
$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
File: 5F150B08D48611E9A4473984C4F9AE02.roa (raw, json)
Hash identifier: oWm87X81ovlVMA6yKYmhMA+uXxBsq5tX6VVc4uPSkL4=
Subject key identifier: EA:9B:41:76:35:6B:87:3F:7F:31:D1:B3:E8:D4:D5:50:03:43:4F:AE
Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458
Certificate serial: 153E
Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:35:26 +0000
ROA not before: Tue 30 Dec 2025 17:14:05 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38203
IP address blocks: 103.81.172.0/22 maxlen: 22
103.81.172.0/24 maxlen: 24
103.81.173.0/24 maxlen: 24
103.81.174.0/24 maxlen: 24
103.81.175.0/24 maxlen: 24
203.194.116.0/22 maxlen: 22
203.194.116.0/24 maxlen: 24
203.194.117.0/24 maxlen: 24
203.194.118.0/24 maxlen: 24
203.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl
rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5438 (0x153e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458
Validity
Not Before: Dec 30 17:14:05 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44ead-f5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:63:50:f2:05:27:b2:a9:8a:82:0e:81:86:
8f:9f:19:6e:b2:55:59:bc:93:4d:84:cc:d0:7b:e2:
d6:2e:25:a8:c5:70:7d:38:54:d8:07:2a:6a:94:77:
58:e1:14:7f:28:66:1f:34:ac:df:50:a4:01:85:bc:
e3:a0:a1:e5:de:e5:be:66:02:65:8e:ae:49:24:0c:
f3:2a:86:18:cc:61:99:99:0c:2c:0b:9c:ad:79:c0:
39:6d:ef:fa:08:9f:ec:de:8b:a0:cb:64:87:17:20:
58:99:a1:99:af:99:68:a4:f1:b5:61:1d:2a:93:85:
65:be:32:a4:72:31:ca:83:8b:0f:71:0d:e9:0d:8b:
78:9c:c1:84:4d:cc:89:0e:d3:5d:db:15:c6:ed:33:
71:74:08:bf:2c:2d:14:ab:7b:b7:e6:e2:29:d7:bf:
4d:47:0f:53:8f:c6:7c:50:ae:f2:56:bf:4e:ea:e8:
c1:a6:4f:50:ea:c4:35:37:85:39:bf:5d:b7:5c:b8:
01:53:dc:0c:7e:f8:01:30:7d:96:62:60:b2:de:b1:
cd:2e:73:09:c0:7a:62:b9:f2:1b:51:45:eb:01:51:
d0:cd:68:16:3d:6b:35:23:d8:75:7c:d2:35:8a:05:
ee:f9:7c:29:04:d8:07:07:a1:ba:d7:c5:5e:bc:cb:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9B:41:76:35:6B:87:3F:7F:31:D1:B3:E8:D4:D5:50:03:43:4F:AE
X509v3 Authority Key Identifier:
keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.81.172.0/22
203.194.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:16:3f:51:36:01:70:fa:2f:2c:c3:13:be:dd:e2:3b:c9:17:
d4:84:03:56:ea:f3:53:bd:0a:ef:66:40:0b:b0:e1:66:bb:ea:
5e:a9:0f:8c:1c:14:74:f4:29:58:03:40:de:33:82:e6:49:d3:
d7:4b:18:7f:17:49:ff:77:79:f8:2b:b7:1d:98:0f:8b:7d:ed:
7a:29:a2:be:19:96:c1:e9:99:ed:27:cd:6a:c2:e1:57:49:31:
d6:ee:95:92:3c:1e:4c:d3:a0:44:4d:f9:b2:6b:06:8a:96:32:
9a:36:b1:da:57:dd:0f:c6:54:a1:6a:4a:8a:b6:00:d2:c7:81:
ae:39:4c:0c:f1:49:bf:32:49:7c:fe:ae:30:94:a9:95:fa:60:
67:eb:c5:38:05:aa:cc:ca:1e:9f:a8:b8:a4:fe:d2:5c:aa:e8:
c5:9b:ce:85:17:a0:ca:df:c6:a6:9e:2a:3a:40:76:1f:c4:a9:
a9:0a:28:34:93:be:93:d4:87:7b:40:23:e2:ea:26:cd:17:3f:
a1:46:75:0b:4d:4b:74:e4:73:c9:39:c9:bd:4d:1e:fa:ed:8f:
d0:21:18:1a:e6:99:c1:9f:9d:18:c0:0f:0e:af:cc:0d:81:37:
4c:fb:49:19:a4:cc:6c:fc:37:cf:76:38:39:46:e3:58:7c:b5:
3f:90:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:12 2026 by rpki-client