
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/541716E2B95411F0B8E2D868C4F9AE02.roa
File: 541716E2B95411F0B8E2D868C4F9AE02.roa (raw, json)
Hash identifier: 1nUtY951jqRrI+dTCVWXi0cSf76Zz6olI1+fh+4G7wY=
Subject key identifier: 99:22:3D:F1:12:7A:77:4E:E6:03:79:0C:29:44:B8:AE:C9:52:47:2C
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0C1E
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/541716E2B95411F0B8E2D868C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:48:29 +0000
ROA not before: Tue 02 Dec 2025 18:50:31 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 148996
IP address blocks: 103.25.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3102 (0xc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Dec 2 18:50:31 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a489fd-8b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:12:f2:1f:05:a5:ac:0f:83:fc:fa:1d:f0:
00:da:12:13:f1:ca:ac:3e:ef:a4:e2:90:0c:c3:59:
6c:fc:d9:87:9a:e0:1a:43:1e:8e:69:8e:a2:03:e1:
31:0d:6b:da:4a:27:a1:96:1b:67:4b:c2:5a:d9:8a:
28:f1:91:99:bf:88:5c:31:c2:1d:9e:60:ee:87:ec:
5e:0c:4b:28:36:ae:b4:a1:5f:23:8a:85:3b:57:31:
39:01:c6:7a:86:a0:13:e3:05:2a:a6:4e:d4:bd:36:
a7:26:b1:d2:69:9a:0c:ac:b9:fd:84:3c:c6:56:fc:
a4:c0:b3:28:dc:c5:17:e3:c8:86:95:25:f1:1f:c3:
d7:00:89:4c:a8:50:41:81:f5:fd:9d:d7:81:67:a6:
8c:4c:88:5d:29:b9:26:d4:5f:c4:2b:eb:61:b9:65:
11:61:be:f2:59:ea:99:a4:91:e2:c0:e6:39:10:ce:
a7:42:56:82:36:fb:6b:ed:5c:47:41:a0:84:1c:00:
91:12:4a:bc:3c:a7:51:99:71:06:46:f4:a7:af:35:
2f:fd:e6:ec:95:e3:c9:ce:5f:e6:07:bb:d9:a5:c5:
50:36:13:c8:4f:e2:d0:fd:75:05:61:76:04:da:66:
bd:bf:a8:8d:5e:9f:76:80:16:3a:2a:d0:36:94:fa:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:3D:F1:12:7A:77:4E:E6:03:79:0C:29:44:B8:AE:C9:52:47:2C
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/541716E2B95411F0B8E2D868C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.25.102.0/23
Signature Algorithm: sha256WithRSAEncryption
43:51:48:f9:33:ae:2a:11:64:ca:a6:5a:09:fc:a7:68:1d:de:
f3:0f:d6:e3:7d:2f:b1:8f:38:99:bb:76:11:79:3e:e3:41:de:
94:19:a9:f9:ee:0e:3a:16:f7:95:7e:b9:b6:84:21:f2:5e:be:
01:fd:f2:76:16:23:ac:0f:6c:4f:ba:1f:7d:7c:ed:2e:10:68:
db:c6:9c:18:cc:6c:e1:a4:c8:23:82:03:96:df:2f:ed:e8:36:
fd:e5:d3:bb:88:6f:45:e2:de:75:5c:f5:1b:c9:81:62:98:0a:
4d:f9:39:68:76:b2:17:9d:b5:43:43:cd:e8:4f:2e:90:b2:e1:
3e:02:78:11:d7:62:3a:be:0f:bb:1d:0f:2b:f7:bd:4c:0d:52:
f8:2a:5b:91:99:fa:86:58:10:4d:fe:79:96:58:94:d8:9a:3f:
3e:b7:da:f9:6b:56:ab:b2:36:25:84:2e:9f:df:6b:b3:ca:0b:
64:3c:43:99:59:a9:51:e3:75:ad:0f:4f:4b:e1:83:eb:25:d0:
c8:3a:a5:d3:8f:77:6d:5f:ce:5f:91:82:4b:29:d0:c1:43:83:
ba:df:ca:87:97:91:ba:08:c9:48:7f:b5:7a:37:91:3d:a7:dd:
48:ae:87:21:f2:ef:d6:87:f6:1e:b1:07:6c:d7:c9:26:5b:53:
33:ca:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:40 2026 by rpki-client