
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
File: 87A141747A5511EBA4258A7DC4F9AE02.roa (raw, json)
Hash identifier: RrvKz+k3BpE474LEsBiK8GJqBSWh6Od/xbLaF5t2LA4=
Subject key identifier: 4B:90:80:F3:9A:92:78:5D:FF:1C:1A:47:0E:3E:CB:49:AD:18:EC:D9
Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial: 09CB
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:22:49 +0000
ROA not before: Wed 02 Jul 2025 20:59:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132825
IP address blocks: 103.151.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2507 (0x9cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Validity
Not Before: Jul 2 20:59:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a475e9-716e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:f8:6d:45:93:f6:d6:e5:a0:98:08:8c:bd:
eb:ff:1d:ce:a8:8c:77:a5:bb:e3:1f:b4:cf:cc:58:
3f:1b:12:d4:65:40:b3:75:87:e5:e6:1e:47:0b:99:
40:b0:b0:6f:fe:78:cd:14:0b:7c:31:d9:ef:8f:b4:
72:c6:e9:e1:7b:72:07:5a:7f:6b:dc:2d:b1:b8:fc:
f7:4f:e0:84:a9:1a:ed:8c:da:68:47:8c:18:b9:06:
8a:87:53:cc:52:38:ef:55:7e:d7:9f:26:8e:10:64:
4b:df:f2:50:dd:19:e1:ee:02:40:3a:b8:e8:15:be:
a4:ff:7b:62:ec:2b:af:88:fe:6e:f9:73:05:52:f9:
aa:50:3c:a7:96:eb:e1:bc:10:c4:2d:38:25:8d:63:
f6:3e:bb:db:46:b0:8a:fa:34:94:b1:75:d6:3a:b0:
bb:36:94:3e:b3:2d:a9:db:e8:b6:0b:7c:90:ae:53:
24:df:4c:44:ac:76:0c:39:c5:ca:44:f0:72:42:e9:
b9:8a:0c:71:7d:b3:54:50:fd:7b:ba:23:b8:16:ca:
92:d5:9b:9c:fe:0a:35:d6:0c:8d:a0:9a:24:5e:ee:
e1:99:9a:53:e4:af:5c:fd:b4:5a:ca:ac:ce:29:49:
59:07:20:9c:6f:df:e7:76:f0:cd:b5:87:70:d5:30:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:80:F3:9A:92:78:5D:FF:1C:1A:47:0E:3E:CB:49:AD:18:EC:D9
X509v3 Authority Key Identifier:
keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.216.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:fb:6e:f7:b9:14:f2:d0:fe:5d:fd:c0:24:aa:e0:dd:14:81:
04:f7:c5:88:10:c5:1c:d1:1d:4b:d6:cd:b5:9a:5f:db:05:8a:
f2:b8:51:29:59:a0:2f:6f:22:89:cc:ff:59:bd:e1:62:6c:f8:
8f:8f:10:2d:a0:33:a6:f9:c8:46:8e:88:c6:79:17:3b:0c:64:
14:68:9c:7f:89:4c:f3:e9:f6:d9:d7:e6:d9:49:cd:c1:2b:2b:
b9:fb:f5:a4:86:64:23:17:0a:83:0d:df:f4:57:c5:5a:74:ac:
d0:93:10:99:84:bc:2d:71:dd:f5:a6:4a:e3:4d:39:ed:94:0d:
63:a1:5b:3e:9b:f6:af:2d:43:8f:c1:1c:8b:60:cf:b2:da:da:
49:d3:fb:c1:26:9e:b9:15:fd:24:ff:bc:f9:03:77:1f:69:ef:
8e:36:e0:c6:5f:35:a0:69:9e:c9:a7:47:66:39:d5:95:d6:ca:
50:5e:2d:52:31:22:74:29:85:63:e1:14:67:66:77:d4:4c:a6:
dd:aa:2d:12:63:0f:3b:89:5f:6b:8a:08:2a:75:8c:a8:62:bc:
fb:13:6b:9d:f6:6e:98:6f:59:85:db:9f:1a:f4:1a:f9:fd:26:
ff:f4:48:90:ab:ce:29:c1:65:ae:ec:89:bb:6c:09:f5:bc:80:
12:ef:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:07 2026 by rpki-client