
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
File: 1E7F6B9603C211EEB2272068C4F9AE02.roa (raw, json)
Hash identifier: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=
Subject key identifier: 1F:AC:CA:B7:8B:51:3A:1B:71:4B:5E:34:42:52:F7:DB:0E:6D:6B:AA
Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Certificate serial: 0217
Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:07:23 +0000
ROA not before: Sun 23 Nov 2025 01:18:48 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137420
IP address blocks: 103.197.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Validity
Not Before: Nov 23 01:18:48 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4562b-5fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:75:a1:63:0c:df:26:f6:4c:53:7d:2f:8d:
5e:74:2e:b4:00:63:a3:cd:9c:27:83:43:ea:38:a8:
8d:34:7d:6b:b6:13:8f:f2:36:e9:35:e5:7a:ee:5e:
d0:50:41:a1:3e:7b:36:1f:8f:57:ef:e4:bd:06:0f:
81:3e:f8:f2:85:7d:d3:a6:31:3e:6a:0c:6a:18:52:
ef:34:23:85:59:64:8b:da:81:8a:07:2d:6c:e3:1a:
17:55:ac:4d:f2:e3:3d:55:e7:37:de:84:3d:58:85:
5f:ff:41:47:08:c7:fe:15:68:69:d9:63:09:8b:f5:
17:ee:6b:9b:66:0c:e0:5b:19:72:30:34:55:fc:c1:
d2:d5:d8:76:d8:f2:65:1a:6a:06:1c:a7:24:fd:22:
48:d2:46:95:ba:5c:cb:79:1b:01:34:16:56:3e:bf:
df:92:75:e0:af:6e:27:66:a9:3e:c2:d4:2d:c3:a2:
6d:ea:43:33:08:d1:31:b2:44:72:ac:c6:f8:70:2d:
aa:c5:45:bd:35:b3:db:93:72:07:0b:06:86:c5:2a:
30:a3:4c:60:5d:f7:8e:b1:c3:05:cb:b6:35:dc:aa:
e8:2f:5d:63:42:33:fd:3a:f9:e2:07:e8:0e:f2:5e:
85:9a:ec:87:ad:8c:8b:2d:c1:1c:02:8e:e5:44:45:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AC:CA:B7:8B:51:3A:1B:71:4B:5E:34:42:52:F7:DB:0E:6D:6B:AA
X509v3 Authority Key Identifier:
keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.197.202.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:03:ad:4b:f2:9f:1f:a0:92:9a:92:b1:c2:fe:52:f1:07:79:
89:72:e2:2b:ff:5b:43:0b:fe:c6:d4:25:b7:5b:95:5d:b2:8c:
22:f7:d0:df:78:9b:07:1b:fc:07:4e:15:c5:be:91:21:bb:6b:
0e:09:3d:4a:81:3d:71:f2:b5:5e:ca:cc:f5:2d:e8:6b:20:0a:
b8:bd:ec:ee:d4:62:13:9a:3f:58:ae:ec:ef:d6:a1:c9:6a:26:
3f:f2:74:97:db:68:af:fd:78:7c:9b:45:c4:8c:0c:9c:56:1d:
2c:44:8f:61:dd:71:52:c2:26:09:89:3a:3f:63:7e:cf:b0:ca:
dc:3c:76:51:e9:41:c9:a8:d9:dc:d6:fd:24:3d:c4:81:68:ef:
8e:5e:c7:8a:df:c7:ad:b7:c7:fe:cd:00:04:b5:ea:ba:85:00:
3e:97:a7:0f:f0:45:75:55:fb:43:d7:63:14:b5:ac:7c:4e:88:
af:a6:21:a9:2b:80:5f:a0:a4:12:dd:4a:8f:e4:e5:75:e7:5a:
71:0c:17:de:29:86:8b:8b:4a:b3:41:e4:3e:f5:fb:e6:ce:ec:
03:6d:36:78:51:4b:09:d3:e9:64:4b:17:a7:99:e4:2d:f6:b1:
49:1b:11:a8:12:e5:ec:ec:80:af:fe:56:c1:89:15:47:d2:b4:
64:bd:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:31 2026 by rpki-client