
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CE9A1068FD0B11F0B45A79BF3A6F56BC.roa
File: CE9A1068FD0B11F0B45A79BF3A6F56BC.roa (raw, json)
Hash identifier: lpwZoxxku3mBOoChMBYzWoRvno/ACX750vmfxh8bEMc=
Subject key identifier: 1D:F8:E3:0F:79:FF:93:0A:E9:F6:1B:4B:FC:7C:56:AE:D0:AA:9F:FC
Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial: AA
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CE9A1068FD0B11F0B45A79BF3A6F56BC.roa
Signing time: Thu 29 Jan 2026 12:12:40 +0000
ROA not before: Thu 29 Jan 2026 12:12:40 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45905
IP address blocks: 103.77.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Validity
Not Before: Jan 29 12:12:40 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=697b4eb8-b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:bd:ff:17:e1:4e:22:08:ec:14:45:ed:f4:
e8:97:2a:ef:6a:0a:2f:cf:77:8d:04:3e:57:43:5e:
ff:37:4b:0a:7e:d4:9f:40:ec:43:17:6d:a2:b6:1d:
50:8d:61:f6:9a:db:8c:52:91:65:e5:42:20:9c:30:
1c:df:f1:e6:2c:72:fb:e0:83:27:53:be:c3:fb:04:
20:e6:b7:e1:f4:af:73:68:97:c8:45:2d:65:a7:65:
74:8c:c1:03:8d:76:bb:93:0e:e1:b7:b3:c2:70:3e:
27:89:1b:2f:c5:56:53:9b:80:3c:84:f4:cb:15:d7:
b8:be:6e:46:7c:43:9c:e0:60:38:9f:bb:23:4a:88:
8b:a0:54:1b:5e:5a:24:6c:fe:aa:05:05:66:b5:32:
fb:c5:51:0a:28:90:56:c5:e7:ef:74:d2:34:05:5b:
74:e1:90:2d:28:3a:cd:35:15:45:4e:fa:2d:2a:07:
5f:7b:19:85:00:1c:a0:e1:28:bc:08:1d:c4:a3:c0:
87:a7:c8:f3:28:1c:48:db:29:45:c1:b7:1e:fb:52:
9a:3a:2d:65:dc:2a:cf:ca:58:7e:d8:b5:ac:bb:b8:
48:ca:a8:a4:63:c8:f2:3b:3c:e2:87:e3:b2:86:88:
61:43:44:6d:bf:d1:ff:cd:b3:6a:c4:3c:de:32:4b:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:E3:0F:79:FF:93:0A:E9:F6:1B:4B:FC:7C:56:AE:D0:AA:9F:FC
X509v3 Authority Key Identifier:
keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CE9A1068FD0B11F0B45A79BF3A6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ef:1f:18:a5:c8:e6:85:3c:ed:a5:d0:68:50:d8:83:8b:6c:
b3:69:0b:e6:ce:01:4f:1e:0e:1e:2e:3e:d0:51:14:96:c1:5f:
99:74:84:1a:aa:aa:db:2f:b2:eb:32:a4:18:1c:e7:cf:a7:f4:
25:d4:72:cf:b3:18:54:e7:3a:30:11:ff:17:02:c7:dc:a4:49:
a2:f0:61:14:8c:fb:02:11:5e:59:65:2f:61:42:0b:2e:a8:73:
a8:3b:fe:db:a3:fa:49:57:4f:05:f7:fc:e9:60:a0:73:b8:af:
71:de:6d:b7:65:cf:52:95:9e:bd:e2:70:80:09:aa:e2:cf:8b:
2e:21:fa:3a:d9:da:bb:81:ae:09:2d:b0:51:ba:43:72:a4:8a:
09:92:18:46:93:24:f1:9d:99:0f:86:6d:2c:2c:68:e0:d5:1b:
e3:96:3c:b4:17:c0:d5:af:fb:5e:52:12:38:c9:11:d5:c1:07:
ad:c7:bb:d5:86:88:11:f2:c6:58:18:1c:53:9b:44:02:14:7a:
43:1c:0e:a9:ef:92:f6:e0:5d:4b:b3:2c:b6:80:53:4f:8a:7d:
db:48:12:ce:0a:3c:bd:2b:d2:4a:fa:f2:3e:de:81:a3:fa:67:
70:66:b8:ee:2c:a2:79:fa:04:b6:ee:94:4c:36:db:65:05:71:
12:b6:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:26:10 2026 by rpki-client