
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ECC7CA2EF1AA11F0885E8853736F56BC.roa
File: ECC7CA2EF1AA11F0885E8853736F56BC.roa (raw, json)
Hash identifier: oWetRFPONyPjhz2G1P+9aSesJu8FRJYWjRGlV512qhk=
Subject key identifier: FA:F2:CB:A6:6E:F7:7C:D3:CD:1E:4E:38:03:05:DE:81:B7:8F:C9:74
Certificate issuer: /CN=A91E4743/serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
Certificate serial: 1E
Authority key identifier: FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ECC7CA2EF1AA11F0885E8853736F56BC.roa
Signing time: Sun 01 Mar 2026 18:25:36 +0000
ROA not before: Thu 15 Jan 2026 00:41:27 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140865
IP address blocks: 103.152.154.0/23 maxlen: 24
2001:df4:1380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl
rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4743, serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
Validity
Not Before: Jan 15 00:41:27 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a484a0-1551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:58:cb:4e:c5:22:a4:c6:58:1f:ad:c6:52:
b3:d8:e0:4a:f7:7e:3f:7c:13:b5:f7:82:3e:f0:a7:
dd:23:df:36:57:4d:ff:81:7a:fe:ea:b1:0f:9f:12:
8a:57:84:b6:5b:93:55:55:a3:9a:6b:8f:be:68:2c:
63:b3:02:51:3a:6a:5a:33:dc:c8:00:23:78:da:d1:
d1:f6:54:fc:2e:20:79:90:07:70:e5:e0:55:75:4d:
69:44:06:a8:54:4d:08:06:48:ae:57:af:cb:22:0f:
83:d1:61:59:22:ae:09:93:b5:af:95:d4:9c:59:68:
49:4a:8d:23:3a:01:0f:1a:45:f2:65:cf:c2:ce:a0:
6b:13:5d:90:e8:5a:b9:3f:5a:31:63:aa:ba:e7:0b:
a1:a5:1c:be:95:c1:70:ba:26:b0:77:3b:02:42:a7:
60:86:53:47:9c:db:da:b7:f8:aa:30:e0:88:bf:70:
81:56:d7:e4:fb:81:ac:4e:6a:10:b0:16:99:5c:78:
1f:5e:6e:98:f0:14:bc:a2:9d:39:88:15:6b:cf:31:
47:6f:42:f2:66:f4:0a:9b:27:b0:de:fa:94:b4:ff:
ad:ba:4c:e7:cc:85:77:d2:42:8d:02:54:c1:39:54:
11:2f:19:04:77:43:74:5c:78:96:ea:75:0e:80:1a:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:CB:A6:6E:F7:7C:D3:CD:1E:4E:38:03:05:DE:81:B7:8F:C9:74
X509v3 Authority Key Identifier:
keyid:FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ECC7CA2EF1AA11F0885E8853736F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.154.0/23
IPv6:
2001:df4:1380::/48
Signature Algorithm: sha256WithRSAEncryption
9d:9a:5c:fd:1e:26:7a:b3:69:55:d8:8f:86:f8:19:51:56:35:
89:b0:7f:62:dc:4a:6b:24:d7:e7:65:61:f3:c1:d3:6a:a9:7a:
90:48:cc:fd:e0:c4:6f:7a:8a:02:8f:0f:46:e9:92:4f:fe:69:
51:3b:10:09:1e:ad:1a:29:20:49:4b:dd:02:32:1e:09:b1:a4:
5e:0d:05:30:5c:32:77:b6:85:b1:f2:5c:2a:d0:3e:da:7d:16:
8b:ad:2f:6e:f5:7f:66:2f:13:65:b7:af:bf:c3:a5:5c:8b:9d:
cd:ad:f0:1a:6d:08:28:7a:5c:86:97:36:58:39:c8:b1:c8:3c:
36:4b:a8:12:ac:b8:00:1d:36:9e:98:44:9b:43:70:a8:5d:09:
b1:08:12:f1:85:a5:95:fd:fa:b7:71:6d:fc:a6:82:ec:a8:26:
8d:44:57:d0:24:9f:ef:8f:d2:63:45:d9:47:44:7d:a2:c4:07:
b1:e8:2b:63:d2:b7:29:94:73:96:9a:80:86:65:50:14:2b:4e:
ba:b0:db:b3:72:c1:e2:20:29:43:ce:bb:82:f9:d1:91:23:59:
a0:2e:93:86:81:00:3b:e5:d4:ae:dd:e0:ee:3e:86:5b:b1:21:
c7:c8:e9:c1:12:06:b9:3f:32:69:df:d0:e0:2b:d8:6f:cb:47:
17:28:2a:8c
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NDc0MzExMC8GA1UEBRMoRkE3RURFN0I2MkI0N0I4N0REMTM5ODZBOEU3MkMzRkUz
NjU2QjVDQzAeFw0yNjAxMTUwMDQxMjdaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTQ4NGEwLTE1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsSVjLTsUipMZYH63GUrPY4Er3fj98E7X3gj7wp90j3zZXTf+Bev7qsQ+fEopX
hLZbk1VVo5prj75oLGOzAlE6aloz3MgAI3ja0dH2VPwuIHmQB3Dl4FV1TWlEBqhU
TQgGSK5Xr8siD4PRYVkirgmTta+V1JxZaElKjSM6AQ8aRfJlz8LOoGsTXZDoWrk/
WjFjqrrnC6GlHL6VwXC6JrB3OwJCp2CGU0ec29q3+Kow4Ii/cIFW1+T7gaxOahCw
FplceB9ebpjwFLyinTmIFWvPMUdvQvJm9AqbJ7De+pS0/626TOfMhXfSQo0CVME5
VBEvGQR3Q3RceJbqdQ6AGgxfAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU+vLLpm73
fNPNHk44AwXegbePyXQwHwYDVR0jBBgwFoAU+n7ee2K0e4fdE5hqjnLD/jZWtcww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzQzLzY3MEY4MDkyQkI2
RjExRUE5NjFGQjg0RUM0RjlBRTAyLy1uN2VlMkswZTRmZEU1aHFqbkxEX2paV3Rj
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLW43ZWUySzBlNGZkRTVocWpuTERfalpXdGN3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDc0My82NzBGODA5MkJCNkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9FQ0M3Q0EyRUYx
QUExMUYwODg1RTg4NTM3MzZGNTZCQy5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBAFnmJowDwQCAAIwCQMHACABDfQTgDANBgkqhkiG9w0BAQsFAAOCAQEA
nZpc/R4merNpVdiPhvgZUVY1ibB/YtxKayTX52Vh88HTaql6kEjM/eDEb3qKAo8P
RumST/5pUTsQCR6tGikgSUvdAjIeCbGkXg0FMFwyd7aFsfJcKtA+2n0Wi60vbvV/
Zi8TZbevv8OlXIudza3wGm0IKHpchpc2WDnIscg8NkuoEqy4AB02nphEm0NwqF0J
sQgS8YWllf36t3Ft/KaC7KgmjURX0CSf74/SY0XZR0R9osQHsegrY9K3KZRzlpqA
hmVQFCtOurDbs3LB4iApQ867gvnRkSNZoC6ThoEAO+XUrt3g7j6GW7Ehx8jpwRIG
uT8yad/Q4CvYb8tHFygqjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:04 2026 by rpki-client