
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa
File: C673BB1AD0EB11F088F8F063C4F9AE02.roa (raw, json)
Hash identifier: +lTLwLrmEGRpnIGIwjJCBRzNe7yk7RhMSey/Pk+Y8/E=
Subject key identifier: 62:98:B7:28:A7:50:83:91:FD:5D:7F:67:D9:4A:F1:4F:58:C3:76:03
Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial: 3B
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:03:42 +0000
ROA not before: Thu 04 Dec 2025 08:32:32 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 150706
IP address blocks: 103.99.23.0/24 maxlen: 24
103.108.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Validity
Not Before: Dec 4 08:32:32 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3d6be-5667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:da:10:fd:3e:ac:f3:49:af:3b:ad:b2:c4:
32:2e:5d:a6:82:30:ac:17:a2:d8:bc:9c:e1:5b:73:
e1:b1:32:ef:74:16:bb:0a:b8:84:5b:7f:51:9a:d6:
01:a9:d3:02:2e:5e:0b:b9:4a:6b:df:3d:19:31:9e:
5e:00:35:30:a1:47:06:f9:93:5f:a6:3c:4e:5e:b2:
35:d8:ce:5a:0e:75:79:a6:83:73:76:6c:70:47:8b:
7a:52:9a:11:bb:a3:16:4b:b9:33:e8:e2:d0:ff:4d:
c4:56:8e:60:89:05:fd:a5:f9:25:1d:ad:1e:34:2d:
7c:a8:4e:1a:b0:38:d5:a3:82:be:22:48:87:08:98:
e4:28:77:a4:0e:26:a6:56:d6:2a:f2:41:82:ab:58:
71:2f:0c:42:2a:77:29:02:8e:90:ee:bb:a2:0e:49:
e8:00:cf:1d:2b:3c:bb:c9:c7:ac:45:76:05:be:47:
22:54:bd:06:a7:64:94:e9:ed:16:94:83:bd:ed:fd:
4d:70:de:ab:43:44:fe:db:1e:a1:ee:c4:cf:f3:f3:
d7:25:a5:8b:e4:93:38:3a:92:29:d3:0d:05:84:22:
2b:e3:e6:d2:93:5a:c3:e8:5e:15:70:dc:2e:3d:2a:
a2:34:8f:a6:a0:70:84:91:fe:9c:a3:4d:1b:4f:eb:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:B7:28:A7:50:83:91:FD:5D:7F:67:D9:4A:F1:4F:58:C3:76:03
X509v3 Authority Key Identifier:
keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/C673BB1AD0EB11F088F8F063C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.23.0/24
103.108.2.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:a4:96:6a:0f:f2:e8:3a:92:ea:f5:ba:7e:3f:85:92:83:18:
de:9b:f6:83:4e:99:18:11:80:21:2a:89:0e:25:d8:9e:20:ce:
a7:68:56:6d:7c:37:ae:0e:76:ff:12:22:c7:ba:ab:ac:a4:11:
fa:1b:b0:b1:6d:a2:7a:5d:54:e1:ed:42:98:90:0a:ba:f5:d8:
a8:54:c3:db:1a:3e:d2:66:61:36:2c:29:8d:7c:d0:f8:3e:3d:
b8:0c:ee:e8:3f:89:1c:31:cb:d3:0c:da:c7:45:25:36:6a:8b:
64:e7:9a:9d:48:3e:3c:5c:6e:21:36:74:f1:6f:ad:7a:6e:00:
4b:98:9b:25:5f:b0:0d:a6:95:9a:97:79:a4:85:6c:4f:00:75:
c9:41:90:87:a5:98:c3:a0:95:ff:72:99:67:e7:a4:eb:8e:fa:
27:c4:2e:b2:52:91:9b:31:c2:dc:bb:74:23:81:c4:9b:c1:bb:
ab:99:85:78:64:5c:3a:b2:c2:f2:84:94:4c:c7:25:f5:48:50:
84:a6:3b:1f:1e:a7:33:55:22:81:7c:1b:8a:db:b4:99:df:77:
9b:95:46:e9:33:ba:55:e5:67:46:3b:fd:f0:71:25:ce:5c:75:
aa:52:c6:2c:6e:e3:a2:02:af:12:33:55:bb:cc:11:dc:1b:db:
64:3f:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:52 2026 by rpki-client