
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
File: A778AAF6A42111EAB3108934C4F9AE02.roa (raw, json)
Hash identifier: +2e0ypBMf/2EVb6MaYRFXsgQhBqjAZqucCJc3CHmtVE=
Subject key identifier: C5:40:71:FE:DC:26:A3:3C:97:BF:28:6F:1B:75:67:DE:39:FA:2E:3F
Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial: 09AD
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:32:35 +0000
ROA not before: Fri 30 May 2025 20:58:15 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 140631
IP address blocks: 103.150.74.0/23 maxlen: 23
103.150.74.0/24 maxlen: 24
103.150.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477 (0x9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Validity
Not Before: May 30 20:58:15 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a407b3-e72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:1f:c3:6a:01:71:29:50:22:9d:f0:92:7e:
6c:6d:68:e8:3f:a7:28:61:a2:1e:c3:7f:99:b6:2e:
1e:8c:84:d6:9c:10:41:c6:a9:16:05:d0:72:42:23:
f9:a7:7c:b0:f3:93:5f:2b:33:bc:a9:90:fb:06:c9:
21:50:a4:44:0b:18:c1:11:a0:dc:cf:26:bc:61:92:
95:a4:47:3c:bd:6d:88:87:b9:62:18:d7:ab:3a:05:
2d:fd:b9:81:dd:62:c8:24:8d:7b:b2:64:48:96:ed:
5d:d5:35:6a:2b:d9:b9:8b:0f:cf:ca:56:51:35:f4:
78:06:6c:1b:67:9e:20:e0:78:20:55:aa:7a:9d:07:
80:e7:92:05:dc:2d:56:df:91:b0:20:23:42:95:5a:
8c:c8:8f:31:ae:7d:4a:0e:9f:e7:23:9e:bd:9d:fc:
20:fe:a1:6c:15:99:07:fc:c8:fc:f4:72:84:cf:1a:
2e:f3:fc:e1:31:e1:8f:9a:91:a7:cb:f9:ce:81:74:
b7:b7:6e:5b:9e:20:69:fc:8e:5b:79:4b:a2:00:12:
04:15:ac:b6:ee:db:2a:65:c2:f1:71:81:f9:9c:ce:
fe:42:28:5c:a0:8e:ce:a0:b9:6d:00:82:55:fd:65:
92:02:0d:75:55:4d:f5:30:06:a7:51:25:79:fe:32:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:40:71:FE:DC:26:A3:3C:97:BF:28:6F:1B:75:67:DE:39:FA:2E:3F
X509v3 Authority Key Identifier:
keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.74.0/23
Signature Algorithm: sha256WithRSAEncryption
92:c0:2e:ee:91:47:83:f5:29:cb:fb:70:2b:1e:31:39:aa:be:
7f:21:ed:d8:2b:6b:26:8d:28:c9:b3:5d:03:bc:72:aa:c9:46:
25:5d:80:36:09:4b:af:04:9f:86:52:57:52:c2:d1:35:5c:d0:
c4:ec:5b:45:6d:4f:b4:26:19:f6:4f:a5:d5:b6:7d:94:01:7b:
09:7f:09:de:c2:f7:ae:2d:93:1f:e9:b7:bd:08:ac:0e:e4:10:
7c:86:e8:09:ed:91:0d:b4:3c:36:46:8b:8b:66:86:81:2a:b4:
39:26:c1:93:d3:69:96:78:96:56:d8:5d:64:65:f3:3c:61:7c:
ee:6b:86:af:fe:40:13:bc:a6:70:63:48:e1:28:da:28:60:20:
e5:60:5b:86:25:b5:7f:2b:98:00:1f:7b:6d:5c:9b:0d:3c:8b:
f2:49:a9:06:3d:4f:e9:9a:f5:1f:76:5a:92:b8:c5:57:7d:d6:
1a:1b:30:32:7c:14:33:4e:44:34:f8:ca:4a:88:31:3e:94:6f:
72:08:39:53:4f:d7:97:04:13:67:40:43:b7:34:5c:28:93:af:
92:f1:c2:bd:b1:35:5a:58:6f:b3:94:cd:46:82:75:fa:55:fe:
99:e2:16:8f:83:ef:3a:77:be:89:bd:63:5d:34:b2:33:cf:3a:
54:30:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:56 2026 by rpki-client