
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
File: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (raw, json)
Hash identifier: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=
Subject key identifier: A1:A7:23:EC:42:3D:B5:5D:0C:62:35:1F:74:05:80:18:3B:D5:14:06
Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial: 014A
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:24:53 +0000
ROA not before: Mon 09 Feb 2026 05:24:18 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140065
IP address blocks: 103.147.223.0/24 maxlen: 24
103.164.2.0/24 maxlen: 24
203.17.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Validity
Not Before: Feb 9 05:24:18 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43e25-92be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:96:0e:84:1a:76:79:35:25:09:29:64:3c:
0b:73:3d:92:45:2d:8b:9e:12:e4:64:f0:24:ec:94:
65:c2:f7:b7:49:74:e3:e8:3c:26:30:65:c2:77:d6:
1f:96:c9:33:6d:1d:10:7d:63:0e:c1:01:13:49:dd:
75:22:3c:d0:98:45:08:05:13:d9:40:33:ce:90:91:
d2:5f:70:8e:07:b6:9f:30:2d:be:6a:e1:a5:5f:99:
18:3c:e7:90:8f:f3:99:d3:8b:e1:a3:52:3e:e9:f2:
4e:d6:65:61:a5:a0:f5:31:bc:da:b8:7e:dd:5f:3b:
e1:f3:eb:eb:d1:2e:21:f4:05:0e:6f:09:3a:11:ca:
ce:30:1f:26:a1:db:5d:36:62:6b:04:77:69:06:72:
ff:16:a4:db:82:71:45:98:a4:f3:ca:66:dc:9a:ba:
33:45:2c:eb:1f:fc:4d:1d:63:5c:c1:79:d6:cf:4c:
0b:5c:e9:e1:59:47:0d:df:ea:d0:de:82:ea:62:0b:
16:22:eb:d4:88:2a:9f:9a:e2:bc:87:36:4c:ef:bf:
e4:db:88:90:75:1c:be:11:30:f4:f3:3a:4f:65:38:
df:38:a2:c9:a4:de:d8:1b:fc:55:38:88:c8:ec:6e:
65:91:1a:e8:77:6d:3d:d8:af:4e:4f:fd:d7:b5:a5:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:23:EC:42:3D:B5:5D:0C:62:35:1F:74:05:80:18:3B:D5:14:06
X509v3 Authority Key Identifier:
keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.223.0/24
103.164.2.0/24
203.17.240.0/22
Signature Algorithm: sha256WithRSAEncryption
97:19:77:8b:6f:e5:a2:59:ef:70:3b:75:44:27:8e:ed:7a:61:
52:af:96:5c:da:6d:cf:fb:38:18:4d:ba:25:0c:10:d2:68:44:
9f:9b:36:d0:69:77:23:7c:3f:8f:24:3a:0d:1e:aa:ff:7b:86:
7b:92:02:7e:1b:e4:9e:80:25:0e:f5:bd:9f:31:e1:f8:66:fe:
02:7f:a3:a9:3f:61:47:07:f7:3b:5a:11:de:2a:3e:c7:03:bc:
7b:a9:10:2f:a2:e0:18:dc:e4:1c:ba:80:6b:e5:ea:04:a1:b8:
32:cb:c9:5c:87:e2:9d:b1:92:ff:33:f0:1a:1d:6e:18:c2:8d:
fe:aa:ac:82:fd:cf:da:10:65:0d:db:c7:ca:b4:81:bb:64:04:
78:b7:eb:ea:70:0b:27:2f:13:62:c2:28:b9:cd:4f:1a:c7:49:
42:37:f7:6d:cd:a6:84:bb:c0:33:98:b4:90:94:4c:56:97:ea:
ca:ad:7f:73:e2:6a:72:cc:1b:55:91:44:0c:6e:a8:4e:8b:57:
a3:cf:45:24:69:f1:61:5d:8e:4b:eb:f4:08:d4:12:27:18:2f:
df:ed:0a:fc:99:ca:b2:95:f9:86:98:ff:b5:07:62:f5:62:56:
35:8e:18:0b:e9:36:25:c0:01:b4:d5:6c:98:a2:eb:23:31:90:
d3:2c:de:e9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB
N0Y4RDcxRTcwHhcNMjYwMjA5MDUyNDE4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2UyNS05MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3OWWDoQadnk1JQkpZDwLcz2SRS2LnhLkZPAk7JRlwve3SXTj6DwmMGXCd9Yf
lskzbR0QfWMOwQETSd11IjzQmEUIBRPZQDPOkJHSX3COB7afMC2+auGlX5kYPOeQ
j/OZ04vho1I+6fJO1mVhpaD1MbzauH7dXzvh8+vr0S4h9AUObwk6EcrOMB8modtd
NmJrBHdpBnL/FqTbgnFFmKTzymbcmrozRSzrH/xNHWNcwXnWz0wLXOnhWUcN3+rQ
3oLqYgsWIuvUiCqfmuK8hzZM77/k24iQdRy+ETD08zpPZTjfOKLJpN7YG/xVOIjI
7G5lkRrod2092K9OT/3XtaWFDQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKGnI+xC
PbVdDGI1H3QFgBg71RQGMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0
NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTNDNzYvQjQ5OTJENTIzNDU4MTFFRkI0MkY5RDM3QzRGOUFFMDIvNTFCQkVFMTBC
MkJFMTFFRkExMDg5NDZEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ5PfAwQAZ6QCAwQCyxHwMA0GCSqGSIb3DQEBCwUAA4IBAQCXGXeL
b+WiWe9wO3VEJ47temFSr5Zc2m3P+zgYTbolDBDSaESfmzbQaXcjfD+PJDoNHqr/
e4Z7kgJ+G+SegCUO9b2fMeH4Zv4Cf6OpP2FHB/c7WhHeKj7HA7x7qRAvouAY3OQc
uoBr5eoEobgyy8lch+KdsZL/M/AaHW4Ywo3+qqyC/c/aEGUN28fKtIG7ZAR4t+vq
cAsnLxNiwii5zU8ax0lCN/dtzaaEu8AzmLSQlExWl+rKrX9z4mpyzBtVkUQMbqhO
i1ejz0UkafFhXY5L6/QI1BInGC/f7Qr8mcqylfmGmP+1B2L1YlY1jhgL6TYlwAG0
1WyYousjMZDTLN7p
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:47 2026 by rpki-client