
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/9FEB4F1CA3A411F1ABC5EA864611F970.roa
File: 9FEB4F1CA3A411F1ABC5EA864611F970.roa (raw, json)
Hash identifier: fZW1vfk+6D7sr4GOIdqap/HLgcpFbAO5uu4AjOWzGi4=
Subject key identifier: DB:B9:34:74:C8:06:50:6B:47:AC:02:2F:00:4C:5E:74:D8:0C:41:71
Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Certificate serial: 6A
Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/9FEB4F1CA3A411F1ABC5EA864611F970.roa
Signing time: Sat 29 Aug 2026 12:24:48 +0000
ROA not before: Sat 29 Aug 2026 12:24:48 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152179
IP address blocks: 103.110.228.0/24 maxlen: 24
103.110.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5
Validity
Not Before: Aug 29 12:24:48 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a92cf90-e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:73:86:b4:31:1c:dd:20:e9:bd:57:31:13:
88:2b:17:b3:31:ef:b4:5f:c8:4d:4e:3b:5d:70:77:
b8:01:ff:f6:02:c8:c2:d7:0e:33:32:db:b8:90:cb:
a9:f1:18:77:18:ef:17:4a:56:c7:90:5c:df:a6:c7:
d2:19:73:be:16:13:1f:9a:4e:59:59:ab:d0:67:94:
ee:a6:de:b3:65:a1:8e:1a:cd:62:b8:93:68:ad:f0:
ca:95:47:70:fe:81:89:54:7c:f2:57:83:7b:ac:e2:
12:0a:4f:d1:92:c4:75:f9:26:40:12:b0:00:22:a7:
a7:36:eb:cd:f5:ce:f0:0f:12:b0:f1:35:06:69:13:
07:03:36:c3:b0:2d:3e:63:d0:20:e2:e3:84:79:29:
1b:4b:07:49:ff:8f:97:42:1b:e7:63:c0:cc:1c:83:
91:ef:4c:ec:e6:92:c6:cf:55:07:3c:ec:4b:ce:58:
32:84:96:9a:1d:4c:db:92:68:82:26:5b:39:ef:cb:
65:80:82:69:f6:83:24:1a:ab:d2:5b:83:f4:54:27:
4a:8e:0d:45:d2:40:ea:ff:fd:04:04:f4:2f:a2:18:
57:ea:3e:d0:1d:5c:8e:f8:ed:4a:59:de:45:76:c1:
eb:ce:35:1f:f7:84:a7:d8:46:b6:cb:6c:c1:76:2f:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B9:34:74:C8:06:50:6B:47:AC:02:2F:00:4C:5E:74:D8:0C:41:71
X509v3 Authority Key Identifier:
keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/9FEB4F1CA3A411F1ABC5EA864611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.228.0/23
Signature Algorithm: sha256WithRSAEncryption
16:a5:76:b3:22:2e:7f:d8:9c:80:df:2d:9b:f4:45:74:56:03:
3e:39:ac:6c:18:e7:8a:3e:31:e4:41:6b:52:80:dc:88:95:7a:
bc:27:69:f4:c1:85:f6:06:a5:f1:50:b6:40:94:22:b5:98:f3:
94:b2:52:22:e4:c4:56:9e:9b:d0:d4:6f:58:d9:05:61:a6:ee:
2e:2e:ba:43:d8:c3:11:b8:3e:08:4b:0a:a3:c5:8f:ad:92:b4:
d1:a1:e9:8b:b0:d9:1f:22:18:8a:89:b8:80:20:5e:50:ae:2e:
95:f6:91:b0:ea:03:1c:24:41:4c:7a:0b:f8:4e:eb:5f:b1:36:
86:bc:7a:0c:db:0c:12:87:c5:ef:8a:df:ab:c8:bd:d1:d0:22:
32:e8:0b:5f:0e:4f:12:32:68:c4:f1:e2:0e:15:ce:6a:32:6f:
0a:78:7c:5e:e2:8b:30:35:e8:f4:72:07:4e:fe:03:8d:7b:d8:
9c:a1:81:51:90:6e:b5:df:ea:15:e1:62:99:e1:f9:48:bd:86:
53:1f:1c:7b:e6:13:24:d4:84:8f:49:0e:dd:20:ed:df:f3:53:
84:22:99:44:01:45:39:bb:1e:c6:e5:a4:fe:f2:2f:b0:68:68:
22:13:dc:54:3c:3d:80:ab:4d:fb:c9:e0:8d:df:31:63:5b:5b:
68:d7:48:4b
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
MDhDMDExMC8GA1UEBRMoRDgwNzM4MDNFRUNGRjRGMTlFRkY5OTU3QzcxNDdBRkND
QUEwMTlGNTAeFw0yNjA4MjkxMjI0NDhaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOTJjZjkwLWUwYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcMnOGtDEc3SDpvVcxE4grF7Mx77RfyE1OO11wd7gB//YCyMLXDjMy27iQy6nx
GHcY7xdKVseQXN+mx9IZc74WEx+aTllZq9BnlO6m3rNloY4azWK4k2it8MqVR3D+
gYlUfPJXg3us4hIKT9GSxHX5JkASsAAip6c26831zvAPErDxNQZpEwcDNsOwLT5j
0CDi44R5KRtLB0n/j5dCG+djwMwcg5HvTOzmksbPVQc87EvOWDKElpodTNuSaIIm
Wznvy2WAgmn2gyQaq9Jbg/RUJ0qODUXSQOr//QQE9C+iGFfqPtAdXI747UpZ3kV2
wevONR/3hKfYRrbLbMF2LzLrAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU27k0dMgG
UGtHrAIvAExedNgMQXEwHwYDVR0jBBgwFoAU2Ac4A+7P9PGe/5lXxxR6/MqgGfUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOEMwLzc5NkFBMTQyMjE0
QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBHZV81bFh4eFI2X01xZ0dm
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMkFjNEEtN1A5UEdlXzVsWHh4UjZfTXFnR2ZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDhDMC83OTZBQTE0MjIxNEMxMUYxQTM2Q0ExQTUzNzNEOEM2Ny85RkVCNEYxQ0Ez
QTQxMUYxQUJDNUVBODY0NjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnbuQwDQYJKoZIhvcNAQELBQADggEBABaldrMiLn/YnIDfLZv0RXRW
Az45rGwY54o+MeRBa1KA3IiVerwnafTBhfYGpfFQtkCUIrWY85SyUiLkxFaem9DU
b1jZBWGm7i4uukPYwxG4PghLCqPFj62StNGh6Yuw2R8iGIqJuIAgXlCuLpX2kbDq
AxwkQUx6C/hO61+xNoa8egzbDBKHxe+K36vIvdHQIjLoC18OTxIyaMTx4g4Vzmoy
bwp4fF7iizA16PRyB07+A4172JyhgVGQbrXf6hXhYpnh+Ui9hlMfHHvmEyTUhI9J
Dt0g7d/zU4QimUQBRTm7HsblpP7yL7BoaCIT3FQ8PYCrTfvJ4I3fMWNbW2jXSEs=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:23 2026 by rpki-client