
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0CEDBB72922111F0A04C537CC4F9AE02.roa
File: 0CEDBB72922111F0A04C537CC4F9AE02.roa (raw, json)
Hash identifier: NRcv13qFngKSzpqLfBPE6KuwtKL2GwqL9Zh94d8ntTw=
Subject key identifier: 20:D6:18:B2:4E:A4:16:98:F8:E0:25:61:E0:E4:0E:04:4A:83:0C:2F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2D1D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0CEDBB72922111F0A04C537CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:27:07 +0000
ROA not before: Tue 16 Sep 2025 11:15:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 55453
IP address blocks: 103.151.26.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
202.92.22.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11549 (0x2d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 16 11:15:59 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4af2b-1714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c8:1c:23:f3:40:20:f2:21:d3:cf:8c:d9:56:
6b:f4:b1:fb:b0:ff:b4:a1:98:73:99:d8:aa:e9:e4:
52:a0:84:bb:76:47:1a:17:0c:65:6c:7c:ad:35:04:
ca:24:16:4c:be:bc:cd:7d:07:2a:a6:1a:5f:ad:31:
b4:dd:2c:a0:c9:49:9e:3a:3e:d5:19:89:45:c8:f6:
62:07:b2:5a:55:7a:1b:85:c5:49:3d:99:8e:e4:c1:
e3:94:98:89:ea:e8:e0:e9:18:30:1c:30:fe:b9:d4:
ad:c4:bc:f0:09:b2:d7:c7:83:54:10:98:63:ab:6b:
b8:a4:76:fe:0e:c9:82:45:c7:3f:2b:a5:f8:1c:cd:
e3:e4:b6:0c:8c:7c:31:4c:7a:9e:13:1f:4b:a2:8e:
88:2a:89:b1:e6:3a:b8:ea:e7:bb:eb:e8:e7:f9:d1:
9c:d9:66:00:0c:8a:f1:c4:2e:3a:15:5c:f5:57:a1:
8d:3c:01:79:b2:35:f7:07:2e:96:56:9b:4f:9d:60:
58:f2:0b:71:00:0f:45:cc:b2:12:60:98:91:62:7d:
62:dd:36:71:d9:84:a9:ed:9f:a6:b4:3a:78:09:73:
dd:0c:87:37:c1:f0:17:19:dc:a8:d4:a3:30:5e:61:
81:ec:bc:7f:d6:d5:0e:dc:e3:ac:fd:1f:48:be:45:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D6:18:B2:4E:A4:16:98:F8:E0:25:61:E0:E4:0E:04:4A:83:0C:2F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0CEDBB72922111F0A04C537CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
113.203.242.0/23
202.92.22.0/24
223.29.225.0/24
223.29.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d1:71:6b:0e:29:07:f0:39:94:63:5d:85:10:31:34:43:5d:
71:98:ec:c7:72:8d:e1:f0:5c:60:48:fb:55:e9:21:d1:e3:ac:
bd:e4:8a:42:92:38:4d:a6:05:ab:a7:41:8b:44:32:24:aa:83:
ea:d1:54:5f:dd:3b:96:d0:dd:bd:07:33:35:19:75:8e:de:05:
48:44:ab:6f:fe:87:b7:7d:c6:c1:76:38:d0:8c:4f:a5:e4:e6:
b5:59:99:58:7a:34:93:79:3c:60:76:b4:a6:ed:64:16:cb:4c:
fb:88:ad:71:d6:9f:b6:cb:9b:7d:02:da:2e:de:b7:36:40:b2:
6a:79:55:a9:60:e3:c5:73:de:7a:16:22:0a:fb:3e:ae:84:0f:
5d:23:f4:00:bd:46:2d:22:ec:a8:f2:49:21:b0:82:17:d3:36:
92:fc:0d:0c:3d:53:8e:df:d7:cb:92:17:e8:b6:3a:09:c9:71:
1c:72:95:0e:01:f4:b3:8b:7e:aa:8f:94:b4:a4:2a:ea:dd:a9:
5a:b6:54:6f:18:3f:e4:fd:95:77:c9:b4:0e:7e:e7:fc:87:5e:
26:85:97:ae:45:9f:43:40:b6:83:50:93:ba:ed:eb:b9:12:6a:
1f:c5:1d:d0:3e:28:5a:0d:5d:e2:4b:28:8f:85:5a:a9:bc:79:
52:46:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:08 2026 by rpki-client