
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/E034D1A6BC6F11EA8FE53280C4F9AE02.roa
File: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (raw, json)
Hash identifier: +Pd2aWEI7828mfSanwxonyoz5UIPIwJJCaXRRPJ3RbQ=
Subject key identifier: CC:C5:AF:FF:0E:D5:C4:86:98:D8:30:61:91:87:47:CE:A0:56:C8:95
Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial: 0934
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/E034D1A6BC6F11EA8FE53280C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:03:58 +0000
ROA not before: Thu 18 Dec 2025 20:17:08 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139799
IP address blocks: 103.145.92.0/23 maxlen: 23
103.145.92.0/24 maxlen: 24
103.145.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356 (0x934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Validity
Not Before: Dec 18 20:17:08 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4474e-338f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:14:d3:6c:2b:33:02:03:be:b6:82:34:3f:
d8:d2:88:81:91:ae:9a:e4:5d:8f:ac:08:6d:48:a8:
11:e2:b3:41:a1:63:0f:fc:66:b8:d6:16:7d:82:97:
ac:9a:41:57:3b:f9:2d:91:3e:4b:d1:11:9c:ad:0b:
02:5f:3d:90:8f:a3:f0:62:c8:d5:df:03:97:18:07:
fc:20:d6:d4:5e:88:14:22:a2:2e:de:e6:37:f8:25:
4b:7a:f9:c0:c4:bf:58:04:c4:bf:fc:d5:53:ee:7f:
55:0b:da:92:93:f0:ee:1b:da:a0:eb:6f:e7:33:50:
b4:8c:0b:9c:da:a7:8e:b2:ff:22:40:2e:d3:7a:4f:
a3:3b:70:7e:c0:29:6e:f3:d1:66:28:05:98:01:bb:
5d:51:14:ff:73:0a:85:fd:67:d5:a7:78:2d:2f:e0:
20:f1:2a:f5:2d:5c:78:be:0c:2f:a4:22:de:83:85:
6d:1b:e7:23:3b:0b:e5:8f:86:d9:2d:bf:64:11:89:
70:b3:da:98:55:19:82:85:86:33:46:c7:ca:96:9d:
88:3f:8b:09:d2:de:77:d0:98:9a:35:3a:39:a6:fc:
d9:e4:ad:83:b3:22:03:3b:69:50:43:7c:17:47:b2:
c7:32:91:f4:25:74:a8:7d:f6:c2:7f:08:d5:ea:62:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C5:AF:FF:0E:D5:C4:86:98:D8:30:61:91:87:47:CE:A0:56:C8:95
X509v3 Authority Key Identifier:
keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/E034D1A6BC6F11EA8FE53280C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.92.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:5a:86:a1:b2:fb:49:72:2e:34:e0:df:7b:1d:09:5e:67:c9:
7f:78:69:91:3b:4f:00:2f:93:f7:0c:c4:78:6e:77:d7:88:86:
a0:a6:85:2a:f8:5e:f2:ad:63:b5:af:61:5a:f2:b5:f2:b8:3f:
f4:ad:a3:b0:60:a1:2a:e5:d3:e5:d7:98:c6:bb:9c:f3:2d:dd:
9b:79:b1:5a:82:bf:28:1b:8e:08:09:94:a8:a0:a1:c4:50:05:
a8:f1:c1:63:c6:bb:40:91:3b:c5:f0:8f:85:ab:9f:4e:7f:1b:
97:06:ca:d1:68:56:a3:aa:c6:60:b4:c6:e9:51:23:64:93:50:
d5:0a:2b:2a:6d:6b:8e:14:79:8d:b5:d5:bb:da:37:b4:b1:09:
42:70:c1:bb:20:45:4c:3c:6e:ea:b7:8f:bd:85:98:7f:84:53:
ca:5a:84:aa:c9:36:81:41:23:bb:d6:cc:ab:92:6e:e0:ac:c6:
70:05:10:c7:64:f5:21:71:e6:a7:73:e8:c8:97:26:05:15:56:
61:3e:b6:7f:12:68:8d:92:c5:1b:97:b6:12:4f:a5:98:71:08:
c0:d0:5a:52:1a:10:46:8c:bb:38:7c:ba:4a:85:e4:26:0c:69:
b7:0e:8b:c9:94:6c:a3:e1:0f:a1:43:3e:fa:72:08:d2:9f:ed:
a5:dc:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:41 2026 by rpki-client