
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa
File: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (raw, json)
Hash identifier: Pg8G/Pvu/vL6s07U9VvSZMPJr+p68tGkbJJnBYeyeQA=
Subject key identifier: 0B:2D:8F:97:EA:F0:65:5B:60:5F:83:DF:87:A4:C9:C6:77:B2:B2:A9
Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
Certificate serial: 06F5
Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:32:58 +0000
ROA not before: Fri 17 Oct 2025 00:02:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139592
IP address blocks: 103.142.32.0/24 maxlen: 24
103.164.6.0/24 maxlen: 24
2400:e5a0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl
rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
Validity
Not Before: Oct 17 00:02:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a431fa-44ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:30:36:f6:a4:3b:4c:a8:1b:6a:2d:c4:4a:
c8:d2:b3:63:a3:c2:28:54:bc:91:2e:41:33:28:63:
1c:06:89:eb:c2:82:50:6f:3a:53:a0:ad:6d:eb:e4:
53:54:c3:7c:1f:70:8a:2a:da:86:19:86:c7:6b:3b:
12:14:a9:87:d1:7c:29:0a:23:90:3f:cd:28:ef:fd:
32:62:99:16:f3:01:1d:d9:10:05:72:6b:86:81:62:
d2:e5:25:dc:11:c4:29:0b:23:9a:45:c6:a5:10:c2:
96:27:8d:93:54:4e:8a:66:b0:a9:3b:8a:b0:71:bb:
2a:54:2a:4e:ee:7c:73:4d:c4:7e:d6:2f:17:f1:79:
09:c9:6c:e2:42:3b:10:33:ed:6f:40:e4:8d:08:74:
1b:d6:4d:46:5b:1b:82:0f:31:96:40:32:03:80:b1:
01:fe:63:1c:84:97:b2:21:d0:7c:fe:fe:a2:24:0a:
45:ff:d0:99:33:a4:0b:fd:da:99:79:44:8a:a8:9a:
fe:cf:5d:ae:43:2c:47:f4:f4:11:61:7e:1d:1a:b1:
3c:e6:85:ae:af:4f:0c:09:d8:57:b8:1f:ec:25:ec:
bc:ab:26:0a:61:59:a8:91:93:7c:6b:b9:63:b4:e6:
d3:a2:fe:8c:6e:36:7e:03:4f:f8:c4:d8:47:fc:de:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2D:8F:97:EA:F0:65:5B:60:5F:83:DF:87:A4:C9:C6:77:B2:B2:A9
X509v3 Authority Key Identifier:
keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.32.0/24
103.164.6.0/24
IPv6:
2400:e5a0::/32
Signature Algorithm: sha256WithRSAEncryption
85:90:df:95:e7:e6:22:52:ef:0b:dd:8c:f9:7e:00:0f:ef:4d:
4c:01:60:f8:ab:f5:43:8e:b3:19:55:42:b2:85:26:71:51:23:
2e:41:6c:57:5e:74:2b:68:a5:eb:f6:83:c5:08:aa:00:e8:ab:
df:b7:d3:10:a4:13:90:46:17:d0:2f:e6:12:f0:14:08:28:36:
3a:f4:21:72:35:e7:b6:45:c6:bc:c1:61:1d:d1:84:21:2b:a0:
6f:d3:03:a4:72:b7:0f:7c:97:b5:e7:ef:58:40:6b:de:9e:73:
70:b6:f6:5f:df:ff:df:29:ce:e3:ff:ed:69:90:cc:66:80:c6:
a4:09:98:65:91:6d:df:ec:54:89:0c:2b:ea:b5:6f:03:89:11:
bc:27:1a:f4:ff:18:52:3e:c7:01:5b:4c:87:5b:d0:76:52:f1:
83:d7:13:be:73:49:97:fa:f4:9e:fb:58:ef:6c:87:0a:07:d3:
b1:46:dc:66:28:19:fc:3d:de:9a:da:e7:e8:79:bf:a6:ef:28:
e3:a6:84:6e:7f:bb:c9:c4:6b:fb:f1:a3:d8:8a:dd:ca:b9:eb:
aa:77:16:f1:51:5b:1b:01:9f:71:d8:3b:3f:dd:bc:94:c8:88:
c1:8e:8d:fe:8c:18:f6:51:78:bd:30:e8:6b:42:bb:00:9f:f2:
43:44:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:58 2026 by rpki-client