
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/C9E35E848A8711ED98572D26C4F9AE02.roa
File: C9E35E848A8711ED98572D26C4F9AE02.roa (raw, json)
Hash identifier: aDMrutb8ahCLuSdqi0ZTz55krjn044b5ILQcHz+wyqU=
Subject key identifier: 62:FF:64:F4:F6:E7:6E:87:18:EE:EF:49:6E:57:E0:79:19:D4:38:6F
Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial: 028F
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/C9E35E848A8711ED98572D26C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:15:21 +0000
ROA not before: Wed 03 Dec 2025 00:30:56 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 10111
IP address blocks: 103.37.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Validity
Not Before: Dec 3 00:30:56 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46619-36f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:a9:2b:9a:1c:df:0e:f3:9c:00:53:21:ef:
70:3a:8b:94:85:1a:c4:f8:bc:0b:ac:45:b3:5e:6f:
8e:d7:e0:99:ab:d1:6f:c4:47:40:28:1e:e9:66:d0:
e7:bc:99:9d:07:a5:97:e2:02:98:60:50:0e:e6:cd:
11:cd:cc:35:85:ab:29:b7:e4:7a:38:4c:f6:57:65:
6c:eb:7d:0e:31:d8:b9:31:97:29:88:29:f0:bb:61:
37:d7:05:cb:c2:e5:f5:e8:9c:54:28:72:21:b8:15:
8b:0d:60:b7:c8:19:07:58:bf:11:9e:0c:e8:bc:c2:
c8:3c:7b:3f:6e:6d:b1:e4:5f:44:df:29:f8:0e:d9:
7f:da:88:44:34:60:6c:61:81:11:2a:a9:fc:98:f4:
19:fc:84:3a:18:3f:f8:ea:1c:d4:29:65:f3:91:8a:
dd:ea:93:ad:f1:2c:3f:76:b4:09:d9:61:26:6d:e3:
28:39:ff:68:95:a1:1b:d4:f8:d3:09:da:1a:cd:06:
6b:df:c0:f1:01:94:64:af:84:11:38:9d:be:65:f1:
db:03:fe:4a:1b:55:ba:e6:08:81:19:46:62:2a:df:
15:9e:6d:4d:e5:71:59:d4:1b:9b:62:1b:c7:ab:98:
1c:05:95:c6:d3:48:05:93:61:77:2f:c7:2c:f1:a3:
0e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:64:F4:F6:E7:6E:87:18:EE:EF:49:6E:57:E0:79:19:D4:38:6F
X509v3 Authority Key Identifier:
keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/C9E35E848A8711ED98572D26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.37.7.0/24
Signature Algorithm: sha256WithRSAEncryption
91:89:c0:b1:d2:bf:99:48:7d:55:b6:ee:e4:d4:e2:e1:c3:26:
1f:d7:10:03:c8:df:45:dd:19:0b:76:51:31:e2:fd:a8:d7:5c:
e9:25:ee:aa:51:8b:08:d6:54:8c:f6:dc:d6:0d:91:61:03:89:
9a:6f:94:43:a3:0a:a4:e4:46:93:36:ae:33:10:32:62:e1:69:
e6:d3:32:74:c6:b8:fc:15:b1:af:7d:a1:6d:30:e7:ef:18:66:
87:b6:ca:06:e6:07:9c:da:ef:6f:4f:b2:3d:7b:1c:e0:1b:54:
52:93:91:61:46:7d:ea:7e:d9:97:fc:db:67:66:fb:84:5f:eb:
31:4e:79:1c:a5:c4:27:2d:de:b6:17:68:6d:4c:83:2a:38:6b:
fa:fa:71:f6:a8:c4:6e:49:46:28:1b:ed:5b:1e:2b:2c:f0:1b:
5e:c5:51:b3:d1:aa:7d:98:54:76:f8:38:e1:41:7e:74:52:7e:
b1:66:8b:65:ba:b6:12:4a:66:0b:ec:6f:70:a0:49:f0:70:32:
59:ef:a1:61:c4:a4:13:74:b7:1c:40:a0:c9:19:b7:5a:ee:c8:
25:a3:6c:ae:53:89:56:f5:a4:5d:4f:2e:cf:57:ff:34:20:a5:
96:b7:eb:88:be:7c:61:d7:ee:b1:c5:1a:14:fb:5e:15:a8:50:
e9:e9:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:23 2026 by rpki-client