
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/52F59E403B4111ECABFD2186C4F9AE02.roa
File: 52F59E403B4111ECABFD2186C4F9AE02.roa (raw, json)
Hash identifier: U/L6LuLzhb/DB4d27TQqbSW5sIjM4fJiXb0/DoextI8=
Subject key identifier: 45:23:45:EA:A3:94:8E:42:5F:B4:AF:86:1B:A1:C0:4B:56:30:ED:F7
Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial: 0B33
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/52F59E403B4111ECABFD2186C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:27:44 +0000
ROA not before: Sun 30 Mar 2025 19:49:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140226
IP address blocks: 103.148.216.0/23 maxlen: 23
103.148.216.0/24 maxlen: 24
103.148.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Validity
Not Before: Mar 30 19:49:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40690-a934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:b8:7a:01:44:c1:6e:b3:88:9e:c7:d1:85:
ab:31:c0:28:0b:0e:f2:ac:ff:0b:49:6b:33:d2:93:
e6:4d:8f:32:cc:e1:f4:b1:9f:45:6a:00:a4:13:9a:
55:59:f3:34:c9:fd:18:cb:9f:a3:4e:ec:19:d2:7e:
61:14:ab:f2:87:b2:e4:ed:3f:e6:e7:b6:22:d3:c4:
cc:10:7c:03:6a:a8:51:76:3f:d8:f6:9e:e1:f8:17:
24:60:82:49:db:b3:3f:f3:d3:b1:67:6c:df:a9:5f:
f5:7e:90:82:61:75:10:61:77:5b:1b:26:e3:42:87:
a0:67:c5:cb:03:a1:af:79:2b:ba:6c:13:7f:50:9f:
f2:27:e4:f9:ad:e0:5b:52:b6:a8:20:b7:e0:8a:5d:
13:ce:c7:64:86:ba:54:88:d0:27:f6:2c:26:51:22:
17:dc:4e:4d:a5:0a:16:dc:10:aa:ec:b5:d4:ed:73:
0f:45:9b:24:f3:d6:b5:4d:72:87:c8:82:30:4c:98:
60:12:ef:59:ae:30:c7:fe:d6:b5:36:30:bf:9a:06:
8d:8e:2f:68:1d:8a:71:a3:a5:8e:f4:97:ec:9b:86:
6f:59:bf:35:5d:74:24:d6:dd:f9:a7:5a:6b:fa:a6:
ce:e3:06:0d:1d:f7:c5:42:da:e9:be:27:79:ee:c7:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:23:45:EA:A3:94:8E:42:5F:B4:AF:86:1B:A1:C0:4B:56:30:ED:F7
X509v3 Authority Key Identifier:
keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/52F59E403B4111ECABFD2186C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.216.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:b5:7a:ec:e6:a3:24:de:0c:d0:f9:84:f5:62:e1:c7:0f:17:
b8:01:e2:c2:71:5a:c9:9f:e8:ab:87:4c:71:d0:18:a5:17:56:
b5:1b:cb:e7:c6:e0:ad:77:4b:a9:2d:42:da:39:fe:92:dc:c6:
69:1f:ca:12:c4:4f:1b:17:57:c0:94:14:82:4a:d3:56:54:22:
2d:a2:03:99:df:c1:ef:d6:5a:25:cf:d8:50:90:62:9f:71:57:
4c:8a:d5:a8:f6:8f:96:5a:2a:32:d0:57:da:a0:4c:c6:ad:3e:
5e:6b:53:17:27:c5:9e:1f:ea:47:18:dc:ab:45:e3:cc:6c:64:
e3:65:f1:f6:29:1c:cd:9c:fe:a9:3c:67:13:38:8f:4f:72:f9:
6e:ca:50:ef:47:69:60:ce:de:19:2e:30:ea:23:38:c6:dd:33:
03:66:a4:a3:41:62:59:89:ee:0d:ec:2a:52:48:cb:96:fa:5c:
aa:28:8b:c9:3e:35:2f:a2:0e:04:20:cf:ba:da:00:98:d8:fd:
d5:09:81:8d:53:7e:cf:53:55:4f:ac:c1:04:eb:92:b6:23:bb:
60:56:fd:d8:6b:96:e2:d8:66:a4:ef:36:b1:9b:9b:2c:2d:50:
56:67:e4:03:64:49:96:56:37:94:cb:4b:e9:dc:8a:22:43:1b:
4c:c2:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:34 2026 by rpki-client