
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa
File: C47523F0509D11EFA81FC32AC4F9AE02.roa (raw, json)
Hash identifier: sQtbzr9sjoTxhodc3OLVckeC77AlxSzlNGMJTJ2p2QU=
Subject key identifier: 96:C6:15:F0:CF:EE:BE:50:D2:FE:1C:30:9E:F7:0A:0F:3C:43:51:D9
Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial: 0134
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:54:43 +0000
ROA not before: Tue 03 Jun 2025 03:20:39 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 150734
IP address blocks: 103.151.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Validity
Not Before: Jun 3 03:20:39 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a48b72-875e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:4d:31:be:0e:fa:d2:a0:d8:14:9b:4f:51:
e7:3c:72:6e:70:64:d4:bb:4e:1c:45:77:d0:05:aa:
eb:80:c5:1c:3a:9c:30:14:b8:86:62:a4:37:a6:91:
a4:c5:bf:fa:7b:ce:12:99:e8:ef:0b:4d:5a:a3:86:
43:23:ea:15:e6:79:dc:5e:37:27:29:61:26:79:fe:
10:44:21:d7:05:67:87:b7:b7:87:d5:81:8d:64:11:
c6:ab:ec:5a:41:a2:15:2a:32:18:f9:95:01:a9:df:
1a:50:f8:e4:16:6b:97:2e:f2:82:42:9b:7f:45:3c:
50:ab:83:54:ae:ba:e0:4e:1e:c6:62:b4:03:88:5c:
f5:5e:a5:46:ba:07:fe:8e:a9:ba:db:ad:4f:00:65:
f3:b6:5f:99:75:c5:5b:7a:fe:2f:1d:67:06:74:93:
a1:3d:45:d6:7c:7d:32:2b:ec:21:6a:a9:0a:22:73:
05:d0:c3:f9:1c:4b:e0:7c:e4:99:06:3f:16:69:32:
5f:a3:b4:8f:62:17:8f:dc:9a:e0:9a:fe:df:d5:d6:
fb:5e:35:62:56:43:73:dd:b3:78:c7:51:95:0a:ac:
c0:ce:32:dd:7f:4f:4f:0d:91:21:8b:af:78:89:1b:
6d:5d:32:37:f7:c6:ec:9d:6f:e3:53:76:9c:29:c8:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:15:F0:CF:EE:BE:50:D2:FE:1C:30:9E:F7:0A:0F:3C:43:51:D9
X509v3 Authority Key Identifier:
keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e8:b0:bf:37:e0:31:17:ed:f9:0e:35:b5:1b:94:1f:19:0e:
c6:c0:60:b6:62:db:98:20:b6:5c:e7:52:b1:10:90:46:3d:70:
09:32:19:de:66:09:60:29:9a:5d:29:2f:74:9c:10:c3:57:4b:
4c:0b:f9:e1:91:61:94:16:be:c0:25:5d:5e:57:a7:fe:53:71:
f9:49:ba:a3:fd:b6:c5:18:11:e4:3f:bf:6a:dc:9e:a8:2c:64:
99:7c:ec:e0:bf:75:d3:55:3f:94:61:43:25:e4:0d:b3:84:1d:
79:b7:b0:5b:1b:73:1e:bf:43:37:d3:52:3f:be:6f:5c:af:1b:
fe:d0:78:ce:b0:28:90:e2:f8:bf:25:e3:c6:57:39:81:f8:a9:
91:90:d9:56:a6:45:d8:24:ef:ac:d4:7a:3e:6d:a4:3c:01:a3:
02:02:1d:ee:5d:79:f8:c6:e9:eb:5d:5e:e8:6c:ee:82:a6:84:
b9:d3:d1:23:30:f2:94:6f:bd:4f:82:8e:b8:d7:4d:c1:1d:6b:
7a:d1:ac:37:fc:20:52:f8:dc:9f:f1:98:f0:b0:fd:7f:02:3c:
da:03:34:bf:16:09:05:c0:bb:a1:27:0f:06:66:c3:98:0a:52:
ca:1a:53:30:ff:d5:09:d1:f1:92:9b:db:e3:dc:c9:61:e1:3d:
7e:93:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:02 2026 by rpki-client