
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/B69F45F6480C11EAA7171874C4F9AE02.roa
File: B69F45F6480C11EAA7171874C4F9AE02.roa (raw, json)
Hash identifier: XeK4BYhVzYm1OX29Oaa1qRXjI9nO78044Xzo4EY3Hw8=
Subject key identifier: DA:2B:60:2D:EB:2C:EA:6A:40:0B:96:9C:69:78:CA:D4:8C:4E:5E:94
Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Certificate serial: 0B7C
Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/B69F45F6480C11EAA7171874C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:26:40 +0000
ROA not before: Sun 16 Mar 2025 19:39:07 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140080
IP address blocks: 103.148.52.0/23 maxlen: 23
103.148.52.0/24 maxlen: 24
103.148.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl
rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2940 (0xb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Validity
Not Before: Mar 16 19:39:07 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40650-add6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:05:3c:74:69:e1:e7:78:2e:e4:ec:ae:60:
34:f7:96:fd:dd:cc:df:18:af:7c:2f:bb:07:34:23:
ce:b3:5b:14:1d:ae:d2:c6:2d:19:2c:9e:96:05:a3:
77:f7:98:0a:7b:34:bc:4c:61:e0:27:c5:b4:4f:b2:
b0:d3:13:a0:47:58:ae:60:0d:db:4c:48:b3:c5:d5:
75:77:78:43:64:f0:16:c8:a4:70:c5:0c:9e:4b:40:
0f:16:cd:30:a9:12:4f:58:46:55:5b:f0:fd:76:bc:
41:b8:6a:3f:e9:cc:54:ae:68:ec:74:5b:10:ef:29:
e1:ab:8e:b6:19:ab:d9:2b:eb:40:23:0d:f1:ad:f6:
ea:a3:32:cf:d9:f1:9a:70:c7:dc:30:e4:64:ae:50:
30:37:60:46:d7:5b:f6:d4:d5:37:53:65:fe:12:0d:
54:34:3f:71:11:5e:65:16:2d:04:5e:2a:2a:13:54:
45:b8:32:d9:64:46:ba:df:7d:b1:20:77:38:7f:cc:
d6:52:2f:66:0b:9e:51:18:3b:83:3c:13:74:d6:c6:
1c:5e:c8:04:1b:c5:74:9a:93:30:cf:0e:1f:0b:b1:
9c:cf:0d:14:4e:91:be:f5:dd:40:bb:af:8b:ea:58:
19:d8:ca:db:bb:65:f4:0c:39:97:e8:46:b7:f7:4b:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:60:2D:EB:2C:EA:6A:40:0B:96:9C:69:78:CA:D4:8C:4E:5E:94
X509v3 Authority Key Identifier:
keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/B69F45F6480C11EAA7171874C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.52.0/23
Signature Algorithm: sha256WithRSAEncryption
48:8e:e6:d3:0d:a3:6c:f8:48:4f:ea:97:b5:a0:19:cf:62:57:
ce:9a:06:9c:14:9b:5c:47:b5:ef:7f:ea:df:32:27:a4:8e:d9:
c2:27:6c:16:f5:ad:ab:c6:ae:8a:54:30:a7:04:e8:f4:2e:dc:
61:8c:81:f7:a3:1f:3a:8f:76:bb:6b:5e:7a:81:c2:60:8f:0f:
63:e8:0f:29:cb:02:13:c4:13:00:fb:78:4d:81:68:c3:8a:ad:
24:f3:4f:a7:aa:42:3a:bc:c2:90:12:8b:99:91:48:c5:a1:4d:
2a:78:f3:1a:f0:07:3a:ba:5b:ac:61:6c:cb:0c:1f:63:93:56:
75:89:d5:13:55:fd:48:9e:05:47:0d:55:da:b0:a1:8d:72:89:
7d:4f:be:34:94:92:d8:e9:cc:f1:b3:4e:58:c6:66:96:b4:4d:
88:bc:33:f3:44:05:05:d3:85:fc:fb:9a:c9:d7:c6:8b:35:d5:
34:69:68:42:0f:49:e5:ef:92:33:34:49:6c:97:2b:1f:e5:fa:
d6:d5:a2:ae:bf:40:d1:e0:9c:5b:e0:d1:8b:c2:f6:a6:0f:67:
14:e9:fa:09:2e:f5:02:a0:ef:0d:e4:e9:28:83:bb:d0:5d:18:
92:d3:3a:ad:b0:d1:17:bd:1e:57:48:2d:b7:a8:3e:51:fb:5b:
77:24:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:31 2026 by rpki-client