
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa
File: CD095756AF1211EAA486D140C4F9AE02.roa (raw, json)
Hash identifier: rzGnrSYD+B1BCgIFivsFn/5FX45lSaEE6RqJwhyF8JM=
Subject key identifier: 07:45:B2:E9:70:64:D4:C5:47:0D:26:D4:A8:AF:C0:C5:FF:76:5C:E1
Certificate issuer: /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Certificate serial: 0981
Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:20:38 +0000
ROA not before: Sat 16 Aug 2025 20:31:09 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139194
IP address blocks: 103.139.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Validity
Not Before: Aug 16 20:31:09 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42f16-a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:4d:bd:33:84:87:57:f1:39:87:e4:1b:64:
91:fb:67:1e:5a:77:4b:19:27:53:2f:55:18:5e:01:
f7:4d:a3:b6:a8:35:4e:81:93:4d:d2:7b:3e:8b:73:
ff:cc:2f:13:60:44:3b:ef:a7:2c:72:88:04:64:1d:
d3:37:41:4f:d5:c8:22:2f:9e:cc:e6:4d:33:35:44:
51:c1:4d:bd:d4:7f:d9:73:29:b7:10:04:f6:d8:e9:
44:0b:3a:10:37:a8:d9:d7:bf:47:68:f3:fe:71:67:
e2:e5:cd:fb:2e:93:71:0a:a8:19:e1:9a:35:ec:d8:
9f:1b:2a:91:ab:c9:54:18:f4:ad:50:1f:f4:42:38:
17:2a:83:e6:7d:a6:17:d1:73:3e:a9:e2:13:aa:a7:
b1:fd:c5:2e:04:c3:8b:4f:a8:be:18:ac:ca:d3:e6:
92:ef:55:75:ce:a0:f6:2a:3c:86:ef:39:af:03:63:
6f:c2:e6:de:90:46:7d:57:4d:7e:3d:6d:e4:4d:45:
5d:29:a9:b7:44:47:31:cf:e1:8f:a4:95:19:c8:42:
50:8d:67:27:e4:f1:ce:62:7a:9e:e8:d2:b1:83:24:
41:90:9a:d5:a3:38:01:51:cf:f6:e9:d2:0b:a4:dc:
cb:79:6a:13:ec:9f:df:02:6a:d7:2b:c9:58:4b:08:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:B2:E9:70:64:D4:C5:47:0D:26:D4:A8:AF:C0:C5:FF:76:5C:E1
X509v3 Authority Key Identifier:
keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.151.0/24
Signature Algorithm: sha256WithRSAEncryption
47:02:31:05:89:0d:7d:58:e2:c2:b0:76:a1:b1:ab:39:f6:8b:
f4:e9:9d:72:6e:7e:17:97:76:b9:0f:e4:d4:e8:56:cd:28:ef:
5d:4f:4d:43:d6:b2:96:da:97:77:3c:ff:27:12:b3:19:13:01:
b7:2c:e4:60:f6:52:02:6d:8e:4a:9e:0e:97:73:4e:8c:de:0d:
19:7e:6a:03:0b:a0:a3:b4:4f:d7:a9:38:dc:7a:92:17:4c:5f:
c2:fb:b1:ce:d8:6f:32:43:7c:47:e8:af:40:06:ef:4b:14:f8:
6f:fb:27:6e:43:b2:6d:0a:8d:e2:12:b5:e4:85:92:fd:74:c6:
e4:46:34:f2:7b:83:41:ff:98:18:25:61:c8:23:c1:db:5a:3a:
6d:b4:99:23:77:76:3c:61:1d:67:e0:1e:c8:5d:8d:d2:af:fe:
1d:2e:25:4f:19:f4:5c:fc:02:48:1f:a1:74:d2:21:1c:16:b7:
e5:fb:8b:6b:e9:ee:3a:0e:88:5a:b6:c2:f9:7c:80:64:e5:06:
ab:c4:90:ce:e1:1a:ec:4b:fa:88:ba:d1:98:61:da:15:d4:80:
aa:c3:aa:19:39:99:64:4c:27:2d:52:0b:3f:08:6b:6c:e7:21:
ae:0f:52:a9:e6:02:89:03:5d:0f:3c:09:97:35:f5:58:fb:21:
aa:6f:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:37 2026 by rpki-client