
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/7007614C829811F094DDE01BC4F9AE02.roa
File: 7007614C829811F094DDE01BC4F9AE02.roa (raw, json)
Hash identifier: Y/urDtvmoxrvI9RD7nRWTtIwBS0chKb7wOu16fjLwtA=
Subject key identifier: 8F:97:35:F7:B6:68:CD:21:64:D4:CD:BF:8A:83:66:6E:3E:C5:80:C3
Certificate issuer: /CN=A91F757F/serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Certificate serial: C8
Authority key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/7007614C829811F094DDE01BC4F9AE02.roa
Signing time: Thu 03 Sep 2026 07:57:18 +0000
ROA not before: Thu 03 Sep 2026 07:57:18 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133142
IP address blocks: 103.101.215.0/24 maxlen: 24
2001:df6:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl
rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Validity
Not Before: Sep 3 07:57:18 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a99285e-b9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:3b:02:bf:00:46:40:b1:b0:f7:bb:e5:db:
c5:6f:58:f1:30:3d:cd:a4:ab:fc:3d:a0:b5:1d:03:
1a:b7:95:52:74:de:0f:9d:49:94:40:dc:c7:94:e2:
eb:58:5f:a0:b6:87:0f:1b:8f:8e:9b:0f:2a:ca:6c:
58:df:b7:34:c3:40:db:9b:3a:4b:ba:4a:75:46:6b:
a2:33:56:cf:54:a5:0b:aa:ea:fa:a4:5a:3c:5b:da:
27:2c:aa:7b:61:44:18:6e:ad:f6:d6:6e:d1:49:a8:
58:ec:cc:16:a1:37:c7:19:66:6f:a0:78:83:a9:e2:
fe:db:97:1c:52:6a:cd:d0:39:f3:4e:0d:18:e3:3e:
02:a1:bf:02:73:b8:22:f8:05:22:cf:e7:36:fe:09:
f8:ca:1a:97:da:a7:75:28:f1:8d:46:c5:86:91:d8:
46:25:db:6a:ba:b8:4c:28:52:c4:21:ba:7e:38:ea:
4d:c9:50:26:60:22:ad:20:d0:86:29:24:14:6a:4a:
33:30:c7:16:7b:a6:d0:c0:6e:18:5f:f8:04:5a:83:
c9:d5:11:2a:47:02:98:9a:69:ec:db:d1:60:d3:90:
90:38:68:5f:32:df:c2:4c:ca:b3:ab:29:0b:47:1c:
3b:86:b6:d7:ba:8b:d0:af:f4:e3:09:9e:43:cd:63:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:35:F7:B6:68:CD:21:64:D4:CD:BF:8A:83:66:6E:3E:C5:80:C3
X509v3 Authority Key Identifier:
keyid:27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/7007614C829811F094DDE01BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.215.0/24
IPv6:
2001:df6:f000::/48
Signature Algorithm: sha256WithRSAEncryption
c4:07:58:82:dc:41:4e:3b:0e:da:57:2c:0b:24:6e:43:fd:93:
55:78:1a:39:84:1c:f3:80:23:05:0e:d4:42:b6:56:cb:97:4c:
d9:e9:ae:8c:16:37:f4:86:85:0b:82:35:fd:23:59:2f:16:a5:
fe:61:09:ae:49:0f:83:19:93:8d:11:22:77:0a:93:37:42:a2:
e2:cf:49:47:ac:8b:7c:c9:fc:47:91:33:1e:d9:65:80:56:b1:
5d:8a:c2:ed:95:86:51:3a:0d:02:71:10:2c:e7:3a:2a:aa:ce:
f0:85:5a:e6:94:d9:ff:6d:10:e4:65:43:c5:c3:ea:58:ab:c8:
be:ba:59:b4:e9:b0:d2:ca:24:46:a8:e7:15:a0:9e:d3:a7:fb:
b7:75:27:5b:3f:19:5a:e9:17:fc:ec:f9:28:9f:57:a6:69:cd:
53:dd:8d:7a:7c:1f:9d:f3:ce:85:a1:13:82:1e:20:49:27:9f:
14:3d:4f:d9:48:41:20:0b:ad:a6:12:cd:4c:31:d0:6b:b5:8c:
99:f4:d9:a1:0e:a8:50:21:6f:db:9e:63:a2:32:0f:17:01:f2:
4e:eb:e1:ff:26:2f:27:07:56:f6:fd:39:83:00:da:57:05:d8:
08:07:94:28:44:64:37:66:1f:8e:9d:af:b8:9c:99:07:a3:5f:
bd:2b:1e:b3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc1N0YxMTAvBgNVBAUTKDI3NTdEMTFGN0I3ODY3NDg3QjhFODcwMUQ3MkFDNjFB
RDMyNzlFMEUwHhcNMjYwOTAzMDc1NzE4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk5Mjg1ZS1iOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5/87Ar8ARkCxsPe75dvFb1jxMD3NpKv8PaC1HQMat5VSdN4PnUmUQNzHlOLr
WF+gtocPG4+Omw8qymxY37c0w0DbmzpLukp1RmuiM1bPVKULqur6pFo8W9onLKp7
YUQYbq321m7RSahY7MwWoTfHGWZvoHiDqeL+25ccUmrN0DnzTg0Y4z4Cob8Cc7gi
+AUiz+c2/gn4yhqX2qd1KPGNRsWGkdhGJdtqurhMKFLEIbp+OOpNyVAmYCKtINCG
KSQUakozMMcWe6bQwG4YX/gEWoPJ1REqRwKYmmns29Fg05CQOGhfMt/CTMqzqykL
Rxw7hrbXuovQr/TjCZ5DzWNowQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFI+XNfe2
aM0hZNTNv4qDZm4+xYDDMB8GA1UdIwQYMBaAFCdX0R97eGdIe46HAdcqxhrTJ54O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzU3Ri9BNENDREM2MjdG
NkYxMUYwQjYzRTRFM0JDNEY5QUUwMi9KMWZSSDN0NFowaDdqb2NCMXlyR0d0TW5u
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0oxZlJIM3Q0WjBoN2pvY0IxeXJHR3RNbm5nNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjc1N0YvQTRDQ0RDNjI3RjZGMTFGMEI2M0U0RTNCQzRGOUFFMDIvNzAwNzYxNEM4
Mjk4MTFGMDk0RERFMDFCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ2XXMA8EAgACMAkDBwAgAQ328AAwDQYJKoZIhvcNAQELBQADggEB
AMQHWILcQU47DtpXLAskbkP9k1V4GjmEHPOAIwUO1EK2VsuXTNnprowWN/SGhQuC
Nf0jWS8Wpf5hCa5JD4MZk40RIncKkzdCouLPSUesi3zJ/EeRMx7ZZYBWsV2Kwu2V
hlE6DQJxECznOiqqzvCFWuaU2f9tEORlQ8XD6liryL66WbTpsNLKJEao5xWgntOn
+7d1J1s/GVrpF/zs+SifV6ZpzVPdjXp8H53zzoWhE4IeIEknnxQ9T9lIQSALraYS
zUwx0Gu1jJn02aEOqFAhb9ueY6IyDxcB8k7r4f8mLycHVvb9OYMA2lcF2AgHlChE
ZDdmH46dr7icmQejX70rHrM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:12:40 2026 by rpki-client