
$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/1DE394187C2F11F0902A5A0CC4F9AE02.roa
File: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (raw, json)
Hash identifier: pdws3t0lZJ1KRtlaVi7T3cqSeY6vMdRKeuikmdwYWhg=
Subject key identifier: 02:40:ED:C0:EE:53:66:C5:21:3C:58:D5:E0:3D:9D:54:BF:AF:9C:F0
Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial: 067E
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/1DE394187C2F11F0902A5A0CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:12:35 +0000
ROA not before: Mon 18 Aug 2025 12:30:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151330
IP address blocks: 103.151.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Validity
Not Before: Aug 18 12:30:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47383-35d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b4:af:66:78:6a:b7:d5:28:81:0b:59:08:1f:
35:fa:6c:87:22:26:43:70:d4:60:e5:61:5a:03:42:
65:b0:38:b2:3b:2a:93:3d:09:dd:3a:97:8d:f6:68:
26:a4:0e:5b:81:4f:8e:af:58:24:6d:e1:0b:10:a3:
77:cb:c7:7d:b7:04:d2:99:78:8d:fe:33:94:57:95:
c9:74:08:7c:05:61:5e:f3:79:3f:84:4a:78:a1:d6:
1e:06:00:c0:d1:cf:42:f1:6f:47:3c:38:6e:48:9e:
bb:0f:6a:d4:72:df:7a:47:bc:96:d5:5d:3e:63:33:
ec:fa:95:d5:99:39:37:d8:c5:3f:92:f5:bb:b7:12:
c2:0e:b6:54:bb:b4:61:26:cd:c6:72:69:3d:38:a2:
ff:30:cf:47:0f:ec:d1:56:c8:d9:b3:99:8a:bd:27:
78:9e:c3:a6:a2:24:de:9d:93:d6:10:8e:32:93:4a:
64:6c:a9:db:c5:1d:d6:31:02:9d:d1:3a:04:66:72:
09:e1:99:00:dd:29:a1:1a:50:23:8a:6f:bc:27:dc:
3f:a9:27:45:0d:d4:37:25:f2:91:7f:79:bc:0a:f6:
d8:12:8d:06:b2:ed:c5:9e:99:15:ea:2d:2e:18:a5:
b7:c8:ed:3c:85:3d:a5:34:ab:34:a0:2b:d1:f5:bf:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:ED:C0:EE:53:66:C5:21:3C:58:D5:E0:3D:9D:54:BF:AF:9C:F0
X509v3 Authority Key Identifier:
keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/1DE394187C2F11F0902A5A0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.42.0/23
Signature Algorithm: sha256WithRSAEncryption
94:32:4c:13:6b:13:b9:e9:95:7a:10:38:28:81:19:a3:38:76:
b5:45:49:85:66:f5:f3:11:de:56:30:1c:21:18:a7:23:0c:b2:
1b:40:de:ff:31:19:bb:cb:58:57:0b:7b:54:0f:df:89:f3:69:
dc:96:33:bc:9c:a1:74:99:fd:83:69:0a:26:b2:80:c3:e9:36:
01:22:03:ff:4a:fc:49:c6:5d:0a:f9:3c:2d:bf:19:b5:63:e6:
3a:66:5e:82:3b:14:6b:6b:d6:22:d7:c9:fa:70:b0:82:af:12:
64:19:e6:ed:0e:57:87:c7:24:a0:6b:9f:99:85:e5:eb:ba:66:
35:aa:95:72:a1:97:f7:85:0a:88:dc:a0:96:8d:22:bf:69:41:
70:2f:2b:b1:41:1a:aa:06:5b:bf:b4:63:1e:a4:90:f3:79:c9:
fb:1a:7b:14:d6:5a:67:05:94:57:d6:d3:63:15:04:56:c9:31:
b8:59:a8:e0:1a:00:00:8b:fb:22:1a:d7:07:a2:43:39:d8:64:
78:e0:66:7b:e7:d5:7c:b8:a6:e5:04:9b:ec:3b:58:02:31:94:
31:99:3c:de:81:38:20:2b:21:8e:32:db:64:2f:f2:03:f9:49:
2a:4d:58:14:ed:24:7e:20:c6:e3:01:a0:fa:cc:ec:40:69:be:
3e:c6:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:12 2026 by rpki-client