
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa
File: B5D3426854F111ED85A7AC66C4F9AE02.roa (raw, json)
Hash identifier: FlilM/koVByJN7Uw72af4g42T01so31c53bUniW9lIE=
Subject key identifier: 02:F1:82:59:60:F6:9B:FB:24:C0:F7:47:3F:70:26:D3:A1:A8:A7:F3
Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial: 0B70
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:46:10 +0000
ROA not before: Sun 20 Apr 2025 19:49:02 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140216
IP address blocks: 103.148.178.0/24 maxlen: 24
2001:df2:e180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2928 (0xb70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Validity
Not Before: Apr 20 19:49:02 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a42702-98dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:10:62:fa:35:c9:78:33:b1:55:f2:3e:83:
db:83:07:fc:5d:84:47:64:be:4b:be:d5:02:61:2c:
1e:73:d5:5c:00:fd:0c:e1:d9:ea:b3:85:69:f7:a1:
39:c2:49:4f:90:01:e2:55:a5:01:cc:ec:b3:df:c5:
77:6c:a5:09:5c:31:a1:68:4c:56:26:ee:1e:a5:8e:
79:bd:61:12:0f:c1:a2:9d:7d:89:e0:05:a6:26:90:
a1:53:a5:7f:6f:43:f1:bf:59:22:0d:af:af:d0:66:
61:fa:73:69:a8:39:54:0d:3d:f4:a5:c2:2f:40:e3:
7c:0b:88:17:31:79:08:d1:bd:b3:48:25:5f:05:e4:
f9:f1:68:0a:68:82:1b:a0:00:f1:8b:82:b1:56:1c:
08:8b:15:91:2f:d2:e4:ee:57:53:c8:a7:fc:19:62:
01:39:13:aa:49:3d:fd:f1:08:26:91:d2:26:db:64:
af:04:7d:c9:0b:ae:f9:f2:39:b7:3a:5b:60:7c:7f:
7f:c8:59:fc:77:a6:0e:7e:91:a3:7c:9d:72:45:81:
e6:9b:f9:d6:a1:1d:00:00:bd:38:27:25:60:fe:aa:
3c:5e:be:e1:58:3a:7d:b4:96:c5:72:a5:9d:1c:50:
5b:40:4f:bd:83:ef:6d:84:73:10:06:1e:95:a0:2c:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:82:59:60:F6:9B:FB:24:C0:F7:47:3F:70:26:D3:A1:A8:A7:F3
X509v3 Authority Key Identifier:
keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.178.0/24
IPv6:
2001:df2:e180::/48
Signature Algorithm: sha256WithRSAEncryption
50:4c:f0:8d:f0:d7:48:fa:35:7e:58:ef:7d:0f:4c:26:17:f7:
19:ac:7f:52:73:5a:10:57:41:e7:20:21:fa:3f:68:c0:26:9e:
06:69:97:26:87:0b:0e:f4:c6:c0:65:da:3a:16:2c:13:cc:7c:
09:d5:ef:8b:e6:84:40:e2:31:26:ca:40:25:79:3f:87:92:d1:
39:80:e6:82:c1:6f:6f:bc:67:69:8f:81:6f:0f:24:b3:19:5c:
df:5e:d6:0d:33:9f:ff:a7:14:70:88:2a:e3:54:a3:22:dc:8d:
4e:f4:89:ef:f9:a6:fb:de:eb:97:6c:e0:17:85:29:73:56:b2:
3d:94:0d:0c:d3:ff:16:d0:fd:16:31:0d:0a:77:b9:2e:5a:a1:
50:32:54:7a:da:59:16:2a:d6:ca:af:72:79:69:5f:78:9c:ca:
f9:56:46:f7:e0:fc:b2:ef:4f:e8:7d:19:e4:7b:39:ab:43:51:
f7:10:a5:4a:bf:f8:eb:e6:37:f1:ba:55:7d:67:38:cd:38:17:
d1:f6:a5:67:9c:67:93:2b:e5:a2:4c:28:fe:79:ed:5b:af:63:
de:2b:de:01:3f:ab:22:30:7e:d6:96:f6:6a:6a:f6:93:58:9e:
f2:97:84:23:94:6c:91:f6:b6:41:5c:51:dc:81:c0:69:20:7d:
11:a1:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:33 2026 by rpki-client