
$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/C1CDEDC6950711F0AFD0F30BC4F9AE02.roa
File: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (raw, json)
Hash identifier: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=
Subject key identifier: 4D:44:C8:A6:0C:67:37:53:9C:9E:9B:24:A9:DC:77:2A:FB:92:83:C5
Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial: 05A4
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/C1CDEDC6950711F0AFD0F30BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:29:58 +0000
ROA not before: Thu 18 Dec 2025 23:19:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150150
IP address blocks: 103.147.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1444 (0x5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Validity
Not Before: Dec 18 23:19:17 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a47796-7747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:39:da:a1:dd:44:5a:d2:aa:b9:c2:57:a1:
ba:fa:9c:54:de:a0:0f:14:15:4f:36:6c:a7:9e:60:
31:49:b4:ca:b6:10:43:dd:2a:99:06:4f:df:32:db:
4e:03:2f:af:3d:f5:19:44:44:f2:6d:81:46:2b:b2:
1a:5f:8b:63:97:1e:1a:cd:53:ad:7c:f6:de:e4:07:
90:94:d5:6f:af:ac:0b:81:1c:e5:1e:cf:66:10:e7:
b8:4f:b8:c0:86:75:5c:95:51:0f:de:76:d4:9e:4d:
b5:3b:22:c6:31:ed:95:c4:92:48:6d:2b:4d:5e:ce:
03:87:71:53:09:a2:9f:74:98:cb:37:80:ee:ad:55:
d4:3d:23:9a:00:ae:2c:e4:31:75:4a:1c:45:0a:be:
30:bb:ff:28:fe:c0:0a:cc:32:09:2c:b0:d8:60:ed:
f4:41:dc:6e:66:18:d0:09:1c:0b:d7:02:25:13:2c:
a7:06:95:59:c5:fb:f5:cc:81:ab:62:30:e4:95:c8:
b1:b7:e5:d0:04:be:ac:8d:fe:e7:09:37:f9:b6:5e:
26:f0:3b:6e:b0:4c:0f:32:b9:b1:93:c9:24:40:82:
da:3e:1e:47:67:88:7a:c6:a4:53:6d:e9:26:7d:e4:
4a:3d:89:e5:ca:c9:6c:f6:a2:37:02:b7:8c:32:3e:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:C8:A6:0C:67:37:53:9C:9E:9B:24:A9:DC:77:2A:FB:92:83:C5
X509v3 Authority Key Identifier:
keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/C1CDEDC6950711F0AFD0F30BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6b:86:e0:65:94:6f:15:d7:6e:1d:17:35:10:a7:25:3a:83:
c4:e3:43:e1:19:34:8a:11:71:c4:d3:66:ca:b9:90:01:0d:10:
00:57:0f:fa:38:eb:98:ea:88:54:52:2f:fb:cf:9d:09:45:e2:
fb:f5:69:d8:d7:fc:8b:cd:c1:29:cd:57:a2:65:6e:c6:51:63:
d8:50:1a:a9:3a:bc:4f:de:e5:89:bc:ba:e9:af:a9:62:6e:e3:
54:c4:a7:49:6f:36:e4:cf:90:14:db:12:c0:d8:6e:72:d2:aa:
36:05:c0:0c:db:7f:69:1c:6c:cb:e6:b0:c5:03:02:cf:f5:fc:
0b:55:45:07:d0:2b:1e:55:10:55:f6:8d:87:56:a0:2b:87:4d:
ca:63:91:9e:2a:66:26:55:25:8e:7e:40:6d:8f:fa:74:ae:2b:
ff:02:7a:a5:1c:37:15:e6:83:20:86:01:df:ba:f2:33:54:43:
63:0e:d8:ba:5f:ed:fb:6b:7b:32:43:6c:27:25:65:2e:78:6b:
02:be:12:64:b0:54:57:30:2b:25:b7:63:80:f7:e4:43:5f:72:
37:fc:25:7e:0f:a9:cd:e3:a0:c1:2a:15:19:3b:5f:ea:a8:e9:
72:66:20:6a:db:a7:47:fd:85:0d:01:4d:d4:e2:d7:0c:fd:9b:
84:33:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:33:30 2026 by rpki-client