
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/09534036847011F0A17FCE63C4F9AE02.roa
File: 09534036847011F0A17FCE63C4F9AE02.roa (raw, json)
Hash identifier: +SKfbNfmSVnwo+JjcAhmtvWvJTXw2W/IvgQmMr371Zc=
Subject key identifier: E2:9D:8B:5E:7A:F4:BC:53:F0:E5:5E:9A:17:4D:D6:A4:03:76:37:EF
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0C1D
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/09534036847011F0A17FCE63C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:48:29 +0000
ROA not before: Tue 02 Dec 2025 18:50:30 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 142622
IP address blocks: 103.244.220.0/24 maxlen: 24
103.244.222.0/24 maxlen: 24
103.244.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 18:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3101 (0xc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Dec 2 18:50:30 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a489fc-c96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:c9:1e:bc:5c:b9:18:25:9c:9f:11:0b:1d:
13:d5:52:c0:61:21:61:7d:1c:a7:ec:6e:e4:a2:c4:
c3:99:e6:db:ab:0d:19:29:f1:3a:5d:2b:08:2e:bd:
52:38:a1:94:eb:b7:12:d0:a9:27:b9:24:b8:cb:6f:
54:1d:76:03:e4:be:a9:de:f4:33:1d:49:84:0b:49:
04:45:d4:74:53:e3:17:09:12:17:76:43:c0:87:a4:
8f:03:a6:fc:71:37:8e:41:62:ff:54:b4:c3:f1:8e:
17:09:cf:05:ed:6f:c1:e6:1d:27:5e:47:91:7e:64:
85:2b:fd:3c:d1:88:16:6b:23:4e:7c:ad:42:48:38:
69:ac:c8:55:de:0b:56:10:56:14:ea:4a:1f:ea:8f:
3c:3b:c0:a2:2f:85:e5:8e:a8:f3:8f:a6:f6:40:e2:
c4:78:8e:06:35:60:b7:82:83:15:2b:24:8c:48:39:
2b:cc:c3:b9:71:da:ff:9b:37:6a:51:01:39:41:8a:
5a:cd:9e:f7:c2:00:64:cc:2d:88:e2:1c:13:fc:6b:
bc:69:9d:87:78:7d:67:c8:8f:34:4d:0a:cd:60:9b:
7f:cd:35:af:8c:8f:44:8b:cd:23:da:7c:d2:55:82:
ec:d4:a5:cf:34:be:fb:80:0f:cb:b1:65:1c:17:c0:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9D:8B:5E:7A:F4:BC:53:F0:E5:5E:9A:17:4D:D6:A4:03:76:37:EF
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/09534036847011F0A17FCE63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.244.220.0/24
103.244.222.0/23
Signature Algorithm: sha256WithRSAEncryption
23:0d:47:de:6c:92:c0:d8:97:32:ad:2f:0a:9d:b7:6b:0f:ce:
d7:ee:08:4c:bf:af:6b:c2:da:7c:8c:9e:8b:96:be:58:ba:a3:
8f:fc:3d:29:89:f3:bb:67:61:8e:63:04:ee:28:36:c9:d9:30:
ae:19:5a:c7:bc:a9:37:95:7f:e6:0b:84:84:3d:b7:9d:c9:8a:
10:e7:e8:3c:0c:cf:96:09:24:9d:c1:42:15:d5:67:5c:4d:b6:
9c:68:37:d7:c4:32:ce:d1:cd:57:b4:2b:ce:ab:c1:6f:22:06:
eb:15:19:0c:eb:6b:ae:fa:6b:ed:e4:4e:e8:45:52:fe:24:19:
31:73:68:17:2e:97:e7:bf:a3:c9:65:a2:57:f7:cd:eb:08:32:
f1:4c:a1:eb:14:13:df:40:d6:46:32:23:a7:b5:76:92:03:f0:
88:4a:32:79:96:25:b2:5f:2d:cd:05:86:9d:cc:c9:d2:96:ff:
cb:5f:9d:fb:7d:7e:6f:fa:3c:d9:20:39:7a:39:cb:1f:46:fc:
95:90:d4:02:62:e3:f7:37:6d:85:9e:81:9f:be:bb:5a:f3:52:
4a:fc:5b:8b:63:77:08:40:fb:1d:b8:ad:88:61:c1:50:22:fa:
b8:43:87:04:66:0c:c4:a5:8d:24:75:74:87:ac:a1:81:cf:49:
d9:5f:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:33:28 2026 by rpki-client