7b:32:9f:95:00:24:26:a8:cf:8c:
49:e4:75:ec:90:b2:dd:4a:fe:52:23:c5:62:ad:68:
92:0b:29:cb:ac:61:6a:fb:ca:32:d2:ea:d9:8f:44:
82:2f:d7:c2:30:e7:24:45:46:a9:ff:25:9b:e3:48:
35:c1:69:b3:61:f0:09:ba:b6:7b:9f:4b:e4:a1:7c:
dc:c9:15:41:50:7c:df:ef:31:cd:50:a1:ef:64:d5:
1c:99:b5:fe:4c:59:ae:47:96:66:da:c5:01:86:54:
a3:6b:84:a1:9e:ef:a8:dd:24:22:05:14:2a:9d:f2:
30:78:13:c1:41:82:fb:9d:50:b8:c9:65:ab:6d:08:
49:3c:90:24:4f:68:36:ab:96:6b:04:76:8b:0f:8b:
f6:ac:23:bb:02:dd:cf:e0:00:57:e7:13:55:c3:98:
37:a7:b9:90:d3:56:43:99:5b:2f:fb:ca:c1:57:c7:
b3:49:6c:7d:b3:2a:53:62:db:3a:79:c4:41:a5:4d:
3b:c4:70:d5:0a:ea:1f:9f:24:ab:a7:b2:5a:5f:a2:
f5:40:f0:ac:b2:a8:3a:08:8e:73:87:6c:fe:11:30:
e9:49:af:b4:2f:58:b9:58:b3:53:4e:0f:c9:b4:a1:
e7:f4:53:58:1c:a9:b9:45:71:54:43:3c:ee:a5:c2:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CE:8E:B0:C2:65:C3:03:31:17:85:A7:E9:15:53:CE:4A:55:D3:B2
X509v3 Authority Key Identifier:
keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/4A9F953EE29611EF8E06890AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.18.0/23
103.207.29.0/24
IPv6:
2001:df4:2980::/48
Signature Algorithm: sha256WithRSAEncryption
7f:3b:56:c2:f5:f9:0d:54:9e:86:e4:b0:47:5e:ae:1e:84:6a:
3c:85:44:73:2b:38:4c:6e:70:79:ad:c1:3d:0d:ff:57:b9:71:
35:e2:62:23:70:65:e4:8c:e8:cf:ab:e1:9a:f5:62:ec:79:42:
0c:40:d7:57:d6:61:41:f4:62:58:b2:b6:30:dc:77:f7:82:be:
cd:d8:3f:cb:1f:b6:e6:e7:59:0c:c6:f6:a8:96:63:fe:2a:ba:
e3:d1:eb:2b:19:16:3a:4b:05:1f:16:51:3a:f9:f2:a4:16:45:
63:5d:dc:b1:ac:20:c0:f5:d2:ba:6b:82:0b:29:14:ca:29:e3:
4a:39:e9:9b:92:2e:84:7f:21:29:7c:b3:21:df:0d:d7:e6:5f:
7f:8e:d7:37:de:ac:7f:94:39:b9:06:47:a8:29:43:36:af:a5:
f4:4b:8c:e2:75:bc:8e:27:b5:9a:30:6a:0f:fd:79:cc:d8:1d:
01:aa:f6:63:a8:b0:e9:2e:ce:c0:92:d2:eb:15:ea:e8:b9:45:
df:e4:9f:80:3d:87:7b:b7:e1:22:a3:d8:92:c2:1d:01:1c:6a:
0a:4c:c9:6c:43:43:9c:e0:86:ce:c2:53:3b:94:c2:97:cb:bd:
b7:13:df:cd:06:29:1e:b4:3e:51:94:79:0e:3c:86:a1:39:67:
1c:e3:19:e1
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF
ODE3RTM5QUQwHhcNMjUwODMwMjExMjIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjhiZi01ZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu1O1oHsyn5UAJCaoz4xJ5HXskLLdSv5SI8VirWiSCynLrGFq+8oy0urZj0SC
L9fCMOckRUap/yWb40g1wWmzYfAJurZ7n0vkoXzcyRVBUHzf7zHNUKHvZNUcmbX+
TFmuR5Zm2sUBhlSja4Shnu+o3SQiBRQqnfIweBPBQYL7nVC4yWWrbQhJPJAkT2g2
q5ZrBHaLD4v2rCO7At3P4ABX5xNVw5g3p7mQ01ZDmVsv+8rBV8ezSWx9sypTYts6
ecRBpU07xHDVCuofnySrp7JaX6L1QPCssqg6CI5zh2z+ETDpSa+0L1i5WLNTTg/J
tKHn9FNYHKm5RXFUQzzupcLLAwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFNnOjrDC
ZcMDMReFp+kVU85KVdOyMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2
RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTIxNzYvODhBQjhFOTRDNkZGMTFFQTgyNTJFMTA5QzRGOUFFMDIvNEE5Rjk1M0VF
Mjk2MTFFRjhFMDY4OTBBQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQBZ5kSAwQAZ88dMA8EAgACMAkDBwAgAQ30KYAwDQYJKoZIhvcNAQEL
BQADggEBAH87VsL1+Q1UnobksEderh6EajyFRHMrOExucHmtwT0N/1e5cTXiYiNw
ZeSM6M+r4Zr1Yux5QgxA11fWYUH0YliytjDcd/eCvs3YP8sftubnWQzG9qiWY/4q
uuPR6ysZFjpLBR8WUTr58qQWRWNd3LGsIMD10rprggspFMop40o56ZuSLoR/ISl8
syHfDdfmX3+O1zferH+UObkGR6gpQzavpfRLjOJ1vI4ntZowag/9eczYHQGq9mOo
sOkuzsCS0usV6ui5Rd/kn4A9h3u34SKj2JLCHQEcagpMyWxDQ5zghs7CUzuUwpfL
vbcT380GKR60PlGUeQ48hqE5ZxzjGeE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:38 2026 by rpki-client