
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/186A84C83A1811EBAF24B12EC4F9AE02.roa
File: 186A84C83A1811EBAF24B12EC4F9AE02.roa (raw, json)
Hash identifier: OGoUhqxGb/v1NECssGQWXzp0QMgYwxdeF00KucDqSNo=
Subject key identifier: FB:A4:6A:46:18:84:0B:B3:10:70:A2:36:7A:C9:28:11:B8:C2:8D:B5
Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial: 0B8A
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/186A84C83A1811EBAF24B12EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:59:13 +0000
ROA not before: Mon 08 Dec 2025 18:59:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139809
IP address blocks: 103.145.132.0/23 maxlen: 23
103.145.132.0/24 maxlen: 24
103.145.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Validity
Not Before: Dec 8 18:59:06 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44631-ed31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:c6:44:d8:bf:74:dd:a6:d3:fd:9c:71:38:
21:a6:2a:38:12:0c:4f:c0:9f:9e:e9:74:12:d6:31:
27:4c:52:80:af:ae:7a:78:0b:1b:b7:4c:a1:50:65:
0b:1e:48:4e:7d:4b:e7:19:31:62:ed:c8:4c:6a:f3:
b8:b9:f5:92:25:f4:96:80:d8:15:23:3e:c8:f0:09:
24:a5:e3:ce:65:67:ad:5e:5e:37:89:e9:da:34:6f:
59:93:06:97:34:30:ee:ba:27:53:cc:96:34:68:57:
3e:78:0d:6d:fc:33:d7:8c:2e:7d:d1:65:ac:a0:e6:
78:91:29:d4:6f:f8:5f:ac:db:f5:63:64:60:f6:20:
c1:7e:8a:83:f2:1b:fe:ef:2d:6f:63:0a:19:c3:90:
53:5e:06:89:40:80:d0:5b:c5:9f:d8:aa:f0:e0:2c:
86:d7:03:ad:4b:6d:f1:7e:f8:07:3a:be:95:e3:ec:
ad:b1:9f:c7:4e:28:aa:ef:1a:bd:08:12:d8:f2:8d:
e5:17:cc:76:f1:c4:23:ad:0f:23:d5:07:bb:87:7c:
fc:4b:20:5b:ea:62:67:22:cc:46:e6:a1:14:2f:4e:
74:66:1b:e4:77:0b:00:39:a5:09:52:c7:eb:14:ac:
0a:ba:db:5f:e7:24:d7:38:0c:49:ae:3d:73:96:e3:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A4:6A:46:18:84:0B:B3:10:70:A2:36:7A:C9:28:11:B8:C2:8D:B5
X509v3 Authority Key Identifier:
keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/186A84C83A1811EBAF24B12EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.132.0/23
Signature Algorithm: sha256WithRSAEncryption
92:c7:0a:bc:37:04:3d:57:57:2a:92:41:11:e7:5d:9b:f6:a8:
3e:ab:d0:c1:81:b2:f4:74:0b:de:47:8e:f1:32:d3:d4:99:01:
61:6b:4a:fe:91:27:db:51:ec:76:97:71:2e:9c:99:65:22:83:
e5:c4:a7:66:18:ab:27:ca:ae:63:74:2b:76:76:c7:10:cd:c4:
74:8b:1b:08:79:4a:10:17:15:1f:c9:f5:36:ee:2f:b7:83:75:
0c:6e:89:df:81:39:b0:ce:69:e1:2b:72:72:45:3a:df:8e:91:
01:8c:cd:bd:8b:00:e5:91:bd:8d:81:4c:4e:e4:0e:89:7d:ef:
96:78:e8:60:ca:73:2a:4c:4c:29:37:4f:63:f8:99:27:0c:9e:
34:25:7b:5e:94:b3:68:60:4d:4b:c7:55:bd:33:63:97:1e:e9:
8c:fb:2e:a1:ec:ba:4b:9e:e6:5c:2b:5d:38:8b:1f:02:e6:e3:
3c:34:ba:76:a1:b3:26:73:5d:1f:2b:7d:4f:31:ef:52:89:6a:
f9:ac:d7:ec:87:61:6a:80:de:b7:9f:33:74:05:c8:30:06:e5:
f7:52:d5:85:6f:74:97:68:14:b5:1f:db:5f:1c:cd:70:d1:ec:
35:47:2e:67:f5:d1:83:ea:57:f1:18:e3:b9:c0:25:d3:be:76:
04:e8:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:50:01 2026 by rpki-client