
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/146FD366653611EB99BE491DC4F9AE02.roa
File: 146FD366653611EB99BE491DC4F9AE02.roa (raw, json)
Hash identifier: 3Xu3YdrmWFtjRIkMbPV8Od64UCFPjHiGgRv9ojgfBZ4=
Subject key identifier: 94:29:32:DF:BA:A7:F4:CD:11:A3:3B:7C:EC:C5:47:75:2D:E7:43:05
Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659
Certificate serial: 0742
Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/146FD366653611EB99BE491DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:41:36 +0000
ROA not before: Wed 12 Mar 2025 22:23:06 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137487
IP address blocks: 103.110.75.0/24 maxlen: 24
103.119.134.0/24 maxlen: 24
103.119.135.0/24 maxlen: 24
103.119.136.0/24 maxlen: 24
2001:df4:6300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl
rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659
Validity
Not Before: Mar 12 22:23:06 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fbc0-91b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:03:38:e7:98:36:9e:53:c1:6c:70:ef:dd:
e1:96:4b:cd:bf:dd:d0:84:6e:6b:61:c3:01:71:a8:
99:ac:37:1b:c2:2b:99:7e:55:0a:91:f2:9b:f5:7b:
0a:1e:b8:d7:44:67:31:37:17:2f:01:c9:7f:bf:1d:
52:f0:b6:46:83:52:46:c8:a7:af:2a:69:49:5c:2c:
3d:81:4a:4b:4b:89:49:07:8d:ed:11:57:e4:4e:68:
a7:c2:4a:f6:2c:65:8b:75:8b:3c:18:c5:86:4d:e8:
e5:43:60:1c:f0:e2:e1:73:79:12:ed:de:30:a9:12:
f7:ac:00:19:1a:21:09:90:5e:be:70:ae:73:74:e8:
9f:23:2f:20:16:f0:3e:9b:67:72:9f:54:d6:e6:c1:
11:be:dc:2e:46:2e:72:4e:6f:9a:0b:bb:5c:d6:97:
f9:d3:22:d5:4c:bf:c3:6b:8c:03:c4:0b:7f:66:d8:
3b:f6:71:ec:c6:65:59:e1:75:2a:09:ec:b5:bd:c9:
de:ba:74:c8:39:a1:11:68:8a:1b:1b:ec:52:4a:30:
0b:74:c3:bd:e2:d7:86:91:27:ea:91:00:e3:3e:ce:
50:dc:e8:c9:3b:19:e2:c3:46:2a:e8:ed:fb:57:e1:
5c:2c:28:69:70:a7:69:41:b1:3a:59:1c:8a:95:58:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:32:DF:BA:A7:F4:CD:11:A3:3B:7C:EC:C5:47:75:2D:E7:43:05
X509v3 Authority Key Identifier:
keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/146FD366653611EB99BE491DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.75.0/24
103.119.134.0-103.119.136.255
IPv6:
2001:df4:6300::/48
Signature Algorithm: sha256WithRSAEncryption
4e:0c:23:bb:7c:22:8b:99:79:31:70:7b:dd:9b:70:35:9e:4d:
17:c6:c4:6a:96:36:3a:f6:6e:6e:63:01:22:b0:c4:67:69:79:
61:33:2d:5d:e8:02:c7:53:26:b1:46:83:31:86:ca:1e:30:27:
b1:2f:ad:94:ac:70:13:f4:81:be:e6:1d:b6:4f:76:aa:bd:93:
3d:01:79:8a:03:cc:86:c5:df:dc:e0:de:08:95:9c:01:ba:ba:
c5:8b:03:03:f9:21:52:73:19:4b:cd:28:15:a1:eb:ed:ec:37:
82:1c:ad:d4:99:b9:e5:da:3c:e6:97:3b:07:9f:22:c5:d9:d5:
82:e9:f1:07:f5:7a:7c:ea:c5:a6:56:fd:f5:c0:c3:57:6e:49:
e5:bb:56:9b:6e:6d:76:0d:2d:9e:46:5e:d2:43:20:69:cd:1e:
cc:0a:f4:63:e1:d9:88:b0:73:eb:72:ce:c5:20:77:9a:c2:0c:
aa:7c:13:d0:64:49:bc:d2:8c:ad:cd:c1:c8:80:e3:61:1a:d1:
f5:24:a9:d2:bd:96:f5:25:b8:b6:66:4b:77:18:9e:aa:9d:7c:
1d:e5:90:7e:95:81:65:da:1a:92:bc:16:64:05:88:59:c1:0e:
51:81:89:0a:bb:c4:09:b4:31:6e:6c:ae:16:eb:13:c1:d3:95:
ca:ab:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:11 2026 by rpki-client