
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
File: F23AE0AE632D11ED8C102087C4F9AE02.roa (raw, json)
Hash identifier: r515GfkktRVsEjZ5VOujp3dI2GmJIY+xZnhY3UWMtM8=
Subject key identifier: 51:28:DF:94:6E:56:E0:8D:4C:16:40:A4:13:60:ED:42:07:97:F0:67
Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Certificate serial: 0279
Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:14:37 +0000
ROA not before: Tue 09 Sep 2025 02:39:22 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150302
IP address blocks: 103.217.98.0/24 maxlen: 24
103.217.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Validity
Not Before: Sep 9 02:39:22 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3f56d-87a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:ad:1a:d4:ad:ce:32:1e:b8:0f:9d:13:9d:
81:c3:50:60:32:82:b0:b8:7f:71:a0:2c:db:ca:81:
3b:d0:90:e4:34:aa:84:fe:7e:30:37:02:67:7f:b3:
de:45:2f:b7:fe:56:2b:54:a2:b1:ad:d7:87:46:5a:
68:dd:82:49:bf:1e:b3:c5:13:f6:62:7f:7e:46:42:
ef:25:3e:86:32:b8:15:20:8e:96:cb:ac:b0:a9:93:
de:52:a4:7c:77:5b:2e:77:11:63:c0:75:79:15:55:
84:d0:b8:1e:80:75:db:6e:79:dc:f0:f4:a3:1a:d3:
03:d2:6e:bf:d9:89:71:3e:44:f9:af:18:51:aa:28:
4b:b4:cb:5b:25:65:46:4c:21:c8:8c:19:5a:80:35:
0f:05:57:17:9e:82:0e:d5:d0:47:95:d8:32:47:d3:
de:7f:31:8c:c0:49:77:93:17:44:00:f3:9a:a8:f4:
65:21:e3:b3:f4:d3:c8:88:fe:a0:09:c9:19:42:98:
26:ee:bc:ea:53:a1:0c:12:d9:46:c1:5d:2e:f2:23:
bd:cc:f6:29:fc:c6:4a:dd:2a:4a:20:33:89:3f:23:
23:67:8e:c1:52:8e:2b:1a:ed:6f:8b:2b:ce:50:bd:
1d:50:e9:e9:19:ef:17:16:c7:d6:ea:81:d2:7f:11:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:DF:94:6E:56:E0:8D:4C:16:40:A4:13:60:ED:42:07:97:F0:67
X509v3 Authority Key Identifier:
keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.217.98.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:64:0f:e0:ac:ce:d1:cc:d6:d3:57:6b:f6:ce:b2:59:cc:9a:
8c:b2:bf:1f:23:6a:ff:d8:63:e4:d2:54:80:9d:1e:82:e5:b2:
07:27:5e:5c:f4:79:8e:21:74:51:ff:e2:44:6a:38:e5:80:1a:
1c:7b:5f:8e:68:48:68:7f:4b:13:e7:b2:b5:02:54:7f:50:be:
07:b8:a4:e9:2a:b2:ce:39:9c:55:22:4e:d3:93:a5:b5:d3:56:
98:45:00:6a:c8:3c:a9:b6:eb:b5:59:61:5e:d7:36:85:1b:e1:
5a:57:86:a6:4f:15:c2:18:09:69:fc:53:3e:7d:08:0c:b2:bc:
32:83:bb:1d:78:88:5e:1c:7c:8e:28:b3:41:ea:6d:72:04:6f:
58:b2:0d:0a:a3:4a:a5:95:c8:b8:71:b7:11:80:eb:d1:af:76:
52:14:7e:97:15:af:3e:ad:bd:cf:33:01:e8:3a:26:fa:f5:a1:
7b:a0:3d:e8:17:4c:ab:9f:ec:24:6d:f9:6e:06:11:f6:36:92:
19:5e:9c:77:2b:a3:58:52:00:df:81:1d:95:d5:a4:5c:ec:6f:
fa:70:24:1f:84:0a:4f:89:b1:cf:66:eb:62:fa:22:a9:a5:9b:
dd:1b:7c:2c:de:7c:b0:28:2a:7a:92:55:1f:fe:46:f8:4c:1e:
e7:36:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:51 2026 by rpki-client