
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/978C0924D1FC11EDBEED4470C4F9AE02.roa
File: 978C0924D1FC11EDBEED4470C4F9AE02.roa (raw, json)
Hash identifier: E9di4MzhnyV9nirQumBR9A5+OocAm2CezfvjtGFihDg=
Subject key identifier: 2B:F2:BE:77:A4:18:6D:C1:64:D0:1D:BA:09:4B:FF:AF:B8:76:AF:B6
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E65
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/978C0924D1FC11EDBEED4470C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:18:00 +0000
ROA not before: Thu 28 Aug 2025 14:55:11 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150833
IP address blocks: 103.117.198.0/24 maxlen: 24
103.117.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24165 (0x5e65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:55:11 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c98-6ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:de:a4:f2:cf:9e:91:bc:d7:ed:2b:3f:99:
ce:94:ef:a6:c2:0b:12:17:10:73:00:e3:1b:c3:73:
cf:28:80:6d:3f:8b:01:ab:54:98:72:3f:f1:08:6a:
22:d4:76:90:66:c3:8b:71:47:19:8b:b3:b8:07:dd:
77:ec:f0:11:35:0f:0f:b3:25:00:87:50:74:9d:b2:
e5:33:2e:01:1e:ea:bf:c2:45:9a:a5:16:8b:51:a9:
19:b8:ec:9b:df:a3:b6:52:ea:2e:1a:6d:f8:d3:b6:
ac:ba:d3:03:a3:4c:53:19:da:2f:5d:3d:71:d6:b5:
52:59:0c:42:b4:a0:09:0d:7a:1e:bb:81:2e:d7:a3:
06:37:21:2f:6f:33:eb:78:2f:6f:17:c7:c7:00:db:
48:64:55:50:ef:94:ee:f5:ac:ba:f4:5e:61:2d:b7:
c7:81:ee:13:0d:3b:d7:9f:c0:8e:de:14:7f:42:ca:
e8:4c:90:51:02:95:fc:9b:4a:0d:e5:6d:75:1e:11:
26:37:7e:c2:f2:a5:83:fc:46:1f:24:34:8a:8c:09:
f2:dd:13:79:53:c7:93:32:c2:4d:9a:16:4e:1e:8b:
c9:66:22:aa:ba:3c:31:a3:72:03:b2:82:fc:aa:2f:
e3:3c:4b:6d:f3:bb:77:5f:c9:5b:a7:36:82:dc:46:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F2:BE:77:A4:18:6D:C1:64:D0:1D:BA:09:4B:FF:AF:B8:76:AF:B6
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/978C0924D1FC11EDBEED4470C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.198.0/23
Signature Algorithm: sha256WithRSAEncryption
62:87:a3:e5:e3:d3:4d:f0:2d:53:3b:32:ab:fd:67:5a:e1:9d:
bb:2f:55:60:37:e9:4b:11:55:28:8e:10:f9:d5:f5:dd:ac:85:
27:0f:9a:a2:ea:91:2a:bd:53:d1:f7:00:91:d4:29:f8:3c:84:
ec:37:75:07:bf:99:30:b7:bf:7c:6f:be:9f:a6:6b:ec:c5:cf:
69:f8:d3:5b:b9:99:24:37:cd:51:ca:66:3e:39:63:70:6b:89:
04:03:8d:b6:8e:4a:83:4b:7d:47:3a:1c:83:ca:1a:49:33:6a:
dc:9b:af:98:13:67:6f:57:64:90:0f:b9:fc:6f:21:b1:4b:91:
39:c3:fb:98:40:bc:be:b0:db:0e:4c:35:29:00:e1:f7:a7:ed:
b6:04:95:8d:d9:d6:f5:47:7f:79:e8:29:52:fd:94:55:8a:d1:
60:ce:d3:08:ba:b9:12:01:ce:91:a5:09:a3:97:9e:dd:bb:d4:
cc:37:16:1f:ee:3c:78:6b:7e:a8:9b:4e:ff:09:49:2b:94:26:
61:6a:21:92:bd:cb:df:19:16:db:a3:1c:8c:1a:d4:8a:5f:48:
a1:9d:39:46:0e:bc:f2:15:9e:c8:2c:6d:77:e0:11:e2:aa:b1:
a6:cf:b2:82:37:1d:91:d0:7d:fd:11:34:87:2a:72:d2:ea:9f:
81:05:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:49:20 2026 by rpki-client