
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/D3BEF96E9DFB11F186DD6C154711F970.roa
File: D3BEF96E9DFB11F186DD6C154711F970.roa (raw, json)
Hash identifier: wF75SDUjVmi1kxBJeur6uM4CoOGCTkO9pOXi+iOZ0uQ=
Subject key identifier: 42:61:D3:92:35:AD:FA:EB:8D:4F:76:12:AB:C0:0B:C4:03:3E:2F:6E
Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial: 0570
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/D3BEF96E9DFB11F186DD6C154711F970.roa
Signing time: Sat 22 Aug 2026 07:33:54 +0000
ROA not before: Sat 22 Aug 2026 07:33:54 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140499
IP address blocks: 103.115.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 16:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Validity
Not Before: Aug 22 07:33:54 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a8950e2-ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:39:f9:0e:d4:bb:63:1d:31:67:d2:9d:1b:
37:87:4b:6d:7d:58:3e:f9:f4:5e:5b:d5:47:6c:05:
7b:6d:8f:54:7f:d9:c4:fd:1b:7a:28:4d:26:b2:5e:
15:df:b9:83:83:60:72:c7:8a:c7:36:87:2f:82:bc:
75:38:3c:b3:5f:3f:fe:ee:8b:96:df:8d:c8:0f:b6:
a4:46:66:04:f7:86:69:3a:66:03:88:3c:f6:24:9f:
15:76:53:b5:e1:c3:47:e9:2e:ca:bc:af:2b:ad:a1:
74:6b:44:69:6d:c9:bb:d4:1d:a6:9a:58:2d:a4:df:
62:17:f0:08:d0:9f:ac:aa:9a:53:b7:b9:21:b5:87:
5d:bd:59:22:7f:08:5b:dd:88:c6:3f:e2:dd:f5:2a:
3f:65:c3:12:a5:98:16:6a:eb:c7:04:94:7a:d9:7e:
49:96:c0:76:21:41:3d:e4:6f:c0:f1:0c:9c:fd:4e:
1b:13:eb:c5:7c:85:a3:69:2d:8b:d8:1a:96:0c:1e:
aa:ff:23:bf:cb:21:df:fe:88:53:d1:ab:ab:6b:76:
f1:8b:be:45:0b:73:42:7c:45:c5:9d:d6:a0:9a:5e:
b5:93:5e:0c:08:09:62:fb:a5:a5:62:ab:36:bd:19:
9e:89:45:49:7d:6f:9b:4e:25:8c:0c:84:49:5a:bb:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:D3:92:35:AD:FA:EB:8D:4F:76:12:AB:C0:0B:C4:03:3E:2F:6E
X509v3 Authority Key Identifier:
keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/D3BEF96E9DFB11F186DD6C154711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:23:db:a3:79:1e:09:f5:4b:db:57:83:aa:ae:3e:92:0a:50:
ea:af:fe:6b:b8:c4:04:7b:67:7f:59:01:53:e4:ff:58:0c:9b:
8b:8f:49:d9:44:80:72:20:5a:e3:50:bb:44:ad:42:aa:34:e0:
2d:8c:11:8f:76:30:d2:ca:7b:f0:a7:8e:33:ad:f3:2f:82:9b:
a2:5e:bd:fb:d6:a8:6b:f1:08:23:a3:58:8d:ec:32:7f:d7:05:
5b:4d:c4:de:6a:a0:49:04:61:a7:19:eb:df:58:0b:0f:a3:46:
55:6a:5f:c4:58:68:f1:39:9c:08:20:32:74:0c:a8:46:ae:33:
6a:e0:f6:47:59:29:44:e2:c0:13:dd:36:4f:a5:72:e5:81:59:
5e:01:2b:c9:40:9d:89:6c:84:3d:ed:21:43:37:bb:a6:b6:ac:
d8:93:12:10:ca:8b:83:b5:a6:60:39:1e:14:c4:25:dc:f5:ce:
67:a9:f2:83:3e:45:43:62:4e:60:58:12:c2:51:05:f2:1b:66:
b2:d1:61:f3:19:5b:a6:be:89:e3:07:f3:c7:04:f9:c7:bb:24:
e3:ad:00:22:d7:46:42:c5:e4:90:04:3f:9f:ff:3a:e2:74:c2:
33:9c:7a:9d:9d:01:67:76:4b:8c:c8:ae:27:da:b6:ba:e2:15:
0c:40:ea:24
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD
QjMxRDlCMTAwHhcNMjYwODIyMDczMzU0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg5NTBlMi1lZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Iw5+Q7Uu2MdMWfSnRs3h0ttfVg++fReW9VHbAV7bY9Uf9nE/Rt6KE0msl4V
37mDg2Byx4rHNocvgrx1ODyzXz/+7ouW343ID7akRmYE94ZpOmYDiDz2JJ8VdlO1
4cNH6S7KvK8rraF0a0Rpbcm71B2mmlgtpN9iF/AI0J+sqppTt7khtYddvVkifwhb
3YjGP+Ld9So/ZcMSpZgWauvHBJR62X5JlsB2IUE95G/A8Qyc/U4bE+vFfIWjaS2L
2BqWDB6q/yO/yyHf/ohT0aura3bxi75FC3NCfEXFndagml61k14MCAli+6WlYqs2
vRmeiUVJfW+bTiWMDIRJWrsDUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEJh05I1
rfrrjU92EqvAC8QDPi9uMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw
NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U4MjEvODExRkI1OTA2MDUxMTFFODhDRDhFQzQ3QzRGOUFFMDIvRDNCRUY5NkU5
REZCMTFGMTg2REQ2QzE1NDcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3PEMA0GCSqGSIb3DQEBCwUAA4IBAQBtI9ujeR4J9UvbV4Oqrj6S
ClDqr/5ruMQEe2d/WQFT5P9YDJuLj0nZRIByIFrjULtErUKqNOAtjBGPdjDSynvw
p44zrfMvgpuiXr371qhr8Qgjo1iN7DJ/1wVbTcTeaqBJBGGnGevfWAsPo0ZVal/E
WGjxOZwIIDJ0DKhGrjNq4PZHWSlE4sAT3TZPpXLlgVleASvJQJ2JbIQ97SFDN7um
tqzYkxIQyouDtaZgOR4UxCXc9c5nqfKDPkVDYk5gWBLCUQXyG2ay0WHzGVumvonj
B/PHBPnHuyTjrQAi10ZCxeSQBD+f/zridMIznHqdnQFndkuMyK4n2ra64hUMQOok
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:56:29 2026 by rpki-client