
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/C248DFA26DBB11EDB3635D28C4F9AE02.roa
File: C248DFA26DBB11EDB3635D28C4F9AE02.roa (raw, json)
Hash identifier: 2yyLpkc8MelbTeHRI5QTattRd9+fidXyksO5g4umYEk=
Subject key identifier: 7C:B3:BE:DF:FC:66:56:6A:9E:BF:5F:9B:7D:06:D4:DE:83:8A:6B:07
Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Certificate serial: 0268
Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/C248DFA26DBB11EDB3635D28C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:25:34 +0000
ROA not before: Thu 17 Apr 2025 02:08:10 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139030
IP address blocks: 103.138.174.0/23 maxlen: 23
103.138.174.0/24 maxlen: 24
103.138.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5BD4, serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Validity
Not Before: Apr 17 02:08:10 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e9ee-0075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:5d:e0:45:53:b4:98:36:bc:90:6d:7e:64:
d1:09:5d:7b:c1:f0:d2:57:4b:52:32:bd:1a:9b:1e:
be:8a:84:0b:18:61:56:c8:83:39:58:a5:de:99:b2:
09:10:80:61:38:d9:90:c9:3a:57:f1:c3:c1:26:60:
5e:c3:c3:e0:ff:48:25:0d:36:89:b9:83:6e:8e:12:
07:0b:d6:64:f0:41:59:07:89:b9:ef:cd:21:ff:1c:
db:4e:ba:1f:a1:b4:6c:01:7b:28:4e:8e:89:f2:4f:
d8:d3:df:ee:2e:cc:a6:7f:c7:80:93:1d:b6:d3:5d:
ba:4c:6b:42:a3:d8:00:58:43:41:e6:94:8d:01:a5:
53:f2:d6:b2:b9:9c:e6:48:93:b1:3b:2e:33:88:08:
39:72:50:ff:4f:ec:c7:b2:37:8b:b3:40:c5:a4:9b:
bb:4c:92:9c:35:75:55:1f:fd:a4:c2:e4:0d:c7:b9:
40:ba:c9:aa:ba:5e:96:e8:b5:82:89:9d:8f:a5:3c:
0a:5b:fb:bc:33:bb:c7:70:22:ae:47:98:2b:0d:0f:
41:76:2e:dc:4b:a4:df:b8:78:85:b5:98:f8:3e:e9:
5f:dd:dc:a3:6e:07:06:a5:44:3d:ef:6e:e6:46:7a:
1b:8a:df:11:ad:53:20:19:74:86:47:53:80:13:08:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B3:BE:DF:FC:66:56:6A:9E:BF:5F:9B:7D:06:D4:DE:83:8A:6B:07
X509v3 Authority Key Identifier:
keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/C248DFA26DBB11EDB3635D28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.174.0/23
Signature Algorithm: sha256WithRSAEncryption
38:68:5f:9c:44:70:d3:85:ba:c8:3e:b0:85:05:f9:ad:7f:a2:
b0:97:39:60:81:07:8c:1c:a6:78:d7:bd:13:42:18:68:a8:be:
6b:78:f2:cf:85:85:04:48:1c:ce:92:cc:09:ab:72:15:a9:25:
2b:18:34:95:da:d8:1a:a0:5c:2a:e3:d3:b5:dc:fe:fb:77:5d:
c0:fd:d3:40:5a:96:87:0c:e0:57:aa:6f:58:24:d7:ae:00:a0:
8a:58:5b:9e:aa:57:08:fd:ea:b5:fe:cc:88:95:2f:39:00:54:
e8:d8:98:ed:fb:2d:cf:bc:42:12:70:e0:ee:22:ff:e7:ef:6b:
1a:98:cb:cb:4a:6c:02:9c:da:a6:62:86:f3:d3:12:40:7b:e7:
00:b9:03:54:3e:5f:95:67:11:a0:b4:78:60:fc:d8:41:1c:65:
4a:43:c8:ff:1d:6c:e3:8b:8f:ce:91:d6:af:83:f0:26:b8:34:
f9:96:a7:3a:e3:89:c0:98:b5:4f:b2:68:a8:74:5d:27:01:2f:
1c:c3:78:cc:ab:18:90:79:e8:96:af:a8:b7:61:4f:90:94:d5:
56:5b:81:6d:de:20:80:80:f7:ab:4b:1c:e4:a6:d4:b3:3a:87:
f2:da:18:6d:9b:b6:29:99:81:1b:dc:12:c3:98:6c:43:40:28:
1c:b9:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:25 2026 by rpki-client