
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
File: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (raw, json)
Hash identifier: 39L0tuk++HvgBqoCLQnzcqUrTZqQJu3YDe0GGFe9LNA=
Subject key identifier: 9B:F5:09:42:8F:01:E6:51:99:E3:89:AA:D7:00:36:31:99:E1:48:74
Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Certificate serial: 018D
Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:03:10 +0000
ROA not before: Wed 24 Sep 2025 20:41:22 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 137432
IP address blocks: 103.153.52.0/23 maxlen: 23
103.153.52.0/24 maxlen: 24
103.153.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004
Validity
Not Before: Sep 24 20:41:22 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48d6e-0a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:73:97:e3:7e:de:30:21:cc:34:f7:5c:b8:
fd:ce:27:9f:ea:11:45:80:b4:fa:7c:59:95:6d:d1:
40:9a:33:b5:e9:51:cd:7c:63:2a:59:a4:da:32:d9:
17:62:8f:ea:51:45:06:85:79:24:5e:96:53:2d:cc:
79:12:b1:48:ef:fb:2e:c1:f7:8c:bf:90:fc:e6:f9:
d8:ac:a1:41:87:9b:27:de:39:03:34:bd:f7:1d:38:
c2:44:89:a3:e7:f3:f2:a0:68:71:a7:49:3d:09:74:
ec:20:18:80:65:a3:e9:6e:a0:80:f4:67:3e:51:38:
84:68:d3:c5:8f:15:92:ae:68:87:f1:fb:86:06:5b:
78:d9:03:82:1d:c4:69:09:b9:e1:f3:af:61:4c:41:
76:fa:86:65:bb:6f:9f:1f:d7:40:6b:ec:3a:2b:99:
5e:7f:81:26:a8:aa:f6:c6:fe:c7:cb:57:cf:1f:5b:
4f:65:4f:22:bf:84:41:9f:11:66:79:8d:f8:da:1a:
86:a2:3b:4f:92:75:03:3c:70:94:86:33:e8:27:3c:
cd:8c:d0:af:0b:ea:e2:fe:e2:95:be:6e:ee:fe:c6:
29:7f:64:74:89:2e:a6:11:0b:6f:fe:a1:6e:f1:d1:
ea:3c:df:6a:d2:9a:ec:ab:22:b5:10:4d:7d:1f:70:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F5:09:42:8F:01:E6:51:99:E3:89:AA:D7:00:36:31:99:E1:48:74
X509v3 Authority Key Identifier:
keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.52.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:d2:a3:d9:94:27:02:32:59:53:b6:30:5b:ea:06:b7:9b:ee:
c0:1d:c8:2a:e9:a6:62:79:84:34:95:5e:4f:4f:d3:d1:d5:fe:
24:06:77:7c:60:1b:0d:e2:bc:b6:ad:a6:dc:82:ed:95:5d:c1:
69:02:43:a1:62:bd:c6:af:16:cc:9e:63:0c:25:ed:3e:bf:ff:
6e:84:37:c8:c9:e1:18:30:1f:e9:5e:2c:0e:2d:46:68:43:b4:
ce:9c:3f:dd:35:fc:f6:77:80:ee:a0:18:d8:24:4f:2c:4e:c4:
77:c5:1f:bc:b7:82:ba:0d:b9:7d:91:57:7b:51:5d:40:71:e5:
97:82:79:ea:e9:87:e3:e2:f6:d5:20:fd:10:c5:46:81:52:9c:
23:9b:85:f7:7f:c7:bf:bc:e2:c3:f8:70:22:bc:cb:fd:b3:53:
d5:7b:27:a9:4a:ce:48:8a:58:1a:85:42:b4:a3:98:56:48:ee:
5c:ce:70:38:ea:85:b2:d3:24:13:7d:08:81:35:f7:25:ff:c9:
2e:77:18:37:91:80:13:62:54:46:ae:28:ba:39:78:df:32:0e:
e6:97:59:f6:07:db:67:5b:9a:52:51:7f:ba:50:30:e4:4a:3a:
87:d1:4c:51:1a:71:a9:88:0d:89:24:8c:af:2a:0a:17:f8:6f:
87:65:54:39
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw
QzY4MUEwMDQwHhcNMjUwOTI0MjA0MTIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGQ2ZS0wYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoOZzl+N+3jAhzDT3XLj9zief6hFFgLT6fFmVbdFAmjO16VHNfGMqWaTaMtkX
Yo/qUUUGhXkkXpZTLcx5ErFI7/suwfeMv5D85vnYrKFBh5sn3jkDNL33HTjCRImj
5/PyoGhxp0k9CXTsIBiAZaPpbqCA9Gc+UTiEaNPFjxWSrmiH8fuGBlt42QOCHcRp
Cbnh869hTEF2+oZlu2+fH9dAa+w6K5lef4EmqKr2xv7Hy1fPH1tPZU8iv4RBnxFm
eY342hqGojtPknUDPHCUhjPoJzzNjNCvC+ri/uKVvm7u/sYpf2R0iS6mEQtv/qFu
8dHqPN9q0prsqyK1EE19H3D4uwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJv1CUKP
AeZRmeOJqtcANjGZ4Uh0MB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0
QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0IxNEQvMzBGRTBBRkVDNEM2MTFFQUE4RDVCRTY2QzRGOUFFMDIvQzQ4M0M4MENE
RTQwMTFFRkI0QTExRDVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5k0MA0GCSqGSIb3DQEBCwUAA4IBAQAP0qPZlCcCMllTtjBb6ga3
m+7AHcgq6aZieYQ0lV5PT9PR1f4kBnd8YBsN4ry2rabcgu2VXcFpAkOhYr3GrxbM
nmMMJe0+v/9uhDfIyeEYMB/pXiwOLUZoQ7TOnD/dNfz2d4DuoBjYJE8sTsR3xR+8
t4K6Dbl9kVd7UV1AceWXgnnq6Yfj4vbVIP0QxUaBUpwjm4X3f8e/vOLD+HAivMv9
s1PVeyepSs5IilgahUK0o5hWSO5cznA46oWy0yQTfQiBNfcl/8kudxg3kYATYlRG
rii6OXjfMg7ml1n2B9tnW5pSUX+6UDDkSjqH0UxRGnGpiA2JJIyvKgoX+G+HZVQ5
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:41 2026 by rpki-client