
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/4153A4B6A55C11EE9D833C0EC4F9AE02.roa
File: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (raw, json)
Hash identifier: aF15WV54UPQi+570lsW9w8ZiAccp8MovG9ijIx3Rdww=
Subject key identifier: DE:69:E0:77:13:7C:03:7F:62:79:59:4B:97:12:72:E7:16:BF:9E:07
Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Certificate serial: 078F
Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/4153A4B6A55C11EE9D833C0EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:11:29 +0000
ROA not before: Mon 26 Jan 2026 21:18:14 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134502
IP address blocks: 103.161.70.0/23 maxlen: 23
103.161.70.0/24 maxlen: 24
103.161.71.0/24 maxlen: 24
2001:df5:bd80::/48 maxlen: 52
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 21:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Validity
Not Before: Jan 26 21:18:14 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44911-8ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:fb:29:56:0f:3e:83:92:b9:4e:70:21:a6:
1c:6a:4f:bf:40:30:2e:a2:e5:c0:86:9c:ae:1a:e2:
e1:24:04:9e:38:d6:0c:6a:95:09:27:91:9c:d3:4d:
34:50:a8:c5:e7:ef:2e:8a:31:f7:df:88:00:1e:e1:
e4:d6:bb:a8:e8:ed:32:17:8f:60:3a:c0:9b:85:4c:
43:e9:57:be:5d:c4:a9:c1:c1:28:68:db:2a:83:24:
9c:c8:c7:41:a2:f0:a4:df:ea:c0:ec:78:70:a9:aa:
4f:86:e8:11:9d:64:94:ae:99:62:5b:bf:2d:3b:0b:
4a:69:f3:7c:a9:65:1b:aa:54:a9:e4:9d:8b:37:e6:
4a:7a:06:f1:e3:e7:1e:2e:f2:52:11:80:73:72:74:
02:ca:0d:fc:e6:2c:0f:4e:21:d0:29:e6:33:76:10:
d9:a2:5c:a8:0d:3b:10:5f:7e:d1:99:66:20:5b:e9:
21:72:d8:dc:f7:29:57:b3:21:21:68:14:66:b9:74:
62:07:3a:f3:fb:53:9a:69:1c:71:d2:fc:07:48:7f:
16:3e:82:b1:16:9a:af:00:eb:b0:4d:17:f2:d3:d4:
06:d0:26:9b:87:8c:43:a9:08:49:81:b1:db:f9:70:
44:08:f9:31:e5:58:6b:54:a7:74:e7:e1:c6:41:c1:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:E0:77:13:7C:03:7F:62:79:59:4B:97:12:72:E7:16:BF:9E:07
X509v3 Authority Key Identifier:
keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/4153A4B6A55C11EE9D833C0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.70.0/23
IPv6:
2001:df5:bd80::/48
Signature Algorithm: sha256WithRSAEncryption
84:3f:de:bd:dc:40:13:34:bd:30:3c:fc:b6:96:0c:ea:b0:ee:
31:04:4b:ec:6d:9e:ca:f9:35:47:c7:82:66:c9:12:a9:06:97:
44:a4:d9:d8:da:29:b4:cd:62:ed:da:13:88:0c:9e:85:a4:38:
09:f2:5d:08:b4:f3:93:e8:f5:17:0e:92:fd:3a:fa:71:0f:31:
55:18:dd:22:8f:4e:c0:aa:e2:ac:1e:39:ee:97:5d:e4:64:cf:
17:07:08:0e:11:96:06:a1:c9:4f:90:b0:84:1e:10:1c:80:b5:
88:b1:d6:3d:6b:69:33:79:b8:8b:7f:f3:60:32:54:dc:81:2b:
94:a8:f5:aa:f1:28:dc:1e:2e:78:3c:09:fe:c0:8a:2c:5c:8a:
84:fd:e6:89:65:18:39:50:d6:6b:39:81:6e:fe:de:70:c2:a9:
c7:70:03:e3:d0:4e:a2:fc:e0:77:58:45:ef:b2:7c:f3:6d:04:
90:32:b9:47:46:45:37:cf:c8:44:59:11:82:b5:f5:43:92:9f:
bf:e0:e4:84:0b:7b:19:ef:81:86:8d:9e:80:96:e4:86:0a:f3:
9d:3e:6e:df:f9:bf:b1:47:3b:3a:2c:8c:b5:41:c0:33:9c:46:
43:bb:27:f3:8c:55:62:25:80:50:55:4f:1b:4c:da:f2:13:a8:
39:ea:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:23 2026 by rpki-client