
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/31A71E34407111EFAC14A640C4F9AE02.roa
File: 31A71E34407111EFAC14A640C4F9AE02.roa (raw, json)
Hash identifier: NvkUPdx5+VVVPCUx3OPsu6oi/eYl/YxTHWPNn/chhZs=
Subject key identifier: 63:03:73:6A:17:ED:25:99:9F:F9:F0:8D:2A:8A:B9:91:57:67:C5:19
Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Certificate serial: 01A1
Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/31A71E34407111EFAC14A640C4F9AE02.roa
Signing time: Mon 07 Sep 2026 04:55:13 +0000
ROA not before: Mon 07 Sep 2026 04:55:13 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 45441
IP address blocks: 103.2.112.0/22 maxlen: 22
115.178.60.0/24 maxlen: 24
115.178.61.0/24 maxlen: 24
115.178.62.0/24 maxlen: 24
115.178.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Validity
Not Before: Sep 7 04:55:13 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9e43b1-8c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:a3:4c:9b:a6:62:7f:a9:ea:b8:62:f4:8e:
fc:b9:6b:12:db:9a:3f:1e:32:ce:30:8a:f0:26:e7:
10:40:67:45:b2:f3:e5:b6:de:55:20:89:c0:eb:11:
60:a2:66:9f:54:e8:38:66:8b:9f:ed:c2:b3:4f:b0:
b3:97:0a:1f:83:aa:3c:e0:f5:ae:97:a9:88:2c:37:
7c:20:03:b4:38:ee:93:3d:8b:30:b0:47:19:92:96:
b2:a7:33:d5:06:ba:9c:75:97:c1:8f:5b:97:5e:3d:
de:6a:5c:d1:9e:b0:00:c4:83:a6:17:5e:a8:c9:74:
61:61:f9:3f:3c:f1:b6:54:6a:fe:d1:3f:77:57:f9:
54:ac:c4:e6:d5:7f:e8:ba:8b:24:8d:a3:84:c1:a1:
ba:90:3d:e4:31:7d:34:33:34:1d:21:6a:61:2a:08:
90:1c:a7:83:78:e7:db:cc:19:80:bd:69:05:3e:eb:
62:2f:02:f3:7e:0d:5a:60:c8:9e:4c:ac:88:0e:bc:
4e:e1:b4:84:f6:b6:85:46:77:b9:7a:a0:9c:72:0e:
64:99:ce:86:90:fd:6f:a8:90:1a:d2:44:e5:d5:1e:
39:e1:ef:f7:90:a7:33:15:d2:84:c0:09:8e:97:b2:
4f:2d:37:ba:90:e5:a3:a8:29:cf:51:80:21:b1:9d:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:03:73:6A:17:ED:25:99:9F:F9:F0:8D:2A:8A:B9:91:57:67:C5:19
X509v3 Authority Key Identifier:
keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/31A71E34407111EFAC14A640C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.112.0/22
115.178.60.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:4c:9c:46:0b:ce:11:37:97:ff:26:6f:59:77:79:16:b4:2a:
81:ab:98:57:d7:1d:24:63:6b:f7:b5:a7:47:ec:85:e8:3e:9e:
38:64:f9:09:2a:eb:71:6a:b2:07:40:d5:ad:00:d1:64:24:bc:
3d:d2:0d:5e:1f:95:52:42:fb:7b:13:a5:67:fd:aa:48:9d:b5:
c4:fd:05:7c:7e:83:8b:98:7c:5e:0d:f6:31:f9:c6:ee:26:40:
7b:87:06:44:f0:41:34:71:a4:06:af:66:fc:a7:59:c8:1a:7e:
84:bb:21:4e:14:aa:82:ab:d2:4a:57:37:0e:73:ad:c1:11:1c:
14:ba:d1:fe:cf:e0:c1:ee:fa:99:87:51:04:ce:a6:44:17:d1:
04:37:07:df:18:4b:23:ca:6e:2c:ad:fa:3c:90:9f:af:68:5e:
96:4f:c7:45:be:af:63:c3:d7:20:b1:9f:dc:26:bc:dc:53:62:
b2:d6:18:5a:56:fd:b1:87:6e:8d:43:a1:9b:85:2b:4d:d8:d3:
88:59:5c:ce:d3:6a:f7:2b:b3:fe:cb:51:9d:42:3d:8f:56:5a:
5c:0e:b3:9a:d2:be:e7:d9:96:2e:e0:0c:81:f4:e1:f1:b9:ef:
0f:c1:df:45:73:90:ae:cc:c3:b8:fe:b6:e1:68:63:a0:db:59:
b0:8e:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:20:35 2026 by rpki-client