
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0294E1EADB0D11EE88489759C4F9AE02.roa
File: 0294E1EADB0D11EE88489759C4F9AE02.roa (raw, json)
Hash identifier: 9DZA6kPOIrAY8e4rFQK1pMOYRt3f89rfc69PwA3YKl4=
Subject key identifier: 8D:8C:01:DA:83:9B:31:44:7A:D0:ED:A3:6B:AA:7F:D7:E3:42:6B:53
Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial: 0524
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0294E1EADB0D11EE88489759C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:07:42 +0000
ROA not before: Sun 05 Oct 2025 00:26:43 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152151
IP address blocks: 103.152.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Validity
Not Before: Oct 5 00:26:43 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4806e-8187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:27:1f:b8:69:e5:f6:db:6c:96:9d:44:49:
d4:14:49:6b:46:4b:a4:64:14:de:1f:68:e9:3d:b4:
76:11:ea:38:60:2c:00:81:2a:d8:ed:74:55:18:98:
4e:e1:09:b5:b7:51:f8:fa:94:41:30:c5:37:9c:26:
c3:d4:61:9b:7a:63:68:67:6a:5b:3a:f8:1f:3d:db:
bc:78:ee:46:85:37:47:25:a0:c3:ef:33:2c:3f:d5:
ba:0c:cd:35:78:42:3d:4d:09:ee:22:9e:66:d7:19:
cb:52:79:99:4f:80:31:3b:dc:ea:45:42:26:71:e2:
c2:cd:b4:c8:8a:3a:f0:31:f9:47:5e:7e:f6:11:0c:
39:42:26:43:53:52:10:e2:fb:98:8a:3a:84:fd:ed:
c8:77:8b:0f:96:cd:b6:74:ac:ad:14:ff:4e:7d:de:
8b:6c:28:e1:30:8b:e4:3b:06:69:04:53:ad:dd:1d:
cb:65:94:25:42:e1:45:5e:06:fa:2b:43:6b:4c:45:
c4:c0:e9:ab:5b:54:cd:1f:74:f9:da:39:df:af:84:
3d:11:e6:27:e1:97:6c:f1:1c:fd:35:b4:f4:b9:bc:
46:9e:47:c3:05:3f:50:97:c7:64:3e:87:d1:9d:7d:
4b:c2:7b:30:9c:c7:04:75:b6:2a:70:7e:8a:74:d6:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:01:DA:83:9B:31:44:7A:D0:ED:A3:6B:AA:7F:D7:E3:42:6B:53
X509v3 Authority Key Identifier:
keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0294E1EADB0D11EE88489759C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.117.0/24
Signature Algorithm: sha256WithRSAEncryption
35:36:70:48:54:1a:79:99:ba:3e:35:96:5d:bf:95:5a:50:e1:
77:4e:fa:48:9b:d3:98:7d:68:19:b6:e8:9a:58:79:86:ba:bb:
06:af:2c:c0:5c:b9:01:dc:6b:97:8b:57:3d:74:db:1b:2b:06:
41:d5:bb:ff:8f:fc:cf:d8:b0:2d:6a:f3:cc:f3:a3:6f:44:57:
3e:30:7a:69:0c:3c:c9:27:d0:c6:75:12:11:e2:50:b1:e0:4c:
52:e7:dd:da:a3:3f:85:bb:a2:6a:5c:09:f8:19:01:23:6d:74:
7e:12:ab:89:9d:22:17:40:81:8a:d9:01:23:08:d4:f4:c7:83:
fa:ad:47:74:0d:5e:e3:06:8d:60:d8:c5:d6:8f:eb:2b:9c:81:
3c:a3:fa:94:82:c2:a4:c2:33:c8:43:10:60:ae:72:39:8c:9f:
2b:67:52:b6:6a:7c:9e:86:4f:f4:04:c6:3c:1c:47:e5:fc:b4:
d1:48:57:61:69:d3:94:f4:a9:b1:41:27:c7:c2:97:0b:24:6a:
97:e2:ac:66:16:f7:03:36:ba:9f:df:cd:0c:ef:cd:b2:f8:ef:
2a:f1:69:39:46:23:4a:4d:f8:43:29:02:00:ca:e4:f4:ae:ea:
81:6f:06:6a:ed:81:67:35:2f:e6:cd:e9:95:01:dc:72:4f:d0:
c7:64:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:10 2026 by rpki-client