
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/1801BD8CAB9411F1B59574584A11F970.roa
File: 1801BD8CAB9411F1B59574584A11F970.roa (raw, json)
Hash identifier: 0hB7c5DdDlcRXfyZKhbTfTsymtv8P4mwAwktu4W3r0w=
Subject key identifier: 97:15:31:95:34:BC:C9:67:4A:D7:4F:BB:04:B8:8B:16:CA:FF:C5:02
Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial: 0DCE
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/1801BD8CAB9411F1B59574584A11F970.roa
Signing time: Tue 08 Sep 2026 17:10:20 +0000
ROA not before: Tue 08 Sep 2026 17:10:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139053
IP address blocks: 103.214.82.0/24 maxlen: 24
144.48.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3534 (0xdce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Validity
Not Before: Sep 8 17:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa0417c-359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2a:cc:7d:7f:bc:89:ef:7a:ce:35:51:5a:26:
11:cf:38:59:87:e0:cf:16:34:e0:57:02:f3:fe:4b:
56:d0:8c:d5:ee:0b:9b:91:04:8b:a7:98:95:81:7c:
49:59:12:54:2c:06:25:18:f0:4d:15:8c:62:61:b7:
e9:61:df:6e:fc:39:92:bd:1e:ec:9a:d7:d7:d9:b9:
6e:16:70:34:ca:b1:a9:b7:db:86:f9:2b:b8:4a:a5:
77:ab:21:04:fb:02:ed:9c:bb:53:7b:90:f6:4d:c7:
bd:80:e8:a9:ec:c2:50:f1:8f:f5:8b:14:58:27:5e:
ac:71:bd:e4:b9:73:09:7c:a3:31:0d:9e:1f:3a:2d:
d0:37:9e:be:ef:4f:b6:85:9e:01:75:ad:1a:2d:d2:
ad:47:a0:cb:55:6e:5e:21:3e:97:0f:ab:0f:64:c5:
76:d3:eb:70:c8:da:bd:71:06:e4:e8:fc:d5:09:c3:
43:b4:bc:36:90:5c:16:a0:b1:f2:bd:f0:da:1e:7c:
58:c9:83:52:e4:da:74:14:a9:f4:b7:ff:eb:02:c9:
25:dd:a0:8d:db:71:6c:3a:c2:f7:fc:20:ba:99:19:
a1:26:7f:49:90:84:a1:34:00:a1:8d:3f:36:a3:6f:
22:2f:70:5f:7e:8b:de:45:26:5b:83:d7:16:c3:d3:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:31:95:34:BC:C9:67:4A:D7:4F:BB:04:B8:8B:16:CA:FF:C5:02
X509v3 Authority Key Identifier:
keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/1801BD8CAB9411F1B59574584A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.82.0/24
144.48.84.0/24
Signature Algorithm: sha256WithRSAEncryption
38:be:b1:78:23:be:ee:44:c1:d2:d2:cf:7d:61:8d:5f:1e:05:
b6:8e:db:3d:33:4c:83:d1:f8:d6:f9:c0:ad:c4:ff:8a:6c:c7:
51:1b:23:5b:8f:e4:23:f2:1a:f0:73:50:cc:96:d8:77:18:af:
a9:0f:38:d6:af:ea:45:49:b6:6a:40:73:df:0d:56:51:7a:96:
85:c7:4c:aa:30:80:bd:b8:87:38:fd:4f:02:bf:97:47:a5:ae:
a2:d1:73:e0:cb:64:f9:99:3c:d1:1e:b5:50:f1:28:0d:6c:61:
e0:af:bf:b1:d0:ed:96:7c:a5:c9:15:b2:43:d3:c7:d4:e2:be:
95:54:42:87:8b:69:24:d3:18:48:37:d4:db:46:ab:d6:20:e8:
81:4f:6e:7b:d0:6a:7b:92:16:3b:56:35:35:78:8b:ba:55:2f:
36:07:64:73:ee:5d:1b:91:af:92:f8:4f:0d:52:64:b4:b4:c5:
37:20:05:f5:4e:9f:75:0e:32:1a:a5:95:22:61:d7:c9:d2:2f:
bd:bf:10:c4:81:4b:e1:3d:11:7c:44:f2:bd:71:61:54:a2:12:
a8:eb:ab:88:4a:ba:45:d0:6e:fd:ca:6b:b3:aa:1b:27:34:81:
d4:00:ee:47:9e:ba:17:0d:68:18:c5:03:4a:50:9d:b2:a8:28:
a0:fd:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:34:03 2026 by rpki-client