
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/915E51B8F3BE11ED8B9B1450C4F9AE02.roa
File: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (raw, json)
Hash identifier: G3oMGlKbPp4EzU03SrRYusoBeGFn1A26h8n+e60pf4g=
Subject key identifier: AC:1F:F3:EC:90:5B:B2:38:3A:6D:F8:B9:F3:8E:16:E7:1F:19:A2:FF
Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Certificate serial: 30F9
Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/915E51B8F3BE11ED8B9B1450C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:40:35 +0000
ROA not before: Thu 18 Sep 2025 15:52:24 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 42
IP address blocks: 45.112.180.0/22 maxlen: 24
103.52.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12537 (0x30f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Validity
Not Before: Sep 18 15:52:24 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47a13-b191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:46:35:5a:06:42:d5:14:0b:96:bf:f0:d2:
57:a3:05:31:e7:96:fa:32:e0:17:1f:30:29:c9:e3:
9d:8b:30:20:bc:8f:02:75:f4:1e:68:20:04:8a:13:
6b:41:90:f5:cf:62:24:49:a4:bf:73:e3:44:73:5d:
37:2d:99:09:08:1f:b6:6c:4a:a0:15:74:85:9b:18:
88:ad:6c:b9:f9:13:1f:5f:61:cd:01:21:28:23:46:
cd:f6:15:6a:b1:db:c3:ac:5f:50:60:da:8c:c0:f8:
74:3b:81:04:1c:9e:cc:87:a1:fd:ec:24:18:aa:f7:
8a:62:6f:f4:6f:a6:6c:99:c1:12:73:a1:e8:6f:a1:
d0:aa:52:b5:3b:d3:e4:a1:fe:9b:33:23:9a:f1:94:
04:23:bf:63:c8:de:e7:e5:a9:2f:6d:d1:9f:38:72:
25:61:9b:46:ca:99:3b:0a:c8:8b:b8:85:57:ca:b4:
05:8e:bd:5d:f6:aa:4f:85:87:69:43:f2:5b:c3:31:
8d:0e:ce:f0:4d:cd:f2:40:1d:ec:ee:24:68:d0:b8:
30:66:4b:0e:90:4f:e4:4b:85:79:b5:9b:3c:50:45:
dc:43:2a:fe:9d:27:1f:41:e3:ab:98:d9:10:b0:5f:
42:64:c9:20:53:7f:17:cf:18:9b:66:e3:9f:f4:74:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:F3:EC:90:5B:B2:38:3A:6D:F8:B9:F3:8E:16:E7:1F:19:A2:FF
X509v3 Authority Key Identifier:
keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/915E51B8F3BE11ED8B9B1450C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.180.0/22
103.52.24.0/22
Signature Algorithm: sha256WithRSAEncryption
98:03:77:e3:3e:10:f7:4e:aa:0a:c7:b7:ae:d9:2c:40:d8:e3:
8e:3d:95:0b:91:a5:34:42:62:28:8e:71:67:5c:69:25:21:74:
90:ec:ea:b9:cd:4a:66:7e:75:dc:79:9e:80:35:a5:58:fb:46:
45:64:33:f4:f1:7e:31:db:9a:65:6c:0f:d8:11:1f:f0:13:36:
9f:98:6b:a0:55:6c:ea:db:56:0e:86:b6:d2:57:ea:ac:29:80:
df:b2:dd:78:46:2a:f9:07:3f:6e:98:0b:47:32:26:a6:62:f1:
6e:e3:5f:94:7d:b9:e6:81:77:18:f2:44:9a:95:b9:ce:c1:b1:
88:67:df:71:a5:1e:f9:6c:06:40:ca:4e:2d:c4:2d:b6:e1:06:
9f:d2:f4:cf:a2:96:b0:6a:cc:4f:75:ae:8c:0f:31:cb:af:34:
e5:57:9a:33:79:de:ae:f5:cd:93:7a:78:11:30:3c:c3:3d:e4:
bb:44:5e:84:c1:e1:58:70:19:39:e1:f3:46:ca:48:79:14:cf:
b7:fb:8a:ba:bf:52:57:cd:35:e1:34:0c:bd:92:56:1e:c8:0c:
ef:57:f6:a1:cd:3c:a5:66:78:14:28:d1:52:e4:7f:c2:59:1e:
2b:74:68:5c:f6:e7:da:8c:74:41:be:e0:37:43:46:0f:e6:bd:
56:06:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:19 2026 by rpki-client