
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/9924B750A1AF11EC9A73D814C4F9AE02.roa
File: 9924B750A1AF11EC9A73D814C4F9AE02.roa (raw, json)
Hash identifier: OnrJHjAaotCz5N5oezIxaMJXxP9Vqz9O52EXIcge9Do=
Subject key identifier: EE:DC:60:60:31:AD:BF:A5:2A:56:5F:D1:7D:1D:24:5E:6B:92:DE:20
Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Certificate serial: 041F
Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/9924B750A1AF11EC9A73D814C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:55:41 +0000
ROA not before: Mon 05 May 2025 00:36:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132490
IP address blocks: 103.183.140.0/24 maxlen: 24
103.183.141.0/24 maxlen: 24
2001:df0:87c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Validity
Not Before: May 5 00:36:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3ff0d-5630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:bf:54:cc:41:72:e5:94:49:27:53:6f:a3:
53:85:ba:a7:02:e1:24:cc:8d:6d:ff:f7:a5:57:a6:
00:97:ef:6f:aa:18:d0:6f:d3:ea:02:75:3f:27:60:
0d:d5:d3:03:01:cb:e9:87:f8:ad:39:b7:27:75:cb:
c2:fb:67:5a:5a:50:3b:50:8e:78:ab:02:1c:6b:3c:
fd:dc:46:a9:dc:4a:3d:60:6f:12:3f:21:67:e3:f6:
da:00:e9:9b:dd:be:ea:25:e3:44:0d:6e:21:ef:98:
54:9a:0f:76:3f:8f:6e:c7:e6:cf:06:b2:13:42:1a:
25:b3:e2:ea:73:8a:ad:d6:ac:a8:67:6a:47:4e:3f:
e8:14:24:77:b4:1f:8a:dc:07:c1:32:70:04:da:fc:
ab:4d:61:3e:f1:3e:a9:57:52:51:4c:81:62:2f:d3:
f1:b2:cf:d5:55:0f:5b:2d:87:80:a9:77:74:49:f6:
a7:35:7f:4a:2a:9a:39:2f:d4:9b:2f:e1:80:8b:da:
4f:56:95:de:24:61:73:0e:77:87:3f:92:ca:f4:e7:
50:26:c8:ab:9a:7a:af:7d:28:51:d7:8f:9e:cd:98:
70:ed:bc:d4:58:9e:f3:57:66:4f:bb:97:fd:e1:44:
8e:47:5a:4f:a8:8e:6d:ab:47:da:bc:2c:b3:8f:ab:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:60:60:31:AD:BF:A5:2A:56:5F:D1:7D:1D:24:5E:6B:92:DE:20
X509v3 Authority Key Identifier:
keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/9924B750A1AF11EC9A73D814C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.140.0/23
IPv6:
2001:df0:87c0::/48
Signature Algorithm: sha256WithRSAEncryption
17:bc:09:e4:1b:11:e5:b9:70:0e:c8:fe:3b:75:66:5d:56:77:
6a:b7:89:69:73:2d:1e:bd:99:db:24:6b:84:02:e6:81:94:94:
ba:a9:12:31:61:9a:03:8c:f0:4a:87:de:1a:8d:61:94:51:93:
d7:15:d4:66:29:b5:e3:10:b7:e1:2f:49:2f:69:36:29:21:e0:
b9:42:3c:4d:20:74:d5:4d:0a:48:06:5c:82:6c:69:ae:13:a8:
61:ad:3c:c1:e5:f2:18:6f:5c:d7:08:cd:d3:29:03:45:5f:18:
9e:b4:5e:31:b1:cb:7a:6d:9d:ec:34:2b:33:4f:43:2e:7a:e3:
d6:df:ee:27:be:a3:04:d1:d4:b4:f7:c9:b4:0f:79:f0:cd:3b:
b9:63:55:04:8c:85:8c:d1:54:6a:1d:1b:f4:1d:16:dc:5e:23:
dd:f3:7a:38:9b:e3:53:f9:41:75:e5:76:f1:af:95:52:16:9d:
ee:16:8b:30:e2:40:54:30:a5:9c:87:6b:8d:85:58:e0:4e:a8:
66:a3:c8:d5:1e:60:cd:75:ac:15:48:bb:89:f8:5a:aa:35:3f:
27:b8:df:5b:29:fa:d4:c3:4b:ab:35:39:0a:31:f6:a9:b2:f7:
78:4b:9a:7d:8e:a8:57:56:bd:8c:c0:2c:32:e9:67:fb:dc:d2:
6a:da:96:3d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz
Q0MxOUM3RkUwHhcNMjUwNTA1MDAzNjMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmYwZC01NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1NG/VMxBcuWUSSdTb6NThbqnAuEkzI1t//elV6YAl+9vqhjQb9PqAnU/J2AN
1dMDAcvph/itObcndcvC+2daWlA7UI54qwIcazz93Eap3Eo9YG8SPyFn4/baAOmb
3b7qJeNEDW4h75hUmg92P49ux+bPBrITQhols+Lqc4qt1qyoZ2pHTj/oFCR3tB+K
3AfBMnAE2vyrTWE+8T6pV1JRTIFiL9Pxss/VVQ9bLYeAqXd0SfanNX9KKpo5L9Sb
L+GAi9pPVpXeJGFzDneHP5LK9OdQJsirmnqvfShR14+ezZhw7bzUWJ7zV2ZPu5f9
4USOR1pPqI5tq0favCyzj6tnjwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO7cYGAx
rb+lKlZf0X0dJF5rkt4gMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx
MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE1ODIvOTc0RkNBQTBBMTE5MTFFQzhDNEZGQTgzQzRGOUFFMDIvOTkyNEI3NTBB
MUFGMTFFQzlBNzNEODE0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7eMMA8EAgACMAkDBwAgAQ3wh8AwDQYJKoZIhvcNAQELBQADggEB
ABe8CeQbEeW5cA7I/jt1Zl1Wd2q3iWlzLR69mdska4QC5oGUlLqpEjFhmgOM8EqH
3hqNYZRRk9cV1GYpteMQt+EvSS9pNikh4LlCPE0gdNVNCkgGXIJsaa4TqGGtPMHl
8hhvXNcIzdMpA0VfGJ60XjGxy3ptnew0KzNPQy5649bf7ie+owTR1LT3ybQPefDN
O7ljVQSMhYzRVGodG/QdFtxeI93zejib41P5QXXldvGvlVIWne4WizDiQFQwpZyH
a42FWOBOqGajyNUeYM11rBVIu4n4Wqo1Pye431sp+tTDS6s1OQox9qmy93hLmn2O
qFdWvYzALDLpZ/vc0mralj0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:00 2026 by rpki-client