
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/BA3FE218315611F0951A037DC4F9AE02.roa
File: BA3FE218315611F0951A037DC4F9AE02.roa (raw, json)
Hash identifier: s77wwh2D92i2QrKcyg/ZnhUnZTiuRUBkb2pSoHQfvpI=
Subject key identifier: 35:FF:AB:D0:26:C1:29:18:10:C9:2B:40:C8:42:32:CC:1E:2A:3D:32
Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial: 94
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/BA3FE218315611F0951A037DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:05:37 +0000
ROA not before: Thu 15 May 2025 06:35:01 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 24042
IP address blocks: 103.149.222.0/24 maxlen: 24
103.149.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Validity
Not Before: May 15 06:35:01 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3e541-4bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:d5:5e:e8:7c:13:1a:c5:f3:40:4c:22:da:
00:f5:bb:d1:8f:6a:aa:25:f2:c6:91:2d:45:be:70:
01:41:c4:fc:c8:ca:71:28:9f:f3:0e:4d:35:f9:2c:
13:81:89:7d:ce:14:b4:dd:27:2c:50:b4:4e:e7:6a:
f0:10:4a:18:21:f5:78:69:d6:37:9c:fd:39:60:67:
c8:f2:14:fd:77:31:77:e7:8f:fd:b2:7f:38:ff:f2:
19:ba:6e:a2:33:ef:a6:68:0f:7e:ae:ff:d7:97:a9:
7a:15:71:50:d3:d3:eb:f7:6d:46:77:e7:af:bd:5c:
74:cd:ee:0e:38:25:20:f6:44:cd:11:da:2b:9d:a9:
b7:13:83:56:80:85:44:4e:f5:75:f4:32:99:24:7a:
fb:e8:f8:50:d0:1d:96:a9:26:69:cf:b5:c5:5f:6f:
cb:41:cf:bf:84:a6:62:7b:eb:a7:44:f8:3e:c4:a2:
98:81:bc:bf:78:9c:45:9b:1f:70:16:1c:2e:ba:42:
f6:f7:35:76:d3:70:ef:cc:af:40:9b:39:11:9c:0e:
c2:ca:00:d4:fa:c7:66:e7:ae:4a:8d:9a:48:fb:60:
a1:28:bd:24:6f:a4:0a:21:fe:31:2f:d4:11:5d:90:
a3:c9:6e:6d:e9:f0:c3:78:bf:8b:ef:dd:1e:01:5c:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:AB:D0:26:C1:29:18:10:C9:2B:40:C8:42:32:CC:1E:2A:3D:32
X509v3 Authority Key Identifier:
keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/BA3FE218315611F0951A037DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.222.0/23
Signature Algorithm: sha256WithRSAEncryption
04:30:9f:6f:10:37:b2:b8:28:c4:f5:77:cf:1a:91:8d:e3:d4:
6d:59:62:8a:da:33:9c:a7:a0:6f:9e:9a:3f:53:ee:83:c8:de:
98:3b:93:a8:dc:d1:01:de:9a:68:a5:43:ff:3e:71:f5:f1:99:
ce:35:2d:d7:d1:f8:fa:3d:4b:d5:01:0c:6b:9f:fa:7c:9f:07:
db:27:ba:59:6a:6b:d0:7a:eb:12:6a:85:f6:78:b7:b3:ef:68:
7e:5c:d4:1b:a7:01:d6:ab:9a:ef:e5:07:7b:f4:58:cc:8c:71:
3a:b8:a2:56:70:cb:f3:7d:c1:46:de:23:57:e2:cc:50:12:32:
d4:bf:e8:3d:99:41:65:3d:0c:0e:3e:71:12:2f:ef:ff:3b:16:
15:e9:30:ed:bf:6b:1b:c0:24:5e:74:bb:6e:85:27:d6:d3:2e:
e9:8b:f5:c5:cb:72:b4:0a:67:36:a6:f0:d9:eb:6a:52:78:90:
24:90:ec:d3:1d:d6:46:63:bb:dc:d4:75:a0:c3:f4:07:69:36:
58:f8:97:37:9d:06:b3:0f:46:c2:ba:01:b8:5f:29:43:ef:00:
5a:85:c6:25:5b:9d:03:07:44:09:1b:cd:7f:28:b0:31:f9:7c:
27:a8:7c:5c:aa:e8:f8:ab:12:6c:74:96:90:1b:a2:ed:84:a4:
5d:78:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:24 2026 by rpki-client