
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/371ADD3E9C9811EDA6AEF053C4F9AE02.roa
File: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (raw, json)
Hash identifier: ZDaQsYTQonQRSy58mGR7Kcfg4nWAO+ekMAlPoJ+tMyE=
Subject key identifier: D5:B8:CC:51:4F:96:4F:E8:DC:3E:96:CB:A8:E5:3B:59:13:C6:62:B7
Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Certificate serial: 0A16
Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/371ADD3E9C9811EDA6AEF053C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:49:24 +0000
ROA not before: Fri 30 May 2025 20:57:38 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137385
IP address blocks: 103.151.30.0/23 maxlen: 23
103.151.30.0/24 maxlen: 24
103.151.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2582 (0xa16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195
Validity
Not Before: May 30 20:57:38 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a427c4-6475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:a4:77:64:ef:55:07:2e:3a:b5:4c:2b:6c:
e1:4a:07:73:b7:6b:4c:a0:25:52:f2:88:8a:f2:eb:
42:ef:9a:cf:5a:61:41:9e:22:5a:d0:ca:4e:70:5e:
2c:35:40:82:2c:51:8a:b4:26:08:d8:05:94:02:4b:
f5:85:99:f7:bc:cf:fb:ca:d8:fc:57:66:2c:ea:d6:
14:b2:32:28:db:02:94:c3:ed:dd:29:ff:72:c7:2a:
fa:97:fb:72:1e:e9:8a:34:d7:fd:01:80:c5:44:a3:
31:12:eb:60:1f:19:09:f1:d6:af:29:17:96:11:ff:
8d:e8:25:a6:e6:fa:89:a2:e7:c5:c7:f6:9e:c0:03:
31:22:78:bb:1c:b1:9b:2a:2c:bd:ee:7e:9f:45:07:
6a:35:88:70:cb:27:e7:4c:f7:73:70:03:3a:6d:37:
94:4f:54:1d:0c:7f:67:a6:44:bc:67:fa:3c:d2:0d:
8d:fd:fb:51:61:ca:18:30:8f:c4:c0:70:0b:03:e8:
a7:f6:02:4c:dd:d9:01:66:57:7e:84:62:f9:57:99:
9c:f7:32:6a:82:01:fa:6d:4d:4e:ad:3e:65:a2:b4:
ba:f1:d8:f2:a1:aa:ad:67:04:98:63:da:21:e5:96:
d6:36:06:89:c0:e2:7f:3c:18:37:54:d0:0f:b3:0e:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:CC:51:4F:96:4F:E8:DC:3E:96:CB:A8:E5:3B:59:13:C6:62:B7
X509v3 Authority Key Identifier:
keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/371ADD3E9C9811EDA6AEF053C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.30.0/23
Signature Algorithm: sha256WithRSAEncryption
14:19:14:6f:cf:1d:a0:44:22:bb:ab:26:37:4d:1a:48:39:76:
19:8a:23:22:cf:dc:6e:38:f4:fa:40:94:c3:4c:a9:e5:0a:77:
80:07:f9:55:7b:bb:73:e1:9c:63:9a:06:83:f9:5e:7d:f6:cd:
3f:aa:ed:f1:d3:db:70:96:83:f7:83:e8:ca:c9:30:65:8d:00:
80:fe:2d:b4:09:b6:a8:e0:84:de:fb:c0:4c:12:be:5c:39:3a:
c9:2c:e0:4b:e5:77:54:3f:a1:b0:ae:e2:03:fb:f8:d9:fd:67:
b2:c8:44:d3:fb:a0:7d:ce:a7:75:53:6f:8d:5b:30:69:73:bb:
ca:bb:fd:85:e2:b0:f9:84:e6:90:e7:56:61:4e:f4:1b:62:47:
09:26:55:41:db:62:45:9d:4f:99:1f:b2:45:01:61:66:eb:da:
5f:30:3d:21:05:f5:cd:47:b4:44:84:9c:34:c3:7f:69:e6:7c:
aa:1f:03:e8:82:93:e8:c2:8a:44:93:04:c7:ed:07:cd:b1:1e:
4f:24:75:2e:d0:90:66:3a:06:d9:1f:41:68:0c:8e:88:ca:f2:
7b:f4:de:e3:a2:5f:41:c0:50:05:79:b6:8f:04:d7:9d:28:8d:
87:22:81:52:5f:c4:e7:22:66:ee:d6:31:42:6d:9c:ab:a2:08:
85:0a:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:22 2026 by rpki-client