
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/97B81DD6BF9F11ECAB5B1239C4F9AE02.roa
File: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (raw, json)
Hash identifier: nCTovFi354+ZfaPTQ0ztwkkd94a5/Uc+5BEDc/vwPfE=
Subject key identifier: 15:3F:2F:20:F8:FB:64:47:4F:CC:5A:E0:FF:80:9F:D8:08:DC:7F:F1
Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial: 03D0
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/97B81DD6BF9F11ECAB5B1239C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:01:13 +0000
ROA not before: Tue 23 Sep 2025 01:19:24 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55720
IP address blocks: 103.154.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 976 (0x3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Validity
Not Before: Sep 23 01:19:24 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a42a89-60a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:66:76:a0:bc:d7:55:ec:a2:a1:dc:68:b7:
9d:9a:f4:0f:f8:d3:f8:b2:84:b5:bf:b5:32:55:66:
1a:fc:2e:30:a9:56:22:b1:8f:c3:16:bd:16:34:de:
62:e8:ad:cc:26:da:36:fe:93:4e:87:67:f5:73:93:
cd:9c:bc:e0:57:55:8c:46:cf:c0:2b:4e:e9:1f:41:
94:77:57:c3:0b:21:e0:c6:a6:86:2f:02:1f:a0:4a:
d4:1d:f2:94:66:98:06:ed:31:46:04:f5:29:f3:68:
f1:bf:55:5b:ed:e8:34:cd:a6:ce:eb:a6:b4:bf:ff:
66:d7:d4:af:49:bf:03:40:89:ec:6f:40:ff:44:e7:
d3:71:3a:50:8f:20:33:53:d5:26:07:81:2f:85:c5:
9b:d6:71:a0:63:10:eb:54:65:3d:f4:de:aa:f5:47:
d2:6c:ee:b1:21:b6:1d:4d:34:86:1c:0e:7c:e3:69:
d9:46:dd:3b:58:5f:70:46:a3:e5:05:f1:da:e2:f8:
0d:4d:4b:ad:43:d0:5a:57:fc:64:1a:d9:17:13:35:
85:39:d3:29:af:eb:db:25:a9:6b:ec:0c:38:c1:28:
28:b8:5d:7f:ab:64:fa:2f:12:7c:ca:e6:41:e2:37:
4c:5d:1f:c4:dd:d7:22:cc:d4:b4:af:ab:f7:d4:38:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3F:2F:20:F8:FB:64:47:4F:CC:5A:E0:FF:80:9F:D8:08:DC:7F:F1
X509v3 Authority Key Identifier:
keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/97B81DD6BF9F11ECAB5B1239C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.232.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:65:93:ff:b9:d6:f7:3b:ad:b5:ba:d6:54:3f:75:57:57:4b:
1d:31:9e:3a:98:51:b0:3b:23:4c:95:67:79:d2:bf:8e:4e:c5:
93:5b:7b:f5:07:79:be:6a:3e:56:cf:f6:db:54:44:b5:37:38:
ba:4d:f8:0e:d1:10:e1:20:83:78:27:26:e9:c1:0d:a9:21:c8:
1b:76:81:28:07:c9:f8:da:7a:3e:aa:fa:16:59:2f:c7:89:78:
17:34:8b:ce:57:8d:71:25:52:29:6e:25:84:ad:79:c8:1d:17:
3c:67:47:18:5e:f5:c1:63:7a:4f:b6:1c:33:ba:6a:0d:5c:b5:
bf:71:1b:2c:9d:04:c7:95:a2:b1:ba:fa:76:a7:79:2f:b9:c3:
4c:9d:29:2e:ab:e8:01:ad:10:3e:51:65:11:68:0e:84:ab:ff:
db:22:55:13:44:b4:b0:54:29:b6:3f:6a:29:b9:d8:dd:c8:a5:
b6:34:d8:7b:d5:6b:4d:0d:fd:30:34:c0:14:85:0c:15:57:81:
5e:94:e0:39:07:d8:ad:43:e1:7b:43:e2:ef:01:ed:aa:85:bd:
08:60:28:db:db:7d:9e:fa:12:6a:2e:9e:af:8d:a7:59:4f:1b:
f7:c1:18:03:d7:b9:c2:9e:ed:14:5a:c6:10:eb:88:10:68:18:
7b:0a:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:48 2026 by rpki-client