
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
File: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (raw, json)
Hash identifier: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=
Subject key identifier: 0D:B7:C3:46:7D:16:BD:29:D5:BE:E4:76:EF:1E:FA:43:6F:20:78:16
Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Certificate serial: 48
Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:54:05 +0000
ROA not before: Tue 21 Oct 2025 04:48:56 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140896
IP address blocks: 103.153.30.0/24 maxlen: 24
2001:df4:2c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Validity
Not Before: Oct 21 04:48:56 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48b4c-0a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:61:2c:2e:79:bb:ab:b0:fe:ee:91:b9:1d:
9f:b2:ad:2b:a6:41:14:e6:64:6a:77:45:fe:fd:23:
9a:82:9f:a2:a1:25:3e:59:83:33:4e:8a:c8:87:ca:
23:86:4a:23:a6:a6:ce:0b:ad:38:f9:89:17:c0:67:
5d:bf:75:9f:26:75:2d:f4:e5:5f:56:d6:61:34:8d:
f3:56:0f:e4:5e:d9:52:97:8d:73:f9:ff:98:99:e8:
9c:20:20:9d:c2:4e:6f:81:8b:9e:e2:71:c3:cc:6b:
93:a0:e6:b1:7e:6b:1c:cc:cf:f9:b8:94:f7:d6:b9:
b1:18:59:89:9a:1e:2b:c3:20:35:ee:ec:ef:bf:ff:
a6:5e:28:d6:1e:4b:b5:24:08:a4:d6:7e:ee:9c:77:
d3:90:e8:04:eb:86:dc:87:ce:e1:50:54:80:4b:b0:
29:f1:46:f5:c6:e1:07:5b:e2:2d:07:0c:a7:07:5a:
a6:ee:b4:be:1c:8c:f9:57:72:f5:a3:38:03:30:35:
de:b8:8e:7a:ba:33:bb:11:f3:72:10:a1:f4:c4:51:
7f:a0:e5:f4:dc:38:5c:d4:b2:5a:f2:5d:82:df:48:
3a:ae:89:82:3d:90:f5:03:82:f1:78:10:42:b0:2b:
92:a8:ee:50:a3:4a:da:e8:de:7b:96:5a:b2:74:e7:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:C3:46:7D:16:BD:29:D5:BE:E4:76:EF:1E:FA:43:6F:20:78:16
X509v3 Authority Key Identifier:
keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.30.0/24
IPv6:
2001:df4:2c80::/48
Signature Algorithm: sha256WithRSAEncryption
be:76:73:e9:74:fe:4d:cb:4b:d9:5e:09:3a:61:35:c1:60:c6:
27:c4:8d:c1:9b:a9:b5:6e:ec:47:c8:98:93:17:93:99:bd:39:
37:28:2b:be:b4:0d:04:9f:3e:6d:23:94:93:0e:7f:76:68:2b:
f5:d4:09:7d:cd:a6:75:ac:1d:c8:12:ea:e9:0c:de:9a:f5:97:
07:9e:1a:75:df:85:8a:eb:f2:57:a0:12:40:73:4a:e0:99:d5:
a0:a7:93:8a:45:ca:9c:17:16:48:0d:2c:ea:30:fc:f0:99:27:
b3:cc:f0:c4:07:ea:2b:6e:15:6a:f4:02:47:f6:9f:3f:03:b7:
bf:6f:03:96:5a:50:68:98:9d:05:8c:b3:9f:35:37:38:b1:31:
d4:4c:b1:f5:49:44:33:db:ef:94:a6:0a:40:a7:2e:e4:c2:91:
8e:ae:8c:bd:ce:b2:40:89:0b:70:b9:e0:3b:be:e0:61:07:66:
67:0e:0d:e9:47:60:b0:fe:7f:98:7c:a5:2b:01:32:2b:04:5b:
e2:0c:70:c1:1b:e1:34:fb:f0:9b:a9:ea:6f:63:b8:38:a7:3f:
28:01:06:cb:b3:d6:e2:b6:ec:10:85:a3:28:5f:7a:44:c7:f9:
31:2d:8e:a1:6d:8f:27:24:3f:dd:64:69:f5:95:c5:6d:3a:95:
5b:9d:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:27 2026 by rpki-client