
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/22009BF2854111EBA0658B42C4F9AE02.roa
File: 22009BF2854111EBA0658B42C4F9AE02.roa (raw, json)
Hash identifier: noKuoeiHOnGKfqqGIFSmXAvo6SNhLKVozyzlAk2N6uU=
Subject key identifier: 2E:3A:0A:32:CA:0A:D5:29:0F:38:01:B8:C8:0B:4E:FF:3D:52:96:92
Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF
Certificate serial: 06ED
Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/22009BF2854111EBA0658B42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:44:46 +0000
ROA not before: Fri 04 Jul 2025 23:04:01 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137822
IP address blocks: 103.115.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl
rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF
Validity
Not Before: Jul 4 23:04:01 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a40a8e-60d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:f8:a4:27:c2:d1:02:f3:a6:ad:c0:5c:99:
b1:ce:40:c0:3d:e1:d6:24:ae:c6:0c:8f:f8:9e:01:
90:65:75:bd:ad:fa:cf:0e:8b:41:95:73:92:35:5d:
ff:b1:2e:5b:a6:99:9e:54:cf:cf:a7:a6:67:10:2a:
06:eb:9c:a0:83:e7:57:2f:cd:a8:02:80:17:af:23:
0b:97:66:ff:02:87:99:ef:18:31:e2:4c:9c:a7:cd:
3c:32:36:a6:eb:87:db:e5:fe:ac:68:c6:aa:16:39:
8d:ee:83:af:73:91:0f:72:a3:7d:01:30:fb:cd:7b:
40:34:71:66:0f:9c:74:f2:49:f2:90:a5:0a:bf:07:
79:01:66:50:4f:ae:d3:14:b4:8c:ff:f4:cb:e6:fc:
9e:17:22:d5:6b:47:17:c8:9c:75:52:09:16:02:dd:
a2:44:c2:6e:0b:ef:a2:07:71:43:fb:90:8a:a1:5d:
f9:19:95:b0:29:2b:81:de:66:91:db:80:07:3b:e8:
92:04:3b:c6:a2:3d:74:b1:a8:62:cc:b9:ff:9c:57:
c0:ba:34:43:eb:8a:ec:bc:58:49:4f:00:e3:0d:e5:
94:57:6d:80:38:e4:fb:fb:02:06:54:28:ae:70:c2:
c5:11:69:03:b4:89:74:c2:e7:c4:3a:e0:3e:55:0a:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:0A:32:CA:0A:D5:29:0F:38:01:B8:C8:0B:4E:FF:3D:52:96:92
X509v3 Authority Key Identifier:
keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/22009BF2854111EBA0658B42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8c:f3:40:5c:aa:0c:33:d2:d9:72:62:7a:87:be:11:bb:c8:
67:d7:79:f6:7d:71:cc:af:e8:a0:07:84:12:5e:7d:10:65:53:
66:6c:71:b1:c9:f2:b3:e4:5e:6a:17:2d:ed:62:72:a2:8c:d7:
5a:ff:a7:80:bb:97:5d:fb:1a:1a:48:a2:79:af:39:aa:e0:7b:
f3:e5:3a:a1:8f:51:3a:18:02:f5:1c:ed:0c:ce:6f:65:49:d2:
6c:33:29:eb:e3:06:e3:8d:c2:bf:1a:77:46:7d:46:17:b7:a9:
20:de:16:5e:25:af:43:84:73:2e:d7:ba:51:b7:a6:7a:2f:ec:
8a:72:73:1e:6c:f1:b7:d9:e4:2a:59:f6:00:15:f1:20:d6:7a:
48:68:32:a3:09:e8:5d:ff:64:b6:6e:66:de:e2:8a:1a:5d:f1:
46:99:2d:71:09:5a:e4:cf:9e:93:1e:44:1c:ac:ae:6d:d5:c5:
2a:13:b6:2d:1d:90:2f:ea:32:21:f5:b3:ee:50:71:d1:26:d1:
f0:f7:42:13:3f:fd:bd:51:85:af:12:e2:d1:ee:90:5f:c6:da:
61:01:e8:9d:ec:0c:86:c9:25:19:76:a9:6f:73:60:48:0e:7e:
e0:62:d9:93:51:b8:ed:c2:35:98:0a:eb:07:ab:12:99:ac:2b:
b5:3a:9e:8a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy
QUU1QkMwRUYwHhcNMjUwNzA0MjMwNDAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGE4ZS02MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrT4pCfC0QLzpq3AXJmxzkDAPeHWJK7GDI/4ngGQZXW9rfrPDotBlXOSNV3/
sS5bppmeVM/Pp6ZnECoG65ygg+dXL82oAoAXryMLl2b/AoeZ7xgx4kycp808Mjam
64fb5f6saMaqFjmN7oOvc5EPcqN9ATD7zXtANHFmD5x08knykKUKvwd5AWZQT67T
FLSM//TL5vyeFyLVa0cXyJx1UgkWAt2iRMJuC++iB3FD+5CKoV35GZWwKSuB3maR
24AHO+iSBDvGoj10sahizLn/nFfAujRD64rsvFhJTwDjDeWUV22AOOT7+wIGVCiu
cMLFEWkDtIl0wufEOuA+VQooRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC46CjLK
CtUpDzgBuMgLTv89UpaSMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1
M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTcwODMvRTI2NjI0MEU4NTNGMTFFQjhDMkVGRTQxQzRGOUFFMDIvMjIwMDlCRjI4
NTQxMTFFQkEwNjU4QjQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3MHMA0GCSqGSIb3DQEBCwUAA4IBAQCojPNAXKoMM9LZcmJ6h74R
u8hn13n2fXHMr+igB4QSXn0QZVNmbHGxyfKz5F5qFy3tYnKijNda/6eAu5dd+xoa
SKJ5rzmq4Hvz5Tqhj1E6GAL1HO0Mzm9lSdJsMynr4wbjjcK/GndGfUYXt6kg3hZe
Ja9DhHMu17pRt6Z6L+yKcnMebPG32eQqWfYAFfEg1npIaDKjCehd/2S2bmbe4ooa
XfFGmS1xCVrkz56THkQcrK5t1cUqE7YtHZAv6jIh9bPuUHHRJtHw90ITP/29UYWv
EuLR7pBfxtphAeid7AyGySUZdqlvc2BIDn7gYtmTUbjtwjWYCusHqxKZrCu1Op6K
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:50:10 2026 by rpki-client