
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa
File: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (raw, json)
Hash identifier: TtvgX0HunQnxwePu7sD+x5FU7eZoqly/IQVqoa8h86s=
Subject key identifier: 86:68:2B:96:48:5C:C2:E8:07:BD:DF:5E:7C:4E:BD:7C:F9:C6:43:49
Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Certificate serial: 09E9
Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:49:55 +0000
ROA not before: Mon 16 Jun 2025 20:06:13 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140644
IP address blocks: 103.151.104.0/23 maxlen: 23
103.151.104.0/24 maxlen: 24
103.151.105.0/24 maxlen: 24
2001:df3:bb80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Validity
Not Before: Jun 16 20:06:13 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a427e3-ca09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:f5:3f:c4:48:c7:24:03:c1:22:dc:e4:7d:
44:49:45:b3:41:cf:9c:97:c1:cb:89:75:43:a3:a7:
70:78:68:b4:ba:19:54:a7:eb:2f:68:0e:f9:15:77:
55:34:36:30:06:24:f5:8f:b0:c9:8b:6a:47:0e:6c:
fc:ef:84:4d:25:86:c7:f6:7b:46:d1:82:12:cd:fa:
35:31:30:0d:b3:85:8b:dd:77:5a:eb:d8:1f:73:a3:
bb:df:7d:38:5a:a1:35:c2:2d:41:5a:82:fd:87:9a:
fe:b7:f8:e4:62:ab:81:bf:c8:d6:1b:f8:80:6d:18:
6d:6a:ac:52:0a:1c:c7:e6:f2:6a:f0:77:03:3b:00:
24:1c:49:c7:a8:74:47:fd:70:04:65:49:cb:96:e3:
72:52:46:af:5d:ae:bf:e5:f1:5d:a4:7c:96:a4:3a:
dc:56:8e:3a:7d:8b:ae:25:62:48:0c:20:8c:65:a8:
a4:da:f0:ed:55:ec:d4:b0:ee:0d:d3:46:52:b4:26:
1b:3c:52:e7:31:89:ee:05:a7:3e:f2:91:cc:45:93:
cd:01:74:f6:15:94:f3:81:79:a8:f7:ed:55:e5:88:
1b:ee:d6:ed:ef:63:62:ad:f7:db:83:7d:fd:ea:49:
01:5d:28:76:c9:e9:57:46:95:3d:0f:73:19:b7:af:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:2B:96:48:5C:C2:E8:07:BD:DF:5E:7C:4E:BD:7C:F9:C6:43:49
X509v3 Authority Key Identifier:
keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.104.0/23
IPv6:
2001:df3:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
1d:00:f3:fd:06:e5:26:24:ce:46:52:df:96:ac:17:26:ba:15:
31:9a:6a:fc:69:50:91:61:53:39:87:20:ff:7c:19:02:ec:78:
81:c5:5e:82:40:d6:d1:d9:d6:8c:74:7f:2e:f6:de:34:29:b6:
a2:80:09:27:f6:94:c6:24:39:0f:cf:c6:4a:df:85:09:4b:58:
7f:1b:b4:a7:c1:c4:19:ab:38:02:6d:c3:d7:5e:44:07:83:e0:
4d:d4:a1:90:a9:9e:2b:8a:40:84:12:66:8e:e7:25:22:eb:92:
07:73:60:f5:db:95:4c:c3:75:dd:8f:ce:4f:cf:be:dd:3d:a6:
1c:b5:a8:c4:b2:14:fb:f4:c1:c2:39:54:52:d0:d9:28:f4:ad:
8a:ee:1e:85:c8:0f:ab:45:16:87:c2:dc:6d:fc:7d:6c:b7:4c:
41:ef:25:3d:26:33:83:25:72:37:8b:66:3f:70:f1:a6:e5:e5:
f2:87:88:be:15:41:82:2a:11:6a:b9:e2:38:6d:3f:3e:d0:2b:
52:9d:4b:ea:8a:92:dd:47:a8:3f:e9:07:7a:0a:ed:73:bc:0d:
e1:7d:ea:43:91:ff:57:ab:1e:ff:d0:45:b6:65:34:72:64:eb:
b1:99:1a:3b:0f:b8:81:e8:b8:89:ad:55:ed:36:ec:79:fe:04:
b7:5b:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:14 2026 by rpki-client