
$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa
File: 45399802215111F0B94CA13FC4F9AE02.roa (raw, json)
Hash identifier: zJka1MeJK7lnwqtIr5JF4dvCTJ8BDAuJUIST/U00HkI=
Subject key identifier: 5B:B3:AB:56:EB:71:0E:26:A3:18:B3:EB:BD:D5:DA:A5:D8:32:95:CA
Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial: 0229
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:30:11 +0000
ROA not before: Sat 17 May 2025 03:41:51 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 151197
IP address blocks: 103.140.194.0/24 maxlen: 24
103.140.194.0/25 maxlen: 25
103.140.194.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Validity
Not Before: May 17 03:41:51 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3eb03-df15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:b0:75:d4:94:14:6f:c2:60:13:7f:10:65:
aa:49:99:56:b8:08:8d:9c:bd:b2:78:60:6e:43:5f:
c8:49:aa:86:51:3d:5c:29:df:6e:54:3e:86:7f:3b:
98:0a:46:fb:2e:21:f2:9b:38:10:1e:00:1e:9e:e2:
14:9e:be:20:0d:ec:7f:12:18:6a:b5:9b:8d:5a:9f:
11:bc:1e:eb:cc:66:c7:88:07:67:33:88:98:ce:f2:
4f:6c:06:24:71:c0:e6:ee:c0:4b:c5:0a:c7:62:fc:
b6:42:3e:1e:02:67:d1:22:50:a9:ff:f6:21:e4:10:
f7:c2:89:52:d1:b3:29:68:43:92:c9:8e:69:0b:db:
b2:67:5a:95:3c:bf:2c:40:b0:ff:ad:30:c3:9c:0d:
2c:eb:cc:8b:a3:ea:93:4f:5d:50:5a:e6:77:bb:36:
f0:68:c5:5a:84:b5:dc:08:65:c7:c1:71:29:e3:af:
df:9a:69:01:8d:6c:ae:0d:3c:26:cc:d8:2b:36:d5:
4d:72:f2:38:9a:a1:5a:4d:35:9b:fb:4f:5c:db:db:
1c:a1:d8:f7:c3:7d:8b:a5:ab:ff:9e:23:0f:b5:9d:
42:34:df:2a:38:da:53:46:b6:18:24:bd:a2:87:9e:
89:cb:d9:64:1d:ea:da:ec:77:e1:1b:b4:ca:3f:bd:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:AB:56:EB:71:0E:26:A3:18:B3:EB:BD:D5:DA:A5:D8:32:95:CA
X509v3 Authority Key Identifier:
keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:6d:73:1d:88:e9:cd:8b:1e:ec:2e:69:c0:64:d8:28:c1:11:
36:62:9c:f0:1c:1a:87:06:8e:49:bd:86:77:77:ba:fc:95:9a:
c6:d3:2b:85:06:cd:62:ff:4c:a2:e3:4f:0f:f8:61:72:32:c6:
99:d4:55:3b:a1:9a:c5:7c:37:13:91:0e:49:e9:81:b6:b7:b2:
e0:6b:38:c8:30:5f:2f:34:d5:7a:27:df:e7:d8:04:7f:14:5c:
ae:60:55:68:2f:45:41:41:20:cf:77:8b:dc:31:84:f4:7f:0b:
fc:28:8b:38:5c:b2:23:9b:84:3c:ae:cf:90:bb:1d:7e:cb:28:
29:2d:09:7d:3d:58:78:a8:49:a8:46:92:fb:cc:b9:0b:4e:f1:
1d:92:0c:15:4c:dc:47:a8:07:f3:a2:24:a8:c0:61:e3:2f:28:
38:c3:d3:23:9f:7e:b7:d8:02:9f:cb:79:e9:9e:0a:65:44:08:
c7:fe:d4:e5:8b:ca:27:61:53:68:42:41:c8:5d:08:52:53:16:
4b:73:62:12:6f:b4:55:06:4d:25:7d:6c:f9:ce:3e:c8:ca:03:
47:31:4d:fa:ea:d1:88:2a:a9:69:ca:06:b6:0c:df:af:1d:f2:
ae:22:f9:08:c2:17:65:25:3a:f1:7a:7e:51:cb:e9:d6:44:06:
65:e4:c0:1e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5
MERGMzI0OEEwHhcNMjUwNTE3MDM0MTUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWIwMy1kZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEmwddSUFG/CYBN/EGWqSZlWuAiNnL2yeGBuQ1/ISaqGUT1cKd9uVD6GfzuY
Ckb7LiHymzgQHgAenuIUnr4gDex/EhhqtZuNWp8RvB7rzGbHiAdnM4iYzvJPbAYk
ccDm7sBLxQrHYvy2Qj4eAmfRIlCp//Yh5BD3wolS0bMpaEOSyY5pC9uyZ1qVPL8s
QLD/rTDDnA0s68yLo+qTT11QWuZ3uzbwaMVahLXcCGXHwXEp46/fmmkBjWyuDTwm
zNgrNtVNcvI4mqFaTTWb+09c29scodj3w32Lpav/niMPtZ1CNN8qONpTRrYYJL2i
h56Jy9lkHera7HfhG7TKP71d7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFuzq1br
cQ4moxiz673V2qXYMpXKMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB
RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjcyRTMvQzZCNTAxM0NFQUU5MTFFRDg3NUEyRDUxQzRGOUFFMDIvNDUzOTk4MDIy
MTUxMTFGMEI5NENBMTNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4zCMA0GCSqGSIb3DQEBCwUAA4IBAQCfbXMdiOnNix7sLmnAZNgo
wRE2YpzwHBqHBo5JvYZ3d7r8lZrG0yuFBs1i/0yi408P+GFyMsaZ1FU7oZrFfDcT
kQ5J6YG2t7LgazjIMF8vNNV6J9/n2AR/FFyuYFVoL0VBQSDPd4vcMYT0fwv8KIs4
XLIjm4Q8rs+Qux1+yygpLQl9PVh4qEmoRpL7zLkLTvEdkgwVTNxHqAfzoiSowGHj
Lyg4w9Mjn3632AKfy3npngplRAjH/tTli8onYVNoQkHIXQhSUxZLc2ISb7RVBk0l
fWz5zj7IygNHMU366tGIKqlpyga2DN+vHfKuIvkIwhdlJTrxen5Ry+nWRAZl5MAe
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:43 2026 by rpki-client