
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/10C418C4D40011F083CDC127C4F9AE02.roa
File: 10C418C4D40011F083CDC127C4F9AE02.roa (raw, json)
Hash identifier: jQxx1yI+CpI0X1UpNWUR0n40hlw676l3oq7X91ZFhYQ=
Subject key identifier: 67:93:B9:C2:C5:3B:34:32:9E:73:BD:C7:1D:DA:01:FE:A8:E8:3F:4F
Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial: 0841
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/10C418C4D40011F083CDC127C4F9AE02.roa
Signing time: Tue 31 Mar 2026 17:20:36 +0000
ROA not before: Tue 31 Mar 2026 17:20:36 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 136215
IP address blocks: 103.83.232.0/24 maxlen: 24
103.83.234.0/24 maxlen: 24
103.83.235.0/24 maxlen: 24
203.89.124.0/23 maxlen: 23
203.89.124.0/24 maxlen: 24
203.89.125.0/24 maxlen: 24
203.89.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Validity
Not Before: Mar 31 17:20:36 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cc0264-b5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:a4:51:01:fd:a0:97:93:b5:2d:09:8b:bb:
a5:b5:5c:c7:5f:82:e6:6e:1d:98:05:05:cb:9a:79:
30:1c:e2:b4:49:1b:fb:5f:ab:5f:ce:b9:f1:58:42:
65:13:26:0e:a6:0e:27:48:6e:be:ce:db:10:1b:01:
8b:41:75:9a:81:e8:30:93:a7:aa:90:7e:e1:d6:cc:
9e:ad:93:10:15:e0:6c:be:0d:92:08:cc:28:58:39:
b8:ee:31:b1:5c:9a:43:13:11:ad:b3:6d:22:00:5d:
bf:36:f6:66:4d:7f:b6:d4:d7:57:a8:7f:73:b8:f2:
08:c2:d9:c1:a6:e6:52:9d:af:6c:76:f7:52:c2:e7:
fd:59:ec:4d:92:95:36:5c:27:8b:cd:b0:c0:5c:c4:
e8:6d:90:b2:5e:63:25:0d:61:85:b4:76:37:21:26:
e6:16:41:f8:a4:4e:5c:c6:36:84:63:5a:31:05:fc:
80:38:39:d2:36:0e:67:20:65:f8:bb:14:67:14:89:
bc:de:09:eb:b4:16:ae:3e:5b:4f:93:23:02:98:07:
ad:12:90:26:5d:8e:47:ce:2a:16:47:6e:6e:14:62:
85:ed:5b:39:63:3c:8e:5e:26:cd:a9:dd:bf:7b:ac:
6f:0d:08:c2:63:a6:a3:da:10:06:58:6d:6a:ea:ea:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:B9:C2:C5:3B:34:32:9E:73:BD:C7:1D:DA:01:FE:A8:E8:3F:4F
X509v3 Authority Key Identifier:
keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/10C418C4D40011F083CDC127C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.232.0/24
103.83.234.0/23
203.89.124.0/23
203.89.127.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ac:53:21:30:46:cb:ca:f8:c9:f3:b3:f1:66:42:f8:bb:4f:
6a:b7:e1:ec:11:7e:75:03:b1:d2:1b:e3:34:e5:e3:00:de:ba:
43:63:8c:20:76:c2:bf:13:6e:01:27:cc:31:0f:dd:f7:c9:67:
be:e6:0e:99:c9:b6:e8:97:73:59:c1:18:38:ac:a2:db:9b:76:
7d:cc:e5:85:73:e9:5e:33:53:ca:86:bd:f5:b0:7d:29:22:16:
e6:d0:1d:3f:c2:10:93:95:c9:81:d3:07:f6:5a:b2:15:fc:6b:
03:10:c2:ff:94:e6:8f:15:fd:89:02:62:26:4b:7c:ba:95:a2:
84:c5:f9:18:14:b9:49:73:50:e5:44:9d:d9:1e:2d:2b:24:1b:
69:24:77:99:24:5b:6a:11:ef:75:16:b0:e9:c3:00:ac:30:9a:
31:69:00:0e:cc:7b:3b:cc:49:ed:31:2a:aa:29:fb:dd:3f:5c:
b1:cd:96:d6:08:96:2f:c8:50:39:43:72:72:17:9b:77:b9:17:
4b:68:21:57:fd:08:12:be:65:b1:0a:5a:ce:9c:e2:ce:2c:6e:
d9:47:a6:cf:32:e9:48:e2:79:84:09:f5:64:a9:6e:4b:f6:3c:
36:f5:14:7b:cd:34:f3:ac:9b:30:d0:ed:55:ab:10:43:9b:3a:
97:34:48:10
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw
QjZDRUFEQTgwHhcNMjYwMzMxMTcyMDM2WhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjMDI2NC1iNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJakUQH9oJeTtS0Ji7ultVzHX4Lmbh2YBQXLmnkwHOK0SRv7X6tfzrnxWEJl
EyYOpg4nSG6+ztsQGwGLQXWagegwk6eqkH7h1syerZMQFeBsvg2SCMwoWDm47jGx
XJpDExGts20iAF2/NvZmTX+21NdXqH9zuPIIwtnBpuZSna9sdvdSwuf9WexNkpU2
XCeLzbDAXMTobZCyXmMlDWGFtHY3ISbmFkH4pE5cxjaEY1oxBfyAODnSNg5nIGX4
uxRnFIm83gnrtBauPltPkyMCmAetEpAmXY5HzioWR25uFGKF7Vs5YzyOXibNqd2/
e6xvDQjCY6aj2hAGWG1q6urpWQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFGeTucLF
OzQynnO9xx3aAf6o6D9PMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB
RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU4RUYvRDI0MzM3OTY0QUVDMTFFODg0MTdGMzRBQzRGOUFFMDIvMTBDNDE4QzRE
NDAwMTFGMDgzQ0RDMTI3QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAZ1PoAwQBZ1PqAwQBy1l8AwQAy1l/MA0GCSqGSIb3DQEBCwUAA4IB
AQAlrFMhMEbLyvjJ87PxZkL4u09qt+HsEX51A7HSG+M05eMA3rpDY4wgdsK/E24B
J8wxD933yWe+5g6Zybbol3NZwRg4rKLbm3Z9zOWFc+leM1PKhr31sH0pIhbm0B0/
whCTlcmB0wf2WrIV/GsDEML/lOaPFf2JAmImS3y6laKExfkYFLlJc1DlRJ3ZHi0r
JBtpJHeZJFtqEe91FrDpwwCsMJoxaQAOzHs7zEntMSqqKfvdP1yxzZbWCJYvyFA5
Q3JyF5t3uRdLaCFX/QgSvmWxClrOnOLOLG7ZR6bPMulI4nmECfVkqW5L9jw29RR7
zTTzrJsw0O1VqxBDmzqXNEgQ
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:51 2026 by rpki-client