
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa
File: 0D99319006F011EFA8C8D445C4F9AE02.roa (raw, json)
Hash identifier: HGrFBFMlIeF4fo0oFh+9zVwEA629zfMxmt1hKybV//A=
Subject key identifier: 55:AB:E8:8D:06:7F:5B:2A:37:56:D7:C8:E7:DF:3D:2A:18:08:5B:5D
Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Certificate serial: 01FE
Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa
Signing time: Sun 01 Mar 2026 04:23:05 +0000
ROA not before: Sun 01 Mar 2026 04:23:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 800
IP address blocks: 103.68.188.0/22 maxlen: 24
103.147.48.0/23 maxlen: 23
203.27.19.0/24 maxlen: 24
2405:a9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Validity
Not Before: Mar 1 04:23:05 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3bf29-00bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9a:e5:f8:51:4e:c4:b2:8e:19:be:8e:57:81:
59:2a:c5:3f:9f:cd:d9:73:a2:2f:89:90:25:17:3d:
ed:be:71:c8:4d:97:c3:73:b3:84:e9:fa:dc:4f:3a:
91:aa:e8:c2:2e:3b:85:bd:b4:8a:ca:f4:1e:13:d8:
38:7a:be:ab:29:0d:04:81:0b:53:f7:50:e2:97:9c:
a5:6d:66:53:1d:5e:39:24:b0:c7:69:9c:17:8a:f1:
a2:dd:df:66:24:e6:08:35:61:88:4e:1e:6e:ea:11:
bc:02:de:f8:da:e9:bb:ab:14:d7:e3:26:6a:d4:81:
95:91:7a:2d:fd:c4:71:42:eb:fb:71:a3:b7:bd:ee:
c5:a2:68:46:10:5b:a3:aa:d1:86:af:3a:3a:d2:7a:
8d:5a:c1:6b:92:b7:70:c9:80:a5:7b:81:ec:0f:ef:
26:1f:23:68:6a:49:79:30:12:09:2b:26:b2:94:21:
a5:11:2c:9f:ab:f5:0b:55:27:7f:4a:9e:93:40:06:
46:3e:ec:f3:f7:7c:c1:94:65:33:f9:84:28:97:8e:
bc:35:38:aa:68:d8:7c:cc:81:52:01:98:ab:0d:9d:
60:f4:ca:99:f1:3c:ca:c7:c6:76:39:e4:6b:3f:d4:
90:38:ec:8f:56:a8:8e:82:59:cc:e9:c3:98:c4:a7:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:E8:8D:06:7F:5B:2A:37:56:D7:C8:E7:DF:3D:2A:18:08:5B:5D
X509v3 Authority Key Identifier:
keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.188.0/22
103.147.48.0/23
203.27.19.0/24
IPv6:
2405:a9c0::/32
Signature Algorithm: sha256WithRSAEncryption
48:69:95:47:94:4b:86:a1:95:a7:9d:2b:5a:54:6c:25:90:a7:
ad:b6:9c:c2:7c:48:cd:21:b4:bd:a7:d2:53:a1:b6:f6:0d:f2:
f7:f2:a6:23:5c:33:23:66:0b:13:f0:92:42:02:40:75:db:57:
49:b8:04:bd:e9:1a:ec:9d:0b:7d:07:5b:5c:98:4f:f0:8e:80:
3e:fe:b4:28:38:b5:69:e8:fe:16:f0:00:66:fd:41:3d:54:0d:
27:1c:19:2b:b9:c6:5a:e7:5e:08:3e:43:34:19:c9:c1:5d:15:
7d:ac:23:aa:f6:00:8a:af:8d:72:93:9c:2a:2a:b9:56:ff:04:
fb:b0:46:92:6a:73:53:7a:b7:ef:80:16:2c:58:89:7d:63:36:
cc:ba:e3:f5:93:68:85:d3:ab:41:05:18:b1:c0:e1:c7:91:8a:
ed:ef:18:b4:4d:31:76:00:f3:a3:e5:81:45:21:69:97:78:56:
cf:e6:f0:9f:1e:e9:8d:0d:fd:d5:e1:78:f6:d8:a1:9f:23:cc:
90:dc:5d:b0:82:48:b0:be:e9:e1:a5:f7:73:c8:7b:d1:57:ce:
7d:d2:ed:43:49:cb:9b:1c:12:00:d5:ed:e8:fa:c0:cc:d8:93:
f9:3e:20:70:1f:f5:76:b8:e1:15:d0:69:48:0f:f7:91:ac:5c:
aa:bd:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:43 2026 by rpki-client