
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1DDE652A03C211EEB2272068C4F9AE02.roa
File: 1DDE652A03C211EEB2272068C4F9AE02.roa (raw, json)
Hash identifier: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=
Subject key identifier: 1F:18:7E:49:96:D2:F2:7D:41:5A:29:DB:90:65:84:3C:46:0E:36:38
Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Certificate serial: 0216
Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1DDE652A03C211EEB2272068C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:07:22 +0000
ROA not before: Sun 23 Nov 2025 01:18:46 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137418
IP address blocks: 103.197.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Validity
Not Before: Nov 23 01:18:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4562a-eca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:29:47:e0:97:d3:fb:1c:90:4f:09:d1:12:
5b:34:39:21:1e:51:0d:79:8d:94:b9:6f:76:fc:2b:
79:e6:4d:ae:ae:6a:29:48:9a:0b:21:fa:2b:0b:78:
9c:b2:b3:a9:47:dc:66:64:2a:e5:fe:96:bb:b4:75:
a3:85:f0:32:78:b0:8e:b8:e5:b6:e3:22:9e:49:85:
4e:db:c8:17:52:ca:7a:de:ef:c2:cb:1d:12:74:e4:
12:4a:35:ee:af:25:f5:4d:f3:21:f0:57:eb:5a:89:
96:fb:b0:f3:ed:93:f7:0d:fd:02:64:55:da:42:0e:
68:a0:45:9d:81:68:aa:91:95:e2:49:06:46:bb:04:
23:58:d5:5c:cf:52:73:82:4b:a4:36:a8:28:19:79:
68:66:8e:b4:7e:a5:7b:91:cd:1d:9c:dc:55:9c:e1:
49:39:3d:ba:dc:7a:09:84:84:e6:b2:3b:13:71:35:
a7:76:29:38:2f:e3:01:09:ef:f2:99:00:23:b7:1e:
6b:35:55:81:85:c1:25:12:63:18:c1:c7:95:33:d4:
0a:13:b8:3a:9e:bc:f5:2b:c2:f2:a2:e9:e5:eb:de:
6c:5d:79:30:ce:6a:32:ae:c2:67:37:fe:41:55:ce:
5a:12:49:dc:b6:af:99:c3:c7:9f:f8:1c:0c:56:e4:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:7E:49:96:D2:F2:7D:41:5A:29:DB:90:65:84:3C:46:0E:36:38
X509v3 Authority Key Identifier:
keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1DDE652A03C211EEB2272068C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.197.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:73:35:58:a3:7a:cd:98:73:61:a5:95:ad:68:99:cc:2e:39:
25:15:30:87:32:b7:71:fd:ee:81:72:61:cd:f3:40:7a:ca:ec:
f3:3e:98:f0:56:3e:3f:e1:f9:39:62:1d:85:08:6c:47:65:e4:
9b:5d:c6:88:a4:fb:3e:8b:12:22:8e:82:c1:c9:d6:fa:cc:71:
a6:0e:74:6f:72:0c:86:85:79:03:76:40:1b:4e:e9:fe:71:94:
30:b5:d6:8f:f3:b7:0b:30:b7:ed:6b:2a:0e:6d:81:3b:4e:16:
b8:c0:44:de:52:b3:8c:11:1f:20:16:21:64:e8:3d:bd:cf:08:
d2:8f:77:77:de:88:d7:07:d8:c4:f4:0a:62:c9:73:d9:60:7d:
8c:01:1e:b1:85:3a:2c:ac:8d:49:11:ab:51:6e:6a:9e:f1:e0:
ef:55:17:39:db:e9:dd:f3:a9:d7:c0:51:b0:50:b1:89:97:3d:
1a:d8:d8:d1:ac:85:9b:26:f5:10:fd:b7:54:01:a5:d1:94:bb:
19:75:80:a4:47:61:21:8b:26:ae:41:c5:89:8d:48:e9:eb:a8:
36:c2:ce:0a:c2:67:da:05:43:d2:2f:f8:9c:15:69:10:98:12:
be:d2:8b:e2:e3:90:6b:3a:b2:94:f1:ba:4f:f1:9c:45:b9:f1:
27:6f:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:28 2026 by rpki-client