
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/F1A54AC47A5611EB876D281FC4F9AE02.roa
File: F1A54AC47A5611EB876D281FC4F9AE02.roa (raw, json)
Hash identifier: k0ZucBj+etuvwgMyyarMxzRHSJzy5ua857nN2Fqt8Kw=
Subject key identifier: 7E:9F:88:B0:2E:B0:0A:32:6C:AF:FB:8A:12:92:06:C4:2B:69:73:C6
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 095A
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/F1A54AC47A5611EB876D281FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:02:58 +0000
ROA not before: Mon 04 Aug 2025 21:01:44 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132825
IP address blocks: 103.152.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Validity
Not Before: Aug 4 21:01:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a47142-77a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:0c:5a:e3:43:c2:9d:4f:10:d3:08:a3:9b:
89:08:39:8b:65:8c:44:6f:54:92:98:80:9e:5f:fa:
27:7a:2c:18:f1:a4:76:5c:e3:c7:5b:52:5d:c3:9c:
f9:ee:3a:99:68:bc:32:3b:40:e6:3e:e7:fe:89:df:
23:56:5b:41:88:7d:50:7e:06:f9:81:cc:d0:5b:83:
25:e6:c2:fe:c7:3a:22:ad:5c:48:ed:eb:65:51:61:
64:26:6c:2f:13:4c:ee:d8:27:88:e0:ff:f7:8e:d5:
ca:a2:a3:0e:ff:c1:65:e2:e3:05:e8:81:f6:94:ff:
7a:4a:88:65:33:91:98:2b:cc:2f:fb:65:c9:bb:05:
eb:67:fc:24:b4:7a:d1:61:1b:e0:c8:12:19:9c:04:
aa:fd:a8:8c:17:da:5c:9d:9d:2f:79:3e:29:8e:a1:
a2:45:5a:89:4a:15:7d:08:ed:a5:7a:04:eb:8b:86:
b6:c2:f5:1c:37:65:a6:46:ff:d4:10:ec:7a:e9:24:
26:ce:5f:00:fe:93:b9:76:a8:a4:f4:36:3e:0e:6f:
ce:68:10:0b:62:64:fa:e3:52:db:ea:1d:e7:de:d4:
99:6f:be:8d:2a:0a:10:a4:3a:6a:c0:ef:66:7c:92:
11:ad:fd:09:0b:d0:31:62:4d:6d:d0:69:f5:b5:42:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9F:88:B0:2E:B0:0A:32:6C:AF:FB:8A:12:92:06:C4:2B:69:73:C6
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/F1A54AC47A5611EB876D281FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.170.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:28:4b:4c:bc:3d:54:1f:56:2d:e9:ba:7b:5f:05:c7:f4:22:
89:c0:19:e1:83:96:39:98:d8:11:e2:ad:7c:c6:ff:66:65:31:
cd:62:d0:6a:42:9f:e6:f3:d0:5e:ed:9a:73:04:13:71:15:f7:
91:9e:f6:d8:0d:ed:50:40:39:18:a8:35:78:62:5e:a0:95:d8:
44:a6:70:de:d1:0f:27:0d:1c:33:9e:d8:02:da:c5:c5:e6:20:
61:80:61:cb:18:72:6e:39:69:d6:64:6f:e6:b6:8e:b6:a9:ee:
53:57:99:02:12:8b:c2:76:e1:88:68:31:92:8c:23:d1:3e:c7:
0f:68:d5:84:1f:fc:5d:dc:87:2f:9a:af:1f:37:35:b4:39:19:
d5:74:66:be:4f:d5:74:6a:81:74:b0:c3:01:2c:09:af:50:10:
e0:4a:a4:4c:e5:3d:d7:56:eb:fe:6f:7b:5f:f7:da:93:d2:c7:
a2:4c:14:df:ec:88:a2:4c:55:5e:65:54:47:85:d0:94:83:48:
ab:49:a0:11:95:ef:00:d2:bc:63:41:a7:6e:4e:6e:4b:90:14:
70:38:84:93:70:7b:5a:ec:e8:60:4a:6d:f4:4d:72:80:23:e1:
31:57:bb:2b:e5:6e:79:d3:68:79:54:6c:f1:78:34:87:f5:16:
ce:ba:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:20 2026 by rpki-client