
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa
File: 0853E998C45711F080167D38C4F9AE02.roa (raw, json)
Hash identifier: q06BkXWxrAKL8dfnFJAQ0hKBleWRtfFz0FU/k9ATOTo=
Subject key identifier: 4A:BA:2D:E1:CC:BC:50:F9:9A:B3:82:8E:A9:8D:8C:18:54:28:A4:2E
Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial: 3C
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:03:30 +0000
ROA not before: Tue 18 Nov 2025 08:17:33 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.139.114.0/24 maxlen: 24
103.139.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Validity
Not Before: Nov 18 08:17:33 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3d6b2-b056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:50:1b:d0:21:87:f8:ac:a6:5e:61:7d:7b:
39:d0:c3:ce:ea:c8:8a:8f:f1:ef:96:e6:ca:c9:c8:
42:46:db:d6:75:d7:61:0f:c1:f4:0b:ed:01:0f:90:
62:fc:e3:f7:31:84:65:ec:a6:9b:f8:b9:af:9b:19:
8f:85:4c:1a:88:eb:25:97:ef:7c:e5:5b:a8:46:1e:
ee:ef:7e:60:93:f6:87:70:da:af:32:58:04:de:95:
bd:74:21:c6:0f:17:9d:d3:56:94:ba:19:b1:c0:48:
b7:f5:6d:a4:9a:15:52:4d:67:0e:e2:4c:61:d5:d8:
5f:d1:0e:ee:64:71:51:51:f0:1e:a0:12:d3:68:68:
80:e0:23:86:4a:d5:57:02:e4:c0:e8:04:da:59:55:
cc:0f:d4:0b:e0:40:46:0b:e8:b1:a3:0f:44:7e:f6:
d0:e7:0c:34:c9:42:bf:79:07:14:2a:14:04:32:9f:
c5:7b:07:fa:6f:62:44:69:54:c8:06:91:5a:53:42:
1b:05:af:77:77:cb:20:6e:0f:fb:cf:00:49:3b:f5:
43:1d:07:9d:ce:15:06:81:5f:b0:50:7b:84:b7:21:
6d:21:f7:8f:bf:8d:e8:cd:ba:fd:3f:6c:a4:67:bc:
07:16:f3:16:32:5c:e0:59:00:c9:92:17:0e:f1:c7:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BA:2D:E1:CC:BC:50:F9:9A:B3:82:8E:A9:8D:8C:18:54:28:A4:2E
X509v3 Authority Key Identifier:
keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/0853E998C45711F080167D38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.114.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:08:3c:57:06:4d:61:1e:43:ef:1d:34:74:d4:c0:6b:6b:c7:
67:36:57:cb:99:80:bb:df:85:75:33:57:55:89:bc:7c:01:05:
62:40:38:e3:03:f4:68:63:05:55:9b:5f:95:d6:4a:f5:2a:60:
d4:68:92:74:56:3c:0a:06:d4:4c:76:92:bf:38:98:f6:ed:49:
e8:03:a9:2c:c2:b4:e6:4e:aa:7c:f1:37:ee:54:0c:40:3c:4d:
9f:30:5d:32:a2:85:b1:84:f8:d1:3a:01:87:3c:93:48:f3:c9:
ee:d8:01:ac:07:d1:94:70:07:f0:00:bd:d0:df:2f:d1:d8:e8:
e8:ab:a6:c1:58:e9:88:3c:5d:86:d7:c7:44:51:43:cb:46:83:
09:fb:81:99:f8:c1:38:20:df:0f:88:be:e6:5f:b1:95:e1:5a:
2b:52:3a:a3:71:f5:f7:a3:31:bd:ac:c8:69:00:78:ee:ac:c6:
cc:24:6c:22:44:43:e3:6c:99:02:40:e1:1b:43:5a:89:bc:ef:
1a:ab:56:1b:2e:85:7c:00:df:b0:cf:56:e2:ce:dc:9e:ca:2d:
c5:d3:97:5c:ab:bb:16:9a:29:6f:68:2b:be:8c:60:70:0c:3e:
a5:33:35:c8:87:8b:b2:7e:8b:1f:37:fb:97:16:29:10:23:0b:
4b:fc:ee:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:54 2026 by rpki-client