
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa
File: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (raw, json)
Hash identifier: FH7SMQY4WyVt9Ewh8gjU/J4biuTaLOVJJpWUTHyF1xw=
Subject key identifier: A2:5A:B7:BD:CD:52:21:58:FA:82:C4:87:E5:AF:FE:B4:30:B4:29:4A
Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535
Certificate serial: 05FF
Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:53:04 +0000
ROA not before: Thu 07 Aug 2025 00:05:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142541
IP address blocks: 103.87.88.0/24 maxlen: 24
103.168.193.0/24 maxlen: 24
103.254.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535
Validity
Not Before: Aug 7 00:05:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40c80-c44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:2c:6a:9e:18:b2:22:94:ef:bf:ed:a5:6d:
db:ac:95:31:d7:1d:e1:c0:07:4d:62:03:bf:a5:00:
31:2d:5a:e0:a5:c3:c9:56:f0:be:cc:97:c0:4f:d2:
ba:8b:67:12:10:c4:47:45:eb:6e:42:74:a8:dd:24:
76:ba:6a:4b:ea:72:15:7e:e0:6a:cb:c3:e6:6f:43:
be:ec:e3:d2:95:45:22:84:68:8a:b1:c2:df:0c:9b:
7c:4b:24:b2:ce:2f:74:84:76:1a:55:f3:43:66:d9:
3c:21:45:11:1c:55:d6:cf:cf:6f:a9:ca:12:ac:83:
e9:7f:8c:b7:2a:29:70:16:18:e2:02:4c:45:8e:0b:
e5:99:a0:f8:aa:3d:4f:c0:65:ef:33:bb:f4:2a:d2:
d1:d7:5c:c2:46:da:e7:bc:be:42:90:88:93:ad:fd:
93:32:84:46:2a:fb:7c:02:2f:05:9a:98:15:cd:48:
e2:ff:60:d0:2f:df:65:43:7f:80:36:89:48:97:35:
14:59:ef:32:09:56:00:4d:f5:d1:bb:c5:5b:58:94:
dd:d7:b4:d9:2d:85:d3:0d:dd:d5:a5:41:e9:8b:09:
b1:fc:4b:43:05:4b:18:2e:fa:91:be:16:1c:ce:39:
b8:e0:63:7a:77:ae:23:ab:2f:e0:63:9a:1e:fe:62:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:B7:BD:CD:52:21:58:FA:82:C4:87:E5:AF:FE:B4:30:B4:29:4A
X509v3 Authority Key Identifier:
keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.88.0/24
103.168.193.0/24
103.254.166.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d1:e1:28:6b:ce:df:05:a3:c3:78:1d:41:d1:03:5f:fd:fc:
db:0b:bb:8d:7b:cf:4a:1d:a1:49:af:94:40:63:0c:e7:f4:54:
5f:94:c3:d8:90:18:f0:7c:11:ef:ab:d7:7b:e2:ab:bf:d6:22:
1e:45:b4:65:66:4c:6e:83:f2:97:a3:32:68:c6:2d:98:2d:c2:
23:fc:17:7c:a5:d4:47:49:0e:fb:78:54:17:64:51:48:4c:51:
25:fb:d2:52:a1:8d:f9:be:46:05:34:2c:df:2b:69:a2:24:53:
5a:18:c2:24:3a:e4:d6:dc:fa:15:47:73:02:91:5e:71:10:61:
cd:91:7f:d3:b5:26:c2:79:38:8e:9f:c4:71:b0:82:93:89:d0:
31:cb:6e:ad:aa:f9:ba:37:0c:00:90:68:53:2c:09:9d:6c:1e:
a3:18:2d:5c:b5:ca:9f:f8:84:b8:f7:63:5d:6b:eb:72:b3:b6:
69:88:85:dc:7b:51:55:1f:68:6c:58:05:82:1d:b3:69:14:21:
22:8b:cc:5b:18:d0:34:77:81:d2:2a:99:8d:d0:59:f5:8e:5a:
19:e8:79:f8:52:a3:ea:71:5d:33:6a:bb:37:05:13:7e:26:cf:
ff:44:3f:a6:41:f6:a6:b7:25:9d:6d:8f:53:66:fd:23:3a:fe:
fe:c7:86:a5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw
NzFEMjQ1MzUwHhcNMjUwODA3MDAwNTIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGM4MC1jNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5Isap4YsiKU77/tpW3brJUx1x3hwAdNYgO/pQAxLVrgpcPJVvC+zJfAT9K6
i2cSEMRHRetuQnSo3SR2umpL6nIVfuBqy8Pmb0O+7OPSlUUihGiKscLfDJt8SySy
zi90hHYaVfNDZtk8IUURHFXWz89vqcoSrIPpf4y3KilwFhjiAkxFjgvlmaD4qj1P
wGXvM7v0KtLR11zCRtrnvL5CkIiTrf2TMoRGKvt8Ai8FmpgVzUji/2DQL99lQ3+A
NolIlzUUWe8yCVYATfXRu8VbWJTd17TZLYXTDd3VpUHpiwmx/EtDBUsYLvqRvhYc
zjm44GN6d64jqy/gY5oe/mJC/QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKJat73N
UiFY+oLEh+Wv/rQwtClKMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1
NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTFDMEIvQjczQTE3OUNFNTVBMTFFQkI5QkY4OTQyQzRGOUFFMDIvMURFMUU0MThF
REUyMTFFQjhDRUEzNDE1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ1dYAwQAZ6jBAwQAZ/6mMA0GCSqGSIb3DQEBCwUAA4IBAQAn0eEo
a87fBaPDeB1B0QNf/fzbC7uNe89KHaFJr5RAYwzn9FRflMPYkBjwfBHvq9d74qu/
1iIeRbRlZkxug/KXozJoxi2YLcIj/Bd8pdRHSQ77eFQXZFFITFEl+9JSoY35vkYF
NCzfK2miJFNaGMIkOuTW3PoVR3MCkV5xEGHNkX/TtSbCeTiOn8RxsIKTidAxy26t
qvm6NwwAkGhTLAmdbB6jGC1ctcqf+IS492Nda+tys7ZpiIXce1FVH2hsWAWCHbNp
FCEii8xbGNA0d4HSKpmN0Fn1jloZ6Hn4UqPqcV0zars3BRN+Js//RD+mQfamtyWd
bY9TZv0jOv7+x4al
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:22 2026 by rpki-client