
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3D0E47EC7EAF11F1AD3956B567A30FBC.roa
File: 3D0E47EC7EAF11F1AD3956B567A30FBC.roa (raw, json)
Hash identifier: YvojBqn8SWkr/riiUGs8sdpBKcnb4P/8+RaY1QooLjU=
Subject key identifier: 36:E4:EE:85:AD:CA:3D:90:A5:54:2E:24:84:C0:2A:6F:99:4B:F7:9B
Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial: 076E
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3D0E47EC7EAF11F1AD3956B567A30FBC.roa
Signing time: Thu 08 Oct 2026 22:43:08 +0000
ROA not before: Thu 08 Oct 2026 22:43:08 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 7029
IP address blocks: 103.97.228.0/24 maxlen: 24
103.106.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 22:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Validity
Not Before: Oct 8 22:43:08 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ac81c7c-43c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:44:41:65:a6:d0:35:10:1c:69:be:ae:20:
d1:44:aa:d7:62:a0:f4:2c:9c:d5:65:5e:41:22:ce:
d3:8c:e0:01:a2:71:11:6a:f1:50:03:b8:d7:0d:5d:
eb:66:10:91:03:fb:53:95:3e:17:ee:74:ba:38:5f:
26:82:3b:2e:71:2f:fd:df:30:76:01:4a:b4:a8:8c:
76:7a:d3:78:ee:03:95:4c:84:8e:ab:7b:22:a6:6d:
19:ba:d1:6e:f8:a2:77:8a:33:5c:ee:0a:45:68:97:
07:50:d9:f0:b8:34:2f:1c:eb:d3:cd:67:86:ba:f8:
a4:86:06:ae:f9:f6:36:b6:c9:43:c0:13:fa:ea:ee:
2f:82:69:98:30:67:e6:ab:be:7f:39:e3:40:e5:f0:
a3:bd:aa:a0:07:3d:f2:d4:ec:e3:dd:c4:af:bf:50:
62:11:e6:bc:1f:f3:cd:34:d2:f2:99:a6:78:8a:13:
66:96:8f:87:32:8f:b7:15:b2:03:db:12:46:61:b5:
ea:1d:8d:4b:85:20:b6:0b:1e:90:24:3a:ac:31:10:
60:08:1b:e4:d9:bc:10:b9:34:b1:e9:0e:fc:b2:a1:
eb:e5:3b:d7:53:34:0c:2a:33:6d:1f:74:93:8d:27:
c1:df:2e:63:35:17:04:eb:0a:b0:31:b9:49:a3:12:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:EE:85:AD:CA:3D:90:A5:54:2E:24:84:C0:2A:6F:99:4B:F7:9B
X509v3 Authority Key Identifier:
keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3D0E47EC7EAF11F1AD3956B567A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.228.0/24
103.106.203.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3b:e5:39:2a:fe:a9:39:43:26:aa:fb:2b:24:38:4a:86:bf:
99:14:1d:83:52:73:59:08:bb:b7:80:6e:4b:78:54:9c:a6:ff:
39:a7:7c:4c:78:ca:4e:5f:9f:9b:f4:3b:2f:a4:e5:ab:fd:17:
ed:4e:d9:a4:fe:a6:2e:b2:c5:f5:84:c6:d4:00:cc:c4:a3:3a:
ea:27:59:e8:20:fb:48:ad:4e:57:8b:5f:36:fe:70:97:57:f6:
73:46:fd:7c:50:2d:0a:1c:b5:00:2b:1c:dd:1b:52:44:c3:05:
3f:99:f8:67:09:ea:a8:11:63:f7:66:f0:2c:6e:0c:0f:7c:4b:
6f:9f:fc:9c:92:b9:62:fb:b0:51:c8:a6:c5:ab:cb:58:78:cb:
26:1b:b5:7c:ff:17:91:79:7a:e4:bd:4d:9b:01:ac:74:45:5d:
77:33:96:56:8c:8b:c1:fa:84:cc:bf:02:87:38:99:18:a6:15:
46:db:ad:4f:13:19:46:d9:b6:8d:be:79:3e:22:87:bf:e9:9c:
27:64:8b:13:ec:2b:fc:c3:5b:b1:ad:31:8a:ab:8c:85:97:7a:
04:9b:d4:93:2e:b5:11:07:53:e4:c0:f7:ab:b8:4c:4a:f5:da:
f7:da:23:7d:88:3e:d7:87:98:3d:e7:b1:17:4c:59:cb:d5:de:
e4:ce:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:49:44 2026 by rpki-client