
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa
File: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (raw, json)
Hash identifier: aigYc/n/JGvIbVIQwDO9bKK+eMUG5TvhV7PY2a5Qs6I=
Subject key identifier: 32:E4:0D:A9:43:A6:14:88:ED:61:C7:C2:11:1B:0B:79:B8:13:6A:D0
Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial: 0EAA
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:33:24 +0000
ROA not before: Wed 06 Aug 2025 18:27:43 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140629
IP address blocks: 103.117.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3754 (0xeaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Validity
Not Before: Aug 6 18:27:43 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a45c44-a538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:dd:8d:7d:6e:a8:75:f4:3f:0f:73:56:a7:
70:e0:55:6a:1a:d5:5d:fc:50:0d:a8:9d:f1:12:04:
a5:37:02:fb:c7:d8:78:ed:e0:4f:7e:60:92:4a:1e:
5f:da:1c:b9:a6:61:74:bf:3e:a1:f4:ce:34:2a:28:
01:29:59:7d:0a:e3:18:ea:12:24:59:c3:ed:ad:a7:
62:82:a6:02:25:c9:be:c8:87:da:48:84:6c:d9:79:
48:32:db:7b:89:07:71:56:5f:3d:28:12:1d:48:e4:
b8:06:cb:0e:4e:8b:5a:bb:d4:de:df:0c:71:b7:16:
b9:e7:18:5d:ee:31:9c:86:f3:68:30:0d:ac:32:ab:
ea:0e:52:24:62:52:a8:c8:cb:08:6b:49:89:05:8a:
33:5c:8a:d9:79:48:05:d2:0f:15:09:a8:f3:29:9f:
fd:35:d6:db:c2:1a:91:54:28:67:00:6b:04:d4:4e:
36:98:e4:e1:95:85:08:8c:dc:04:e8:8d:e3:ec:37:
f3:e5:b7:50:23:d9:49:ae:85:ec:ac:8b:63:e0:bf:
94:3a:94:79:07:76:53:d9:8b:34:3b:8f:b1:12:42:
ee:88:78:49:1e:8c:7b:01:5d:57:4a:85:31:5d:78:
66:c0:dd:37:f2:67:8c:51:bd:cb:0a:c7:3a:36:ec:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:0D:A9:43:A6:14:88:ED:61:C7:C2:11:1B:0B:79:B8:13:6A:D0
X509v3 Authority Key Identifier:
keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.130.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f9:25:47:7c:a9:cf:e8:f1:3f:80:aa:21:71:e8:d5:e1:cc:
1c:28:24:c5:0b:a0:5d:74:e9:f1:2d:5b:bc:f1:28:30:38:a8:
d6:4d:94:8d:6e:f6:e1:24:58:62:c4:d7:cd:13:39:f3:3e:ec:
2f:97:5c:36:d9:c1:3c:f8:a4:a2:47:a3:72:a1:95:78:3f:c5:
9f:36:72:16:da:a0:8b:4b:a0:5f:1c:6e:a5:38:84:8e:7e:af:
9c:95:79:77:b4:b9:46:89:c9:44:ac:87:bb:47:f9:6c:f1:8d:
c7:73:23:f8:81:43:f2:02:c3:8d:c7:d7:98:bf:dd:e6:6b:bb:
78:06:40:b3:0b:c3:43:c1:14:09:bf:ad:f9:55:8a:64:25:89:
70:84:65:a8:fd:26:cb:0a:51:33:8e:84:4f:a1:e5:b3:78:4d:
75:4c:63:fa:b6:ad:5d:e9:3e:93:68:1d:38:1a:b2:92:b1:90:
78:1e:c1:f9:4a:d8:20:97:e2:1b:08:fc:38:5a:66:b2:4e:a4:
e5:26:33:63:00:49:5a:40:9d:82:c6:9d:fa:30:00:60:2e:0a:
1f:e2:be:19:b2:7e:93:d0:62:e1:95:45:dd:4b:ac:a8:31:78:
71:c3:45:28:cb:28:86:49:2f:0e:d2:0c:dc:b5:25:87:06:5e:
16:94:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:20 2026 by rpki-client