
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/819F3DD6F5E111EC9754EB85C4F9AE02.roa
File: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (raw, json)
Hash identifier: tyV63/6XwWHMEnlVNrZpKRUTH+qgqLOvrBf/JcSlvnU=
Subject key identifier: 95:4D:6E:8F:72:DA:6C:98:03:F0:7B:09:E9:AA:2C:F9:E1:57:F6:A6
Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial: 034B
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/819F3DD6F5E111EC9754EB85C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:01:57 +0000
ROA not before: Thu 21 Aug 2025 01:38:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 21788
IP address blocks: 103.142.30.0/24 maxlen: 24
103.142.31.0/24 maxlen: 24
2001:df1:2880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503
Validity
Not Before: Aug 21 01:38:33 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a40085-f679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:99:54:31:4e:45:b8:0f:f6:4f:22:36:9e:
7d:a9:dc:f7:4f:6e:09:ff:33:f6:60:f6:d0:02:a1:
15:f7:7c:cc:b5:4e:cf:67:b9:2f:e8:1e:20:4e:64:
05:10:d3:a3:d1:20:93:07:d9:87:c3:06:37:29:fe:
e7:5b:4b:9c:2b:dd:78:66:81:f0:7b:41:c2:bd:a0:
31:6a:82:b3:5b:20:c8:12:00:bc:e7:c0:a2:4c:fc:
ca:36:93:4d:b7:5f:d5:80:96:f6:71:dd:c3:a1:5e:
4b:d8:3d:0c:5e:1a:c0:ec:e5:7f:83:d3:14:e1:59:
6e:a8:da:c8:dc:bd:f3:35:4b:d4:51:03:31:35:3c:
8a:81:18:df:36:6a:2f:5f:a4:6f:12:08:00:c3:4e:
f3:95:83:60:d0:11:dd:e7:18:77:e6:d6:40:27:7c:
d1:68:9f:34:87:d6:09:7a:34:eb:24:20:07:51:ff:
a2:95:06:cd:51:c6:af:ec:54:5e:f3:43:7c:e1:d2:
d9:2b:3a:f6:9f:55:ba:9b:2c:c5:ac:d3:5f:60:dd:
4d:9b:0a:ca:e7:33:4e:a2:1b:39:fa:8e:e3:0f:d4:
25:a9:52:10:f2:f6:38:5a:5e:a6:b5:37:9e:88:be:
3b:5d:a0:7f:07:81:0f:80:d5:cc:6f:cb:74:62:e4:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:6E:8F:72:DA:6C:98:03:F0:7B:09:E9:AA:2C:F9:E1:57:F6:A6
X509v3 Authority Key Identifier:
keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/819F3DD6F5E111EC9754EB85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.30.0/23
IPv6:
2001:df1:2880::/48
Signature Algorithm: sha256WithRSAEncryption
1d:74:f5:f8:4a:4f:c5:40:47:70:25:0c:6b:c2:ef:c5:51:cf:
1f:67:0b:d5:1d:f9:de:77:81:df:de:f9:de:54:97:d9:33:8a:
d4:c5:7b:70:42:5a:dd:90:30:58:29:0a:8f:01:31:80:f4:d7:
3a:20:5c:95:2a:49:36:ce:08:d9:ff:ca:13:84:d2:74:fd:b2:
86:e6:b9:86:a3:75:bf:48:c2:20:ba:e9:ec:01:23:3c:0a:a8:
77:4b:f0:be:7b:03:2b:4f:50:18:11:0f:83:1a:33:e4:f1:8e:
82:1c:a6:73:50:33:1e:ed:d6:7c:c9:50:48:ea:12:6d:04:b4:
2b:f7:2c:af:57:87:af:16:d8:ee:0d:94:cd:77:0e:04:26:d8:
d7:c4:35:be:14:c6:8c:bc:ed:59:39:8c:78:d9:d1:9a:49:94:
08:6b:4e:02:55:de:30:f3:8f:05:2d:29:b8:4b:26:b1:ee:a8:
09:6c:43:f8:cb:96:29:52:05:71:57:fd:3c:31:aa:19:f3:4f:
37:ac:d4:93:5b:92:4c:7a:1e:64:33:a6:af:36:ba:b9:66:d1:
8b:3f:1a:88:93:89:08:e2:c0:8d:63:1c:4e:b3:3c:d4:af:8b:
34:25:14:8f:fd:ba:c3:b2:5a:ec:81:14:92:b7:08:13:16:f2:
57:31:33:a3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4
NjFGMkE1MDMwHhcNMjUwODIxMDEzODMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDA4NS1mNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3gWZVDFORbgP9k8iNp59qdz3T24J/zP2YPbQAqEV93zMtU7PZ7kv6B4gTmQF
ENOj0SCTB9mHwwY3Kf7nW0ucK914ZoHwe0HCvaAxaoKzWyDIEgC858CiTPzKNpNN
t1/VgJb2cd3DoV5L2D0MXhrA7OV/g9MU4VluqNrI3L3zNUvUUQMxNTyKgRjfNmov
X6RvEggAw07zlYNg0BHd5xh35tZAJ3zRaJ80h9YJejTrJCAHUf+ilQbNUcav7FRe
80N84dLZKzr2n1W6myzFrNNfYN1NmwrK5zNOohs5+o7jD9QlqVIQ8vY4Wl6mtTee
iL47XaB/B4EPgNXMb8t0YuQ3XQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJVNbo9y
2myYA/B7CemqLPnhV/amMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1
REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTcxMUIvNTA1Qzk3MzhGNURCMTFFQzlEMDY3NzdCQzRGOUFFMDIvODE5RjNERDZG
NUUxMTFFQzk3NTRFQjg1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ44eMA8EAgACMAkDBwAgAQ3xKIAwDQYJKoZIhvcNAQELBQADggEB
AB109fhKT8VAR3AlDGvC78VRzx9nC9Ud+d53gd/e+d5Ul9kzitTFe3BCWt2QMFgp
Co8BMYD01zogXJUqSTbOCNn/yhOE0nT9sobmuYajdb9IwiC66ewBIzwKqHdL8L57
AytPUBgRD4MaM+TxjoIcpnNQMx7t1nzJUEjqEm0EtCv3LK9Xh68W2O4NlM13DgQm
2NfENb4Uxoy87Vk5jHjZ0ZpJlAhrTgJV3jDzjwUtKbhLJrHuqAlsQ/jLlilSBXFX
/TwxqhnzTzes1JNbkkx6HmQzpq82urlm0Ys/GoiTiQjiwI1jHE6zPNSvizQlFI/9
usOyWuyBFJK3CBMW8lcxM6M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:34 2026 by rpki-client