
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5B69CE3A474A11EF8624EE6DC4F9AE02.roa
File: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (raw, json)
Hash identifier: V4WCKZt7Bk1mQsPfTsZBXrVnrbvkth09Cs8cneRogjA=
Subject key identifier: 7E:A1:E0:9E:65:6C:3B:65:6A:3B:5E:3F:AB:D6:CE:A2:35:78:55:03
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 0316
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5B69CE3A474A11EF8624EE6DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:04:47 +0000
ROA not before: Fri 09 May 2025 02:00:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149766
IP address blocks: 103.185.146.0/23 maxlen: 23
103.185.146.0/24 maxlen: 24
103.185.147.0/24 maxlen: 24
2401:93e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Validity
Not Before: May 9 02:00:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40f3e-189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:fe:7e:ce:62:4a:67:30:9a:74:fd:83:4c:
12:86:51:99:52:33:77:e2:e0:98:46:79:16:ea:20:
d6:81:8b:dd:4d:34:9c:97:67:2e:fd:df:84:d7:4d:
20:53:c4:93:5c:49:25:97:2e:90:13:71:7a:70:f0:
20:9a:72:a2:4f:21:e5:be:72:26:dc:31:c6:67:78:
fb:36:8b:51:fe:2b:93:92:1b:df:20:08:cf:a8:f9:
52:a1:b2:16:a3:e7:5e:5f:50:92:31:f4:58:5b:8a:
0f:6a:24:aa:c0:fb:34:7d:09:fa:7f:99:49:99:91:
96:81:f1:54:49:82:e5:fc:aa:b1:2b:ff:4d:37:e8:
bf:75:ca:e6:bf:68:8f:f0:5c:28:3c:3c:f9:4e:5d:
07:01:3a:b9:7e:22:90:d0:ca:b5:4c:d3:ec:2e:fe:
1d:ca:5a:e8:55:4d:9b:e7:31:b2:9b:1d:e1:a7:dd:
8f:af:42:bb:53:2c:d2:87:f1:71:ea:8e:01:df:1a:
8a:39:83:75:c6:b4:cc:04:27:3c:b3:a4:aa:81:2a:
0b:a1:a4:0a:8f:46:b5:c4:98:e6:14:a5:bd:76:76:
23:f9:91:60:72:34:e8:ab:1f:44:04:f5:6c:2d:b0:
2c:cc:e6:fe:fd:02:f5:15:26:af:d2:9a:a5:77:d2:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:E0:9E:65:6C:3B:65:6A:3B:5E:3F:AB:D6:CE:A2:35:78:55:03
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5B69CE3A474A11EF8624EE6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.185.146.0/23
IPv6:
2401:93e0::/32
Signature Algorithm: sha256WithRSAEncryption
27:5c:2b:5d:19:16:c6:be:f2:dc:6a:5f:1b:33:58:15:ca:2d:
9a:0e:35:3c:e3:73:27:be:44:bb:ab:6b:9e:19:16:dd:86:5a:
f4:2a:42:da:ce:27:7b:24:08:7c:46:72:37:f0:0e:01:b3:71:
dd:c0:a7:35:e8:9a:26:b8:63:f9:17:72:61:75:41:d4:7f:41:
39:33:4e:14:bf:58:29:3b:08:e4:a9:32:60:8a:c4:c3:d1:12:
97:40:c9:10:7d:a6:32:3d:05:2c:f8:38:84:e0:7f:25:5a:ad:
29:51:00:08:00:d1:6e:11:81:86:6d:83:9b:76:b3:e6:d2:72:
fb:ad:fc:74:bc:8c:dc:92:e4:25:cd:4c:a2:16:db:a3:cc:47:
22:4b:d6:21:09:e7:e1:28:d7:cf:fa:d5:fa:fc:dc:9f:0e:7f:
b5:88:78:66:04:7d:df:76:b2:96:d0:e8:23:b0:da:b4:83:c2:
97:3f:f0:a4:27:e5:a2:ab:3e:7f:9d:cb:71:e9:f8:1d:55:d0:
6a:23:56:bb:12:76:a5:9a:8d:26:b7:40:f5:40:4a:9b:f0:bd:
31:f7:ef:14:3f:d8:08:b7:b2:32:62:00:a9:3c:86:2b:07:c1:
99:c6:ae:70:e8:c2:21:76:d0:b0:1d:70:cf:a4:e8:d4:d8:dd:
63:c2:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:10 2026 by rpki-client