
$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F61F817C9B3B11EBA5C76B80C4F9AE02.roa
File: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (raw, json)
Hash identifier: EbOmNI7pCvPrjoYlxuO9Tzo0OfRycsU5uM6JLnWzUkE=
Subject key identifier: 22:A2:BF:71:2A:47:9C:5D:CB:3E:0E:43:9F:58:B9:98:7A:BD:7C:91
Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial: 0AB8
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F61F817C9B3B11EBA5C76B80C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:39:21 +0000
ROA not before: Tue 02 Sep 2025 20:10:38 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141768
IP address blocks: 103.142.172.0/23 maxlen: 23
103.142.172.0/24 maxlen: 24
103.142.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Validity
Not Before: Sep 2 20:10:38 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45da9-561f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:49:48:dd:32:7c:71:66:66:17:b9:40:6b:
14:65:53:5e:2c:40:bb:a0:a6:52:98:ea:42:2a:13:
c6:68:94:d1:c5:73:a1:f3:e0:d1:b5:35:fe:2c:98:
15:72:35:f0:33:96:dc:82:c9:17:b0:34:f2:54:ad:
a4:c8:97:49:ad:17:6f:3a:da:6a:75:60:84:12:3b:
69:6e:f9:3a:88:1b:b4:fa:01:bf:26:25:65:69:dd:
24:4d:37:db:3c:40:ae:9b:05:89:1c:bb:d7:3f:cb:
27:f6:11:65:0b:25:43:d2:e6:43:5a:2d:bc:8a:6f:
31:d4:ba:6c:6e:2c:7f:14:7e:b2:ad:7f:09:e4:af:
47:cd:f3:85:37:92:7e:a1:65:4f:ec:e0:13:7d:8a:
2b:50:93:5a:a2:c7:f0:29:06:3f:6f:c8:e5:2b:f0:
3d:43:a2:25:3b:04:4a:ba:31:67:1b:1a:b8:0f:62:
d0:b8:32:39:5c:d0:01:0c:55:38:fd:3d:aa:d5:fa:
29:80:5d:16:1d:4b:92:ba:3d:4d:bb:1d:cc:68:4c:
4f:77:1e:d7:a9:29:99:4a:55:99:69:b6:29:8c:70:
5f:cc:c2:c7:b5:3c:18:16:0a:1f:b3:21:b5:a6:43:
4c:f6:1f:92:79:99:44:ec:7d:43:09:0b:e5:f6:0b:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A2:BF:71:2A:47:9C:5D:CB:3E:0E:43:9F:58:B9:98:7A:BD:7C:91
X509v3 Authority Key Identifier:
keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F61F817C9B3B11EBA5C76B80C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.172.0/23
Signature Algorithm: sha256WithRSAEncryption
40:5a:e0:a2:91:e7:c4:d9:56:47:38:2e:67:78:39:ee:c9:60:
99:48:43:69:69:46:29:b4:41:84:22:7b:31:09:00:5b:d0:bb:
0e:10:84:a0:d4:99:2c:83:f3:23:86:d8:13:55:5c:a0:b1:a9:
bb:96:f2:7f:57:d6:46:55:d6:dd:c3:fb:3c:e3:9b:a3:49:19:
78:f1:53:be:1b:fd:c7:f6:a9:b8:4b:21:a1:b4:56:ec:be:48:
73:3f:4d:95:09:a9:a6:37:ac:7b:11:5a:62:c3:f4:31:e2:90:
54:e4:6c:f9:da:67:23:15:04:59:71:61:78:e2:f2:50:bb:07:
7d:59:18:99:0c:e0:0b:25:30:f7:54:cc:31:6a:7b:66:ed:8d:
a9:f3:54:2a:86:e3:61:4a:81:6d:cf:68:45:9e:56:26:95:bd:
51:82:62:24:d7:b0:fc:21:99:29:83:69:f6:fb:d4:e2:1e:ac:
65:6f:4b:0f:60:47:03:db:bd:f1:c3:19:5f:2c:0c:dc:4d:24:
7c:be:d2:f3:69:29:cc:69:92:87:d3:32:64:33:7e:85:1d:6f:
e1:d7:db:c6:d3:39:b3:78:68:aa:91:e8:2d:17:ee:ad:9c:96:
b7:dd:21:b0:81:5d:51:f7:9b:3e:78:fc:d1:ea:75:b6:5d:fc:
d5:86:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:22 2026 by rpki-client