
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/78ACE25C7FD811ECB5AA233AC4F9AE02.roa
File: 78ACE25C7FD811ECB5AA233AC4F9AE02.roa (raw, json)
Hash identifier: q5OFnHrAbmDE37ECraWByvij1R2A5RKbptVaVJR7v/8=
Subject key identifier: F2:CF:2C:9E:97:AE:6D:42:98:C3:00:E3:C6:65:B1:26:1D:31:7C:0B
Certificate issuer: /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Certificate serial: 0730
Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/78ACE25C7FD811ECB5AA233AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:57:20 +0000
ROA not before: Thu 10 Apr 2025 22:33:25 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141384
IP address blocks: 103.162.142.0/24 maxlen: 24
103.162.143.0/24 maxlen: 24
2001:df6:780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529FC, serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Validity
Not Before: Apr 10 22:33:25 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a429a0-432c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:29:74:41:54:cf:41:d0:24:87:8c:b9:33:
d9:72:1a:e8:93:bd:86:70:fe:b1:e4:09:da:89:c4:
1a:93:e9:c1:a6:3b:9c:8c:14:89:7f:c5:01:e5:7f:
7b:4b:c5:27:2b:9a:9e:f4:d0:c5:2d:59:58:7f:c2:
78:5a:3b:f8:5f:13:7f:3d:8e:53:a8:64:3e:64:9b:
d8:eb:9d:5f:77:64:86:c7:19:db:33:b8:13:c7:94:
cb:23:37:90:69:d1:eb:41:d4:75:7c:39:ec:eb:7d:
f5:b5:41:fc:23:25:5b:bc:7c:db:4c:a1:6b:c2:11:
8a:bf:27:a5:3f:96:78:7b:65:28:91:19:46:7d:fb:
4c:7d:54:e1:cf:2d:5f:50:59:a8:06:41:ab:b5:b2:
43:68:f9:85:ad:c3:1e:c1:71:ce:32:60:8c:30:60:
d7:c7:5b:93:75:29:ae:b5:10:57:b1:00:a3:39:64:
e3:c3:9c:d2:ea:27:f2:33:f7:a5:2f:3f:1b:e8:a6:
9f:88:75:90:57:d1:2d:fd:d9:d3:37:37:2f:91:f2:
e6:eb:2a:bd:d6:d4:ba:dc:40:21:e4:16:75:45:97:
06:cb:1a:a3:a1:31:17:09:78:05:ef:94:ec:a1:6a:
9f:7d:77:9a:26:50:c6:35:57:96:a7:01:04:cf:e1:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:2C:9E:97:AE:6D:42:98:C3:00:E3:C6:65:B1:26:1D:31:7C:0B
X509v3 Authority Key Identifier:
keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/78ACE25C7FD811ECB5AA233AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.142.0/23
IPv6:
2001:df6:780::/48
Signature Algorithm: sha256WithRSAEncryption
20:ce:44:d0:10:a1:d4:e9:52:8e:db:3b:75:b4:39:b0:ba:58:
ea:b8:27:e3:d0:2e:b0:c7:9c:36:9c:1b:2a:0c:1c:bd:56:6b:
3d:05:d8:35:17:e5:43:2b:45:a0:7a:98:4e:bb:41:0c:15:69:
2f:8e:f9:e7:ac:4f:52:8c:8a:29:40:d9:df:61:8d:80:97:87:
d7:81:74:10:db:90:30:af:49:ec:ef:ac:f8:e4:a0:3c:d0:c2:
59:13:56:0b:8b:e6:38:cd:e3:8b:22:33:80:ed:8c:0e:33:93:
51:83:10:0b:67:89:ee:da:b6:77:97:a6:ac:1c:6b:83:46:4d:
0d:d6:9c:1c:0d:89:4f:b2:e6:d1:ee:4b:84:71:40:87:cd:30:
5a:cf:ed:2d:8c:59:9f:54:62:01:8d:6e:a8:75:f7:30:fa:1d:
0b:0b:a7:03:62:e1:26:7c:8a:7e:d3:e3:92:31:1b:48:de:69:
e2:f0:54:d5:c4:5e:95:49:81:2c:e8:79:0e:0c:e7:2e:e3:86:
08:ff:07:27:cc:d6:72:d3:16:02:1a:4b:8d:c0:7f:97:3b:d1:
2d:ae:77:36:4e:48:9d:a2:4f:7c:4a:b8:fb:88:98:a8:c0:ff:
96:64:05:92:60:89:24:eb:35:9e:7c:58:9c:f0:99:26:b6:22:
33:7b:06:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:07 2026 by rpki-client