
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa
File: 8224E55C345F11F0BD514C6CC4F9AE02.roa (raw, json)
Hash identifier: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=
Subject key identifier: E1:A7:07:52:53:F7:06:EC:C6:50:D6:62:0E:76:9D:38:93:85:C1:1F
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11EA
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:54 +0000
ROA not before: Wed 20 Aug 2025 17:57:29 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152918
IP address blocks: 103.149.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4586 (0x11ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:29 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48296-cb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:63:ee:46:3b:eb:f4:11:d0:fb:d9:19:ff:a6:
d8:d1:d6:0f:96:a8:48:12:8f:98:22:db:68:36:2c:
88:a0:eb:3a:5a:5d:85:00:e6:30:cb:ed:15:6d:4d:
a8:59:a9:98:69:3e:38:4a:64:25:a4:fa:2b:63:d2:
26:36:53:d5:e3:aa:f8:82:3b:39:2d:55:8a:45:50:
57:4c:e5:b4:95:fc:10:5b:e0:6e:4c:51:43:98:27:
a6:c6:5b:21:6b:fa:f3:be:38:d7:7c:0f:c7:bb:be:
d5:b7:88:7a:89:43:36:10:91:32:b1:a3:56:03:34:
ff:fa:45:0c:a6:fd:55:27:2c:5e:ba:f3:d6:ef:0d:
11:04:b5:7d:3c:7b:ea:1f:09:95:38:1e:49:7a:06:
8d:f3:26:ee:58:b4:3a:6a:51:b1:5c:31:25:69:da:
a0:42:33:60:e4:82:d4:08:46:32:f7:4c:2b:9c:17:
82:b9:8b:74:3a:24:78:6f:1f:6f:26:dd:05:fc:6f:
e0:fc:08:15:63:32:ef:c1:ae:5b:52:f0:86:5d:36:
16:e3:cc:76:8c:f1:65:9f:15:79:de:7e:dc:fe:5d:
b9:a8:23:85:44:11:8d:14:50:36:0e:d7:a0:4b:39:
db:95:12:a5:39:3d:63:78:44:e2:f6:0a:a6:52:73:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A7:07:52:53:F7:06:EC:C6:50:D6:62:0E:76:9D:38:93:85:C1:1F
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.144.0/24
Signature Algorithm: sha256WithRSAEncryption
91:53:bc:04:b9:4f:7c:a5:ee:2e:d5:2f:a4:bf:34:48:c7:35:
e4:90:5c:55:38:b8:fe:6b:aa:ce:94:ba:c3:6e:ef:39:1a:f1:
20:37:fb:d1:9e:8e:52:f3:30:aa:4b:d7:db:92:1e:ad:ca:2c:
ec:ed:52:89:47:82:a6:68:a1:19:33:de:ae:0f:4f:bf:bd:56:
ff:8f:d4:83:3b:02:a2:56:17:e3:a2:19:3d:dc:35:f4:1a:d7:
32:6b:71:2c:3a:7b:b1:ad:b4:c3:e7:bb:d4:6a:98:db:4d:27:
04:05:f3:7a:0d:71:2b:9f:80:88:29:1f:92:10:c6:c4:b2:89:
b4:28:ed:a9:49:9b:a6:06:39:e8:b3:96:69:6b:6f:ef:df:96:
79:91:db:a7:39:b9:16:a4:ec:13:c8:97:6b:44:33:01:98:25:
fa:b6:dc:79:a3:4e:92:f2:63:45:78:3b:a8:2d:33:23:e2:6d:
69:3c:b8:8e:64:0a:03:f9:bd:0a:3f:6f:a2:ff:69:58:50:a9:
d9:58:48:4a:82:26:2d:ec:cd:50:4d:ff:10:d7:ce:70:3d:ab:
9d:37:d8:19:72:b1:db:7d:54:c2:06:0a:f4:25:32:26:94:11:
f2:ec:05:84:11:e2:a8:d9:bb:6d:4d:d4:eb:2d:48:2d:5d:5e:
f8:86:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:40 2026 by rpki-client