
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/14820EDE248611EEB600357DC4F9AE02.roa
File: 14820EDE248611EEB600357DC4F9AE02.roa (raw, json)
Hash identifier: ILtVZce+EeOlerO/s4x6aPfHR6PK7/NY4qOIZJx05so=
Subject key identifier: 00:0B:44:CB:C7:7C:0D:D3:41:4A:53:58:00:E1:ED:92:69:59:88:C6
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2D8D
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/14820EDE248611EEB600357DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:08:12 +0000
ROA not before: Sat 06 Sep 2025 15:52:36 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 136759
IP address blocks: 103.102.42.0/24 maxlen: 24
103.108.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11661 (0x2d8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Sep 6 15:52:36 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4727c-93bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:23:2e:d8:2e:d2:88:df:c9:f5:29:e9:42:
74:dd:4a:57:d0:97:69:e2:cd:72:fe:5d:a4:4f:30:
04:3e:fb:4b:67:1c:1b:50:fe:22:4c:c6:e4:c0:cb:
e1:cb:dc:75:18:61:23:1f:6e:ab:6c:26:17:7b:45:
31:ac:12:8e:b5:3c:4b:4b:da:ff:e2:ce:25:1c:82:
9b:c3:d0:7e:c8:d5:65:a6:27:c9:fd:fc:62:06:a3:
e0:2c:00:55:f9:0b:dc:05:e4:47:ce:e9:e2:99:e1:
d1:aa:fe:07:55:9c:9c:fa:f9:27:bb:55:74:91:25:
94:69:f0:5f:03:f8:1b:d2:e5:dd:fc:77:6a:d3:d7:
1c:90:d1:6a:42:d4:8a:cb:ff:06:d3:f0:f4:8c:16:
0a:67:c6:01:f4:8b:bb:ad:59:dc:b5:7c:93:c3:cf:
5e:dc:9d:e4:f8:ab:73:b9:4f:ad:68:cf:6b:af:9e:
e0:1b:54:24:0e:64:26:e7:e6:48:94:78:39:e9:d8:
27:e9:6d:ac:fb:ea:b2:1b:28:44:8b:70:42:ff:46:
4d:c9:6e:1c:d7:b1:6c:44:39:d0:25:06:43:c1:c7:
52:bf:bd:24:52:e2:02:9f:99:25:d9:5b:f9:23:4c:
06:30:bf:86:60:6d:58:14:16:e8:c9:1f:1a:9e:72:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:44:CB:C7:7C:0D:D3:41:4A:53:58:00:E1:ED:92:69:59:88:C6
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/14820EDE248611EEB600357DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.102.42.0/24
103.108.147.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0f:34:71:fd:76:47:bf:3d:54:ea:ee:48:08:96:e9:6d:94:
50:36:cf:0b:2d:3b:cf:de:0c:0c:5c:66:45:e5:2b:9e:c1:bc:
d5:e9:dd:90:e5:99:f4:a8:e2:72:7e:88:f0:1f:23:cc:ac:3d:
00:23:dc:c0:ae:6b:c7:73:8b:62:04:e1:f5:af:10:80:27:cc:
6b:6c:b3:e4:69:91:1f:b1:26:ac:f2:6b:cf:01:e3:7a:f9:92:
de:24:d2:09:7d:c5:f2:e9:33:df:44:a1:1e:36:1f:fb:35:02:
87:96:ed:cd:16:eb:16:a5:37:d1:36:19:c3:90:96:d4:3f:8b:
de:bf:9f:6c:73:e7:a1:98:82:62:89:d1:d7:1c:8e:d7:83:79:
bb:5b:9a:4a:13:90:cb:51:9d:ab:33:64:91:98:77:91:bd:b6:
2a:e7:1f:38:8b:5e:45:60:66:52:8d:c3:fd:0d:02:06:80:fb:
14:b1:50:ff:72:6e:ef:4c:a0:e6:d2:9a:f3:8b:7f:f1:56:fd:
59:e8:fe:59:61:0f:df:0f:70:7e:6f:22:2c:a7:ac:66:2e:73:
fd:d8:ec:83:dc:0b:c2:49:bd:69:64:cb:7f:29:35:8b:1a:83:
06:a1:b9:a3:21:6e:a4:8a:4f:16:92:66:78:16:85:a7:74:90:
f8:79:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:53 2026 by rpki-client