
$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/3D2A9DB0897D11ECAE8A760BC4F9AE02.roa
File: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (raw, json)
Hash identifier: 607WTIqC4PIUwpaUGmTN6xifKoIF7YfDRmmrGwuTkFA=
Subject key identifier: 64:77:4F:2A:47:38:07:77:1D:EF:F5:84:43:78:EC:D3:A9:25:12:78
Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Certificate serial: 0460
Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/3D2A9DB0897D11ECAE8A760BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:01:01 +0000
ROA not before: Fri 25 Jul 2025 01:07:26 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149504
IP address blocks: 103.181.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Validity
Not Before: Jul 25 01:07:26 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40e5c-aaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:e5:a8:f0:a4:4a:37:de:90:02:b0:ec:79:
2d:03:b5:f6:a2:25:0b:26:f7:19:01:b7:cb:88:e2:
8a:2c:9e:fd:32:18:33:2c:3d:83:5a:0c:84:69:07:
5b:27:00:ed:ac:5a:ab:60:00:61:df:99:b6:8e:9e:
17:a9:14:37:73:4e:73:5e:fd:d1:11:90:a9:35:82:
59:c0:3b:3c:0b:64:76:7d:e3:42:79:79:e9:dc:de:
85:29:9d:51:26:18:ec:b2:ff:3e:ad:c0:d4:6a:dd:
ad:b4:a8:37:0b:2d:37:b7:1e:42:ac:05:3f:c8:aa:
af:00:cb:ae:66:7f:bc:23:85:4b:84:d4:db:8d:7e:
a7:6c:a4:04:e8:10:74:38:67:a1:2e:53:da:50:d6:
81:80:86:68:77:df:e7:bf:04:02:b7:5e:22:67:ec:
aa:ea:8f:6e:72:42:51:26:4c:58:db:f2:2b:ed:0b:
a2:50:ed:12:90:ec:6e:28:d5:06:23:8f:4a:52:a1:
9e:bc:77:57:61:c3:44:ac:0a:8d:af:dc:dc:ef:32:
4a:4c:06:d1:72:52:8f:cd:cc:f9:c3:f9:e1:2e:40:
80:c7:2b:47:03:e0:32:8c:ef:7c:d0:b8:e6:49:21:
9a:60:b2:34:bc:2e:8a:39:38:46:1d:ad:27:f2:c6:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:4F:2A:47:38:07:77:1D:EF:F5:84:43:78:EC:D3:A9:25:12:78
X509v3 Authority Key Identifier:
keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/3D2A9DB0897D11ECAE8A760BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.96.0/23
Signature Algorithm: sha256WithRSAEncryption
34:d5:04:34:55:74:3d:87:e1:7e:2b:cf:c9:61:d3:c9:52:3b:
00:a1:25:0c:a5:0e:d4:c8:b5:72:ea:b2:a6:a2:bd:15:78:3c:
59:40:b8:db:63:11:d4:e7:7c:d9:f3:ba:46:a7:bf:74:83:78:
be:d2:5d:04:aa:98:aa:ad:7b:3d:e6:7b:10:09:2a:5a:2e:49:
36:2c:03:5d:29:e8:06:8d:eb:6d:8d:2e:64:1c:4b:79:7d:05:
ce:2f:bf:ba:eb:92:f9:95:a9:a7:a7:5c:e2:53:d1:4e:31:4b:
0e:da:7f:15:c9:1a:08:b3:ab:ba:ef:08:71:4f:a9:78:d5:0e:
ec:68:ee:ed:37:4e:e4:6c:4c:7a:f0:f0:d8:65:e0:cf:c3:03:
42:a6:4f:15:f6:2f:50:03:a4:3b:11:fb:f9:25:77:09:32:46:
11:c5:16:ba:5d:01:23:bd:eb:bb:9b:60:e2:e4:2e:0a:31:78:
b5:09:fe:2f:46:a8:37:19:40:28:23:0f:93:48:07:7f:13:4a:
23:88:9f:5d:ad:d2:98:8f:c7:01:f3:fe:a1:e5:a5:58:96:3f:
8a:4b:47:d9:94:0d:22:3c:2a:0d:c2:d2:5d:55:40:76:51:2a:
ca:f3:97:63:fe:54:2d:e2:80:ca:6d:1d:9c:9b:ff:10:f8:f3:
8f:dd:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:42 2026 by rpki-client