
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa
File: E2E21364C4F811EAB8D31113C4F9AE02.roa (raw, json)
Hash identifier: 9iL3rgMf4vh9lsgcWbb8FKQC+wyReC1nKI6xvJ+GiO0=
Subject key identifier: 70:0C:A2:E9:27:D4:4B:DD:3A:FE:5E:50:D8:4C:17:7B:50:80:EC:70
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 095E
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:03:02 +0000
ROA not before: Mon 04 Aug 2025 21:01:48 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 138538
IP address blocks: 103.152.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Validity
Not Before: Aug 4 21:01:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a47146-aa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:27:b2:4e:e3:a0:c8:ba:17:bb:5d:49:f1:
45:e0:13:5c:06:2d:e8:6b:a3:84:fe:c1:9a:bb:45:
e0:5e:64:87:07:93:df:d8:17:a7:2a:e6:87:70:23:
91:9b:f3:9f:27:c5:05:1a:58:0a:94:0d:0c:91:92:
77:57:c5:b2:ea:b3:5c:8a:b4:c6:9e:e4:5e:da:6a:
ff:b0:89:76:bc:5e:c3:ee:d0:3f:95:2a:5c:b8:7a:
01:3f:ab:4f:87:38:b3:0f:46:45:7a:0a:31:bf:1c:
d6:51:56:3e:a0:6f:70:51:cf:9f:1b:a7:a2:d7:87:
dc:1f:08:7d:52:09:25:f4:f7:28:5c:22:e2:78:c9:
62:f3:eb:9e:e1:be:2f:ba:01:fd:90:2f:bd:44:bf:
07:09:36:42:02:ab:8c:3d:6a:34:b1:c2:03:21:84:
3a:70:cf:19:ba:11:24:c0:7d:dc:60:39:d5:98:bb:
6d:75:44:9f:9b:b1:4e:31:c7:c6:b3:c0:e4:d7:1a:
35:3f:77:0b:a3:32:aa:29:69:19:ec:1b:cd:89:99:
10:11:6f:e9:67:96:6a:44:46:fb:4d:a2:0e:6c:05:
d0:ea:75:b3:0d:a7:a3:94:cb:6d:46:c4:cd:b9:ae:
74:17:eb:c3:34:e4:32:aa:cc:82:d6:23:77:7a:01:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0C:A2:E9:27:D4:4B:DD:3A:FE:5E:50:D8:4C:17:7B:50:80:EC:70
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.170.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a8:d2:97:dd:b6:93:e0:53:2b:46:d0:2d:7f:8f:2e:b6:66:
0f:56:f9:43:71:08:78:c3:f3:67:a0:ff:64:84:c4:fa:7b:27:
35:67:81:20:c2:e8:09:b8:0b:ef:fb:1d:f0:32:42:2b:65:92:
43:91:88:5b:de:65:72:bd:60:9e:35:fc:79:18:a7:b0:e3:a0:
55:71:be:78:ca:99:1f:78:51:27:64:0a:7b:fc:93:12:51:e7:
7b:e5:5a:8b:16:48:e3:2d:11:9f:a1:fb:28:55:b7:55:dc:20:
24:b0:93:b1:ae:4a:79:8f:16:fd:c9:85:c1:e3:a6:03:8e:c0:
32:7b:b5:ae:63:20:67:d7:a9:af:ce:8e:f6:b3:61:cc:1a:96:
fb:bd:01:02:90:69:40:1d:f8:35:a6:f8:4d:d5:68:e5:d7:24:
88:84:14:8c:04:35:af:c0:99:09:ac:c9:b0:68:b1:7c:b8:20:
52:2f:f1:4f:2b:be:9d:9a:20:fe:36:96:6e:92:dd:fc:a2:54:
b0:a3:4d:e9:fc:a9:47:34:49:81:04:98:53:1d:f8:99:38:5e:
6a:36:0b:39:95:64:09:a1:8a:85:5c:96:da:b3:4f:64:7d:6a:
90:c5:5c:4e:0c:9b:f1:8d:74:d7:0f:eb:d8:5f:b4:71:13:f4:
93:d0:13:24
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1
QTUwMjcwRTMwHhcNMjUwODA0MjEwMTQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzE0Ni1hYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsiUnsk7joMi6F7tdSfFF4BNcBi3oa6OE/sGau0XgXmSHB5Pf2BenKuaHcCOR
m/OfJ8UFGlgKlA0MkZJ3V8Wy6rNcirTGnuRe2mr/sIl2vF7D7tA/lSpcuHoBP6tP
hzizD0ZFegoxvxzWUVY+oG9wUc+fG6ei14fcHwh9Ugkl9PcoXCLieMli8+ue4b4v
ugH9kC+9RL8HCTZCAquMPWo0scIDIYQ6cM8ZuhEkwH3cYDnVmLttdUSfm7FOMcfG
s8Dk1xo1P3cLozKqKWkZ7BvNiZkQEW/pZ5ZqREb7TaIObAXQ6nWzDaejlMttRsTN
ua50F+vDNOQyqsyC1iN3egH1vwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHAMoukn
1EvdOv5eUNhMF3tQgOxwMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5
RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUJGRDkvNEFFODA0MUVCOUQ3MTFFQTlDRjUxRTVGQzRGOUFFMDIvRTJFMjEzNjRD
NEY4MTFFQUI4RDMxMTEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5iqMA0GCSqGSIb3DQEBCwUAA4IBAQARqNKX3baT4FMrRtAtf48u
tmYPVvlDcQh4w/NnoP9khMT6eyc1Z4EgwugJuAvv+x3wMkIrZZJDkYhb3mVyvWCe
Nfx5GKew46BVcb54ypkfeFEnZAp7/JMSUed75VqLFkjjLRGfofsoVbdV3CAksJOx
rkp5jxb9yYXB46YDjsAye7WuYyBn16mvzo72s2HMGpb7vQECkGlAHfg1pvhN1Wjl
1ySIhBSMBDWvwJkJrMmwaLF8uCBSL/FPK76dmiD+NpZukt38olSwo03p/KlHNEmB
BJhTHfiZOF5qNgs5lWQJoYqFXJbas09kfWqQxVxODJvxjXTXD+vYX7RxE/ST0BMk
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:44 2026 by rpki-client