
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa
File: 10800248E9C711EFA1589312C4F9AE02.roa (raw, json)
Hash identifier: FNVk1Hkb1JajhsNAiR0O9BCUIhbtgvJuSIfetEBCoj8=
Subject key identifier: 37:AB:C2:ED:BF:15:41:99:99:66:CB:29:54:54:CC:82:FA:52:59:F3
Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial: 0116
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa
Signing time: Wed 29 Jul 2026 07:56:37 +0000
ROA not before: Wed 29 Jul 2026 07:56:36 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139221
IP address blocks: 103.139.249.0/24 maxlen: 24
2001:df0:9d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Validity
Not Before: Jul 29 07:56:36 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a69b234-ee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:07:aa:c3:34:35:73:08:4c:2a:a9:7e:86:
fe:42:63:14:bb:49:8b:15:f7:38:f1:44:92:e3:ce:
d7:c4:51:28:17:a7:ec:48:87:17:39:89:89:04:a8:
56:06:8c:27:79:f9:14:07:8c:7f:07:5f:15:e2:89:
ba:69:90:bd:44:96:e7:18:5d:2c:4a:71:22:b6:3d:
a3:2b:bb:ee:26:63:21:1a:5d:24:17:99:16:fa:15:
8f:8d:d9:05:03:31:6d:39:95:d9:7d:8b:d8:fd:7d:
fa:fe:f9:7c:b5:a3:6a:12:a6:2b:88:77:c9:d8:84:
23:71:8d:58:f7:d0:3d:51:8a:26:1b:7f:16:48:27:
33:e8:79:75:f6:6e:14:7d:fe:a0:ea:43:4d:be:c8:
0f:e5:31:f4:36:a9:e0:5e:0f:42:73:f8:51:75:03:
ac:03:41:e6:1b:85:95:4c:06:82:8d:27:97:95:53:
e2:bc:29:d7:16:0e:3c:8f:1d:56:54:f0:7c:74:ad:
12:05:f9:f3:fb:39:e6:38:24:77:a6:cf:04:df:78:
95:28:50:5c:58:32:80:61:d7:fd:23:4e:e9:38:b6:
e5:e9:12:9f:48:da:20:c2:54:2b:5e:07:9e:94:4f:
f2:51:a2:db:6a:ae:14:ef:1f:aa:55:88:36:bd:68:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:C2:ED:BF:15:41:99:99:66:CB:29:54:54:CC:82:FA:52:59:F3
X509v3 Authority Key Identifier:
keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.249.0/24
IPv6:
2001:df0:9d80::/48
Signature Algorithm: sha256WithRSAEncryption
6d:31:c3:6a:07:5f:37:73:56:49:06:b7:aa:69:13:f1:19:ce:
6e:24:b5:66:6a:f3:31:15:ed:34:76:c0:24:f2:db:27:67:fd:
d5:a9:80:b2:1b:36:e5:e3:ed:16:d3:78:1d:4f:41:f2:3b:ea:
8d:f2:32:d8:dd:5a:b9:fc:c0:59:93:37:44:46:4f:6c:80:e9:
68:10:aa:ec:ce:59:11:be:51:7c:ef:29:2c:91:dd:6b:cb:f5:
d2:f0:71:1d:0f:8f:fe:3f:fa:e9:9e:8e:7d:2e:ea:f1:d7:6d:
b3:6f:c6:a9:f9:00:79:7d:ee:76:84:49:db:c6:eb:44:33:ee:
f8:1d:a4:ee:e1:b7:60:51:55:95:df:1a:b0:81:2c:93:f2:ae:
da:ff:45:31:0f:bf:37:07:19:ae:c0:bf:43:ad:8e:61:a7:b1:
99:1d:7c:90:34:80:56:b8:1c:c4:25:2b:85:f9:2d:8c:ee:4e:
a8:b2:72:c2:38:cc:c9:75:68:94:76:7e:b5:1e:d2:39:07:61:
8f:4d:e8:27:51:31:fb:e7:23:3a:5f:82:d0:41:c5:fe:e3:39:
66:ec:d7:8a:6a:95:b1:ba:4a:0e:b7:21:e3:3c:69:cd:ee:45:
b6:b2:f4:d3:02:75:df:7e:f1:68:05:97:6f:53:fd:4c:30:8d:
9a:b9:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:05 2026 by rpki-client