
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa
File: B3394AE0D7F511EB82D62F73C4F9AE02.roa (raw, json)
Hash identifier: fWQraDGwJwPV67yFDAv4Z9YVrJg/aZyI/SUeFYf35jg=
Subject key identifier: C4:CF:8B:72:2C:98:A5:FF:96:E6:82:E5:A9:73:4E:BB:24:13:23:53
Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial: 0637
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:38:15 +0000
ROA not before: Wed 02 Jul 2025 23:35:39 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132374
IP address blocks: 103.230.13.0/24 maxlen: 24
103.230.14.0/24 maxlen: 24
103.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 22:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Validity
Not Before: Jul 2 23:35:39 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a584b6-be45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:10:67:b2:10:a2:cd:fb:d4:55:2d:8c:60:
6e:1f:df:cd:3b:e8:24:8e:e4:82:0d:6a:5d:b6:99:
a6:50:35:84:c3:f6:48:10:2c:3e:22:b1:9a:cd:8e:
f4:6b:81:b7:5f:dc:b8:c2:cf:75:04:7f:73:50:86:
21:22:92:58:39:55:e8:81:8a:e4:da:bb:e5:19:b9:
cd:46:99:e8:5d:92:82:21:33:22:00:66:ae:31:d5:
be:a8:0f:b9:f9:e1:dc:2f:5a:a0:a7:48:35:97:f9:
ce:4a:27:9b:de:5d:22:47:e0:0c:08:43:20:60:a2:
e3:b0:9d:52:b0:9c:ee:d0:d1:94:40:c3:6a:e3:f0:
28:a2:d0:3d:0a:bb:09:2d:52:31:5e:b1:f5:07:46:
22:85:47:ad:a9:cd:15:f1:f8:fb:bf:41:70:da:3f:
54:f9:1c:94:61:61:7f:b3:3b:f2:0d:a5:4a:bb:7a:
15:b3:a9:00:2e:4d:46:cf:af:ab:25:ff:22:a4:5f:
a1:da:09:3e:65:ef:7b:ab:72:f0:a6:c9:e3:80:67:
8c:2d:b8:7f:f8:f2:5b:d3:1a:78:79:45:f3:5c:46:
3f:7a:40:21:80:b0:49:6d:35:d6:59:76:43:b3:9e:
b6:87:ae:eb:58:52:92:cd:cf:45:f4:e7:cb:df:84:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:8B:72:2C:98:A5:FF:96:E6:82:E5:A9:73:4E:BB:24:13:23:53
X509v3 Authority Key Identifier:
keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B3394AE0D7F511EB82D62F73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.230.13.0-103.230.15.255
Signature Algorithm: sha256WithRSAEncryption
19:41:aa:b2:41:20:b7:1b:de:24:9d:bc:22:06:8b:82:c4:21:
f6:06:0b:76:f3:f5:06:19:df:ec:4e:67:a5:c3:9d:3a:e0:2c:
be:19:05:56:3c:3f:3e:1a:ca:61:61:d3:f4:09:45:74:80:84:
6d:50:dc:f2:83:86:02:92:d8:24:6a:f0:79:f3:4f:7c:31:41:
8d:e0:1c:eb:47:94:e4:4c:d5:2f:52:a9:12:6e:3c:d3:6f:f8:
33:0e:0c:af:f5:b8:ca:20:b9:ac:21:68:62:67:ce:ba:d2:46:
c1:17:6b:2e:30:3b:fc:01:1d:85:7a:e2:a5:cb:d3:db:e6:62:
51:b2:6f:37:c0:a6:8e:25:28:85:d4:fe:83:f0:99:92:b0:2e:
a9:a3:66:b8:8e:1f:8b:43:b3:bd:0c:05:b4:e6:18:b1:58:79:
02:8e:39:3d:df:59:41:2b:96:e6:50:18:07:8a:b9:aa:24:ac:
01:3f:29:4f:ab:9b:ef:f9:38:94:12:47:3f:3c:42:fb:8c:d1:
7e:0d:76:b4:03:88:0f:1f:74:02:67:82:b5:a0:5a:66:7b:8d:
8b:a4:90:d7:7b:2a:07:96:b6:31:21:3c:12:c0:3a:2b:87:4f:
7a:fd:5d:4f:d8:f9:3c:0e:46:b1:30:ab:46:4d:fc:16:a2:e7:
a4:80:79:75
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NFNTQxMTAvBgNVBAUTKDFBQUQwMEE2MUE2NDkwNDBBQjUyNkExNDJCNUQ3QkRF
RTVBMDFDQkYwHhcNMjUwNzAyMjMzNTM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODRiNi1iZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr1AQZ7IQos371FUtjGBuH9/NO+gkjuSCDWpdtpmmUDWEw/ZIECw+IrGazY70
a4G3X9y4ws91BH9zUIYhIpJYOVXogYrk2rvlGbnNRpnoXZKCITMiAGauMdW+qA+5
+eHcL1qgp0g1l/nOSieb3l0iR+AMCEMgYKLjsJ1SsJzu0NGUQMNq4/AootA9CrsJ
LVIxXrH1B0YihUetqc0V8fj7v0Fw2j9U+RyUYWF/szvyDaVKu3oVs6kALk1Gz6+r
Jf8ipF+h2gk+Ze97q3LwpsnjgGeMLbh/+PJb0xp4eUXzXEY/ekAhgLBJbTXWWXZD
s562h67rWFKSzc9F9OfL34RStQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFMTPi3Is
mKX/luaC5alzTrskEyNTMB8GA1UdIwQYMBaAFBqtAKYaZJBAq1JqFCtde97loBy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0U1NC9CRjlGQ0FGMEQ3
RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tFQ3JVbW9VSzExNzN1V2dI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dxMEFwaHBra0VDclVtb1VLMTE3M3VXZ0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0NFNTQvQkY5RkNBRjBEN0VEMTFFQjhCNTZENzFBQzRGOUFFMDIvQjMzOTRBRTBE
N0Y1MTFFQjgyRDYyRjczQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABn5g0DBARn5gAwDQYJKoZIhvcNAQELBQADggEBABlBqrJBILcb
3iSdvCIGi4LEIfYGC3bz9QYZ3+xOZ6XDnTrgLL4ZBVY8Pz4aymFh0/QJRXSAhG1Q
3PKDhgKS2CRq8HnzT3wxQY3gHOtHlORM1S9SqRJuPNNv+DMODK/1uMoguawhaGJn
zrrSRsEXay4wO/wBHYV64qXL09vmYlGybzfApo4lKIXU/oPwmZKwLqmjZriOH4tD
s70MBbTmGLFYeQKOOT3fWUErluZQGAeKuaokrAE/KU+rm+/5OJQSRz88QvuM0X4N
drQDiA8fdAJngrWgWmZ7jYukkNd7KgeWtjEhPBLAOiuHT3r9XU/Y+TwORrEwq0ZN
/Bai56SAeXU=
-----END CERTIFICATE-----
Generated at Sun Mar 22 20:11:46 2026 by rpki-client