
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/EEC2740A08A811EBB9370955C4F9AE02.roa
File: EEC2740A08A811EBB9370955C4F9AE02.roa (raw, json)
Hash identifier: SrLJPYqj1PKxDj5GaMaRGXVl96rvub+rDBOmM5hpFEc=
Subject key identifier: CA:F6:43:3E:8B:18:34:60:F8:E8:7C:74:32:39:9F:E4:F4:9B:C6:1E
Certificate issuer: /CN=A91A3859/serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6
Certificate serial: 082C
Authority key identifier: 5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/EEC2740A08A811EBB9370955C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:24:16 +0000
ROA not before: Sat 18 Oct 2025 22:31:41 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141236
IP address blocks: 103.157.0.0/23 maxlen: 23
103.157.0.0/24 maxlen: 24
103.157.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl
rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3859, serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6
Validity
Not Before: Oct 18 22:31:41 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a42ff0-3bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:00:32:bf:bf:de:e7:a1:5f:47:01:84:dc:
5c:e6:df:f7:41:41:05:51:4c:72:a0:8b:c7:6a:9d:
9b:24:c3:fb:8c:5b:73:e2:c8:da:e9:58:d5:98:b3:
7e:08:c9:a3:30:0b:b8:91:8b:55:72:a6:f9:f0:e2:
31:2e:7b:66:b8:49:6d:be:ae:28:0a:f7:f3:b4:f3:
53:ff:a2:04:bb:34:54:b5:6d:80:28:7c:70:f9:d9:
8d:86:8a:af:93:2b:42:7f:c0:ec:90:a3:cd:53:57:
6c:54:95:d1:aa:ab:11:5d:1e:f6:db:e7:a2:e7:1c:
90:e5:dc:46:17:f3:05:46:c5:d0:c8:3d:b4:75:dd:
95:db:be:d3:55:e9:0b:9f:f0:ad:8a:ba:03:51:36:
2e:22:b7:57:9f:17:81:5c:3a:9f:03:9f:a2:fe:79:
b9:c5:92:d1:85:5d:87:e5:51:fb:4d:34:66:13:eb:
5a:9c:d7:06:c9:ec:b4:dc:7c:5d:d1:9c:93:8d:af:
e2:3a:80:d3:dd:f0:b2:0c:3c:de:a0:f6:95:30:93:
55:e5:47:b2:be:41:d3:fa:a6:dd:72:0c:1e:34:40:
3e:2d:fe:1b:92:fe:bd:07:34:33:69:34:76:51:ae:
76:05:52:a6:62:68:6d:91:3e:15:1d:be:52:bd:9e:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F6:43:3E:8B:18:34:60:F8:E8:7C:74:32:39:9F:E4:F4:9B:C6:1E
X509v3 Authority Key Identifier:
keyid:5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/EEC2740A08A811EBB9370955C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.157.0.0/23
Signature Algorithm: sha256WithRSAEncryption
20:e7:11:45:ae:3e:7d:01:55:1f:ed:92:ba:fc:2a:41:0e:57:
4f:cd:9b:f3:a5:69:de:6d:33:2d:3b:87:07:34:db:cd:e3:91:
e5:8e:c4:2c:a7:25:2b:65:fb:5f:e3:fe:c7:62:f2:c1:9c:64:
28:3a:85:25:2d:84:b2:07:e5:c6:c6:c2:f3:3e:50:ed:c5:f5:
3f:fe:36:3c:bb:cf:ce:6d:93:c5:82:c0:67:81:b0:2f:c3:27:
e7:1a:07:1c:85:43:91:3c:8d:67:25:aa:8e:0b:e1:b2:49:e9:
74:a4:a3:9f:82:cb:a7:cb:28:93:4e:f7:6b:67:d7:f0:4f:81:
64:96:37:51:b7:cc:83:de:dd:ee:d2:a7:11:e6:2c:60:6f:ca:
2e:c8:00:69:c1:0e:fe:d9:0a:67:45:8d:a2:ce:f0:b0:8e:82:
e5:5d:a9:45:cc:94:60:60:d2:98:1c:7e:64:27:7e:42:bb:9e:
e1:c7:b1:ba:8f:6f:91:64:2c:8d:19:cf:c9:b9:af:63:98:80:
7e:28:65:8f:6e:8d:1b:51:99:32:a7:39:6c:f4:f2:db:e2:62:
a4:09:6c:ac:8d:c7:cd:2c:87:32:f0:b1:b9:1a:82:af:91:0a:
b4:f9:59:00:38:f7:a8:e1:bc:cf:d2:52:d4:0f:e4:cd:8a:69:
57:8a:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:17 2026 by rpki-client