
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
File: 654307DC26CC11EDB395A078C4F9AE02.roa (raw, json)
Hash identifier: Q48Y/wp7RhZuuL2sntpKBoS0Dfa5UCP/oik4uhuXQww=
Subject key identifier: BE:6B:78:32:35:A4:17:6B:FA:8F:45:1B:1F:47:88:EF:77:70:84:77
Certificate issuer: /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial: 02D2
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:29:04 +0000
ROA not before: Wed 03 Dec 2025 00:29:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139651
IP address blocks: 103.142.212.0/23 maxlen: 30
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Validity
Not Before: Dec 3 00:29:29 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59eb0-9199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:9e:80:8c:20:da:0e:99:c0:9a:b5:49:62:
28:f2:4f:f9:b5:69:5e:aa:2b:f1:02:45:02:b6:35:
b8:05:c8:5c:d6:f3:36:8b:e3:a6:32:20:82:49:d5:
71:66:20:f4:b4:33:d2:00:32:1f:3c:91:f0:8f:c1:
0e:50:b4:a8:0b:23:d6:d0:79:da:db:9e:62:31:0e:
14:97:c0:56:16:f0:2a:ca:b0:0a:43:f9:1d:f5:fc:
65:ef:6c:1b:ab:01:33:b8:b7:26:11:e7:30:59:fd:
0b:00:50:e7:d5:94:0f:57:55:23:aa:e0:70:d4:41:
78:30:e6:17:a8:c6:57:e0:db:17:1b:0c:74:d8:6e:
2b:10:38:b7:1d:2e:44:b3:2c:e4:5d:ce:10:46:e6:
6e:a3:71:e9:25:5e:fd:ab:a0:71:9c:1c:a6:fb:d9:
76:40:ec:9e:d7:25:d8:8c:fe:56:67:72:a5:e2:10:
2c:ff:27:ef:ad:c8:49:59:56:15:30:ca:d5:04:f7:
7c:9d:05:bc:58:2f:46:28:10:a2:f1:c9:76:0f:96:
07:29:dc:b7:58:14:12:20:74:af:7e:10:f8:87:c6:
ab:4a:58:ab:8e:54:e1:d1:c6:76:30:4d:16:a3:d4:
8a:f1:99:ca:67:76:e9:4f:1b:1a:e4:eb:8c:c4:b8:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:78:32:35:A4:17:6B:FA:8F:45:1B:1F:47:88:EF:77:70:84:77
X509v3 Authority Key Identifier:
keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.212.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:b0:e4:b9:e8:09:05:a8:f7:b8:cd:f8:ac:17:79:b9:3c:06:
85:b0:5f:82:d3:a3:69:22:2f:cf:fc:c2:9a:c5:72:a5:86:ed:
21:7a:92:75:be:d3:6f:f3:95:93:f5:3f:89:b8:14:6f:ed:c8:
f8:41:a2:30:ef:a2:2b:b8:c1:c8:47:d2:7b:49:25:96:6a:a3:
f2:f2:19:34:47:b5:b4:63:19:07:a2:01:ef:56:a1:bb:4e:7a:
08:ed:5d:2a:65:db:7b:83:75:1b:90:3d:fa:6d:c5:0f:b9:ab:
48:fa:ce:8d:e3:73:5c:b2:e6:41:ea:61:cd:5c:3b:47:a6:b4:
5f:a2:33:e7:5a:95:8e:35:ad:57:5d:61:ed:6d:78:1e:51:22:
a2:1d:37:8d:3c:b2:74:79:ee:41:87:0e:2f:13:e3:c3:0f:36:
c7:ed:0a:ec:57:f5:83:ec:eb:c6:47:3b:c9:85:2a:0e:93:55:
43:f8:b2:65:91:2d:a8:8d:28:06:d0:ec:f4:9b:61:0d:51:32:
1f:cd:3b:01:d7:31:74:df:22:5a:23:9e:6d:1c:c5:cd:fb:b8:
c0:c3:9a:40:98:e7:fe:4d:77:70:97:ca:f7:1a:c6:ba:9b:2d:
9b:7b:aa:fc:b0:b3:ac:2a:5d:9e:85:07:46:3b:b4:f2:63:40:
88:1f:8a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:27 2026 by rpki-client