
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/3791632A030011EB909C3244C4F9AE02.roa
File: 3791632A030011EB909C3244C4F9AE02.roa (raw, json)
Hash identifier: XDxzL6lCljcaL+PFu7uqMJYwZnreyNdPjBF2CgcbiTk=
Subject key identifier: C8:46:93:AC:B6:B0:03:F1:41:F9:8F:B6:5E:64:0A:4E:0B:7D:52:91
Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial: 084B
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/3791632A030011EB909C3244C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:44:09 +0000
ROA not before: Wed 31 Dec 2025 21:16:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 23838
IP address blocks: 103.254.194.0/23 maxlen: 23
103.254.194.0/24 maxlen: 24
103.254.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123 (0x84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Validity
Not Before: Dec 31 21:16:57 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45ec9-1009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:ae:f4:e9:0e:22:82:a4:a7:df:f2:0d:00:
87:8f:34:f3:81:17:33:db:0c:57:2a:b1:73:63:13:
d3:66:5b:bc:7b:09:22:38:9f:c5:1b:1a:41:d7:33:
9c:07:ae:16:b1:45:4b:17:8f:78:ad:a2:d5:1c:67:
dc:6f:f2:f8:86:94:9a:30:03:20:7a:0f:72:84:77:
12:44:d5:ca:49:9b:c5:0e:bb:39:b6:ad:df:98:7b:
37:42:2c:57:70:df:18:d0:5b:fa:72:3c:79:7c:33:
0b:7e:d5:54:50:6c:3d:eb:7b:b8:af:f7:0a:9d:cd:
e2:53:4f:97:f7:2f:15:f7:9c:1d:c8:34:10:af:f5:
2c:2d:31:95:bf:8f:aa:e9:d0:0c:14:1d:20:4f:e2:
29:3d:d4:13:20:8b:50:b3:34:84:0d:c6:19:0c:48:
4c:ba:84:8c:25:d3:e9:4d:1e:96:dd:4b:4a:b3:c6:
e0:e3:de:94:14:8a:bf:d6:dc:91:da:a7:8b:52:0f:
65:57:e7:04:6e:d1:7c:fc:35:8f:25:80:0a:9d:f6:
e7:f5:34:d1:6f:ed:20:4f:53:ff:37:03:b1:b0:42:
b7:7b:87:50:90:e1:81:da:6b:f7:9a:27:ff:08:61:
f7:54:73:75:01:71:c8:68:83:4d:29:d4:b8:a3:84:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:93:AC:B6:B0:03:F1:41:F9:8F:B6:5E:64:0A:4E:0B:7D:52:91
X509v3 Authority Key Identifier:
keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/3791632A030011EB909C3244C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.254.194.0/23
Signature Algorithm: sha256WithRSAEncryption
98:f7:29:bf:90:ea:a8:bb:44:d0:af:d5:7b:95:3d:dd:cf:74:
e8:fa:c7:c7:0f:00:68:bd:d5:72:81:67:e6:c8:99:a2:42:43:
b4:36:00:c6:b1:fb:5c:99:7a:2a:1a:7c:b2:f3:ef:58:cd:62:
77:61:9a:b7:01:61:7e:a7:7a:65:a4:f7:88:13:88:e4:5b:54:
53:00:ad:03:bd:b3:b3:72:79:5f:3b:2b:04:be:6b:84:b9:89:
12:f3:42:de:80:ee:ea:4b:e1:fb:69:ee:80:65:37:e0:1d:58:
13:66:04:65:62:f9:dd:67:0f:36:c7:36:bc:ad:61:6a:bf:69:
05:9c:4e:a9:e7:ed:5f:a4:4b:e8:da:1e:50:f2:e6:66:54:5f:
17:c7:d2:f5:ff:e6:21:a6:31:7a:cc:0e:5d:8b:5a:66:e9:33:
1d:07:0c:0d:f2:fb:e2:1b:26:b9:11:84:4d:76:68:70:dc:53:
08:d1:38:b5:47:70:40:83:04:6a:55:5d:2e:71:8d:73:14:41:
40:f1:0a:c9:dc:a9:53:15:34:73:8a:8b:12:f0:c6:69:65:d9:
29:33:d7:28:66:6d:2a:17:13:d4:c7:27:c0:ef:a8:5c:97:3f:
61:bf:34:14:74:2f:0f:60:18:69:a6:8a:b1:85:6d:25:4e:b0:
2b:c6:ba:98
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2
QzFDNzE2ODIwHhcNMjUxMjMxMjExNjU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWVjOS0xMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAom6u9OkOIoKkp9/yDQCHjzTzgRcz2wxXKrFzYxPTZlu8ewkiOJ/FGxpB1zOc
B64WsUVLF494raLVHGfcb/L4hpSaMAMgeg9yhHcSRNXKSZvFDrs5tq3fmHs3QixX
cN8Y0Fv6cjx5fDMLftVUUGw963u4r/cKnc3iU0+X9y8V95wdyDQQr/UsLTGVv4+q
6dAMFB0gT+IpPdQTIItQszSEDcYZDEhMuoSMJdPpTR6W3UtKs8bg496UFIq/1tyR
2qeLUg9lV+cEbtF8/DWPJYAKnfbn9TTRb+0gT1P/NwOxsEK3e4dQkOGB2mv3mif/
CGH3VHN1AXHIaINNKdS4o4TIXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMhGk6y2
sAPxQfmPtl5kCk4LfVKRMB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy
RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNBRjgvNDgyOTdGRUUwMkZFMTFFQkI3MDY2NDNFQzRGOUFFMDIvMzc5MTYzMkEw
MzAwMTFFQjkwOUMzMjQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ/7CMA0GCSqGSIb3DQEBCwUAA4IBAQCY9ym/kOqou0TQr9V7lT3d
z3To+sfHDwBovdVygWfmyJmiQkO0NgDGsftcmXoqGnyy8+9YzWJ3YZq3AWF+p3pl
pPeIE4jkW1RTAK0DvbOzcnlfOysEvmuEuYkS80LegO7qS+H7ae6AZTfgHVgTZgRl
YvndZw82xza8rWFqv2kFnE6p5+1fpEvo2h5Q8uZmVF8Xx9L1/+YhpjF6zA5di1pm
6TMdBwwN8vviGya5EYRNdmhw3FMI0Ti1R3BAgwRqVV0ucY1zFEFA8QrJ3KlTFTRz
iosS8MZpZdkpM9coZm0qFxPUxyfA76hclz9hvzQUdC8PYBhppoqxhW0lTrArxrqY
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:57 2026 by rpki-client