
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/48005BEC3DEA11EBBCCD2322C4F9AE02.roa
File: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (raw, json)
Hash identifier: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=
Subject key identifier: AE:7F:CD:65:60:B1:77:FF:23:D9:A8:31:0C:F3:33:55:0A:39:F6:7C
Certificate issuer: /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial: 07A9
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/48005BEC3DEA11EBBCCD2322C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:10:35 +0000
ROA not before: Mon 12 Jan 2026 21:17:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 63526
IP address blocks: 103.159.128.0/23 maxlen: 23
103.159.128.0/24 maxlen: 24
103.159.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Validity
Not Before: Jan 12 21:17:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a448db-a94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:42:5d:79:06:5b:3c:1e:11:d1:d2:01:f2:
b2:8a:d7:bd:8d:7c:3a:9e:0f:a0:26:64:8b:07:b7:
84:26:2c:20:5c:28:f6:1c:e4:48:22:17:bc:52:47:
fe:77:e5:fd:c3:2a:15:1e:a8:17:d4:6a:eb:41:ec:
52:bb:dc:25:5f:dd:d1:48:4c:f6:f1:9e:2d:05:fe:
45:dc:a4:dd:68:a0:20:8e:9d:e3:d9:58:21:98:d7:
1c:54:3f:ab:58:9b:4c:cf:cb:87:f1:50:cb:fd:dd:
79:1b:55:f9:64:10:71:e2:ac:0b:8d:e6:75:86:83:
ba:fb:22:63:85:58:99:4b:03:d5:4e:ab:57:7e:8c:
b1:a9:b9:81:c7:18:5a:a9:52:b0:bd:c9:cc:c7:59:
05:0a:25:12:01:be:1f:1b:64:68:c2:1d:92:fc:64:
2c:3f:56:67:0b:3b:51:0f:d4:9e:fc:8b:47:ea:71:
a3:b5:cd:d3:85:de:6b:35:10:87:48:9e:9d:e5:76:
3d:1d:48:a9:90:86:33:ac:88:b7:8d:93:94:8c:78:
40:94:12:1d:a4:02:1b:a4:b8:e9:40:09:e5:42:2a:
57:3c:ec:15:5a:ac:3d:74:36:57:87:af:5f:67:0d:
1e:ef:ec:c8:29:23:85:05:ff:98:1f:8a:ff:86:f6:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:CD:65:60:B1:77:FF:23:D9:A8:31:0C:F3:33:55:0A:39:F6:7C
X509v3 Authority Key Identifier:
keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/48005BEC3DEA11EBBCCD2322C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.128.0/23
Signature Algorithm: sha256WithRSAEncryption
13:d3:d3:4e:45:31:82:87:bd:7e:de:6a:5c:b3:d6:38:4b:e2:
bb:30:84:9a:dc:69:f3:db:4a:f6:9b:08:45:e4:70:e1:7f:a5:
9f:41:f8:64:b9:57:2c:fa:d8:e3:59:88:2b:fc:e5:d7:55:a7:
3d:c9:9f:aa:6a:e0:c7:58:3c:e6:e0:58:eb:1b:c1:6a:81:1e:
41:c1:2b:c0:96:a5:11:e8:74:e5:7b:f0:32:b2:e4:e1:d1:de:
95:39:aa:2d:87:9b:75:a3:ae:a3:17:dd:40:ed:60:9d:67:1e:
de:03:32:d0:74:5a:26:0f:a5:a2:46:12:33:7a:67:cd:02:2e:
57:bf:4b:c4:ae:c0:7b:b7:20:67:99:fd:49:c7:cb:e2:7e:c4:
e3:18:7b:f3:4a:5f:3d:92:9a:0c:c7:bb:70:74:f8:9a:26:00:
f3:9f:71:88:5a:22:07:ee:b5:82:ea:6a:36:60:ca:23:dc:3d:
b0:2c:62:b0:38:ad:d3:bd:4c:b9:85:f7:7f:a2:f5:26:61:d5:
b8:30:36:f7:c9:f5:1f:54:40:b4:dd:32:84:38:b3:59:e0:77:
23:43:b5:91:23:6f:1e:80:dc:15:bf:46:a0:aa:4e:44:24:85:
d9:91:55:c0:95:32:02:92:0b:af:21:61:64:31:d2:f6:3e:30:
33:97:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:02 2026 by rpki-client