
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa
File: 1489D376FB2611EFBA3F0167C4F9AE02.roa (raw, json)
Hash identifier: wMZyhnBV4sS1OoXti8AOYy1UKjGrlLJQob0X/T9aUpo=
Subject key identifier: 32:ED:AF:2D:1A:A9:5C:62:CB:DE:25:24:FD:C1:84:E2:C0:DA:71:E0
Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Certificate serial: BE
Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:00:33 +0000
ROA not before: Thu 03 Apr 2025 07:35:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135357
IP address blocks: 103.212.228.0/22 maxlen: 22
103.212.228.0/24 maxlen: 24
103.212.229.0/24 maxlen: 24
103.212.230.0/24 maxlen: 24
103.212.231.0/24 maxlen: 24
160.202.168.0/22 maxlen: 22
160.202.168.0/24 maxlen: 24
160.202.169.0/24 maxlen: 24
160.202.170.0/24 maxlen: 24
160.202.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A
Validity
Not Before: Apr 3 07:35:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3e410-68a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:fa:8e:09:b8:02:67:af:b6:23:33:40:bb:
f7:18:44:fe:bc:12:ba:f4:45:67:ce:4a:0e:82:93:
fe:f9:50:c9:e5:39:dd:7c:02:e6:e1:6e:44:76:36:
33:32:e3:29:ec:51:df:26:38:81:22:c5:eb:9b:de:
2b:f7:58:b5:fe:b5:5c:43:99:90:6a:ed:b5:7e:4f:
07:61:5e:d1:5f:bd:28:0f:ec:59:d9:34:96:a4:70:
0d:42:25:29:0c:8e:3a:43:59:9b:39:f2:79:cb:92:
e8:f1:7d:bb:0b:b4:75:50:0a:39:40:f7:1a:d8:76:
d4:0c:de:37:ae:56:d1:0a:fe:a1:db:41:12:db:e4:
04:9e:8a:86:14:fc:84:6c:73:26:24:19:13:74:78:
c6:81:2c:a3:e7:ad:94:ab:e6:00:3e:43:00:cc:3b:
a1:68:58:a1:2a:d0:63:f6:a2:3a:0b:74:cf:d4:b1:
31:2d:76:01:87:e4:d7:02:db:ff:3d:b4:5c:a8:b3:
32:f2:ea:85:47:f9:66:5c:07:91:47:62:49:e0:9f:
ae:69:ab:df:eb:e7:62:c4:e9:f6:9d:d6:1c:76:58:
e7:8c:63:7a:e4:e1:39:ad:dd:81:bc:b2:d1:fa:d5:
ed:70:0d:87:4a:f2:35:e1:ff:3e:b6:67:20:92:92:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:ED:AF:2D:1A:A9:5C:62:CB:DE:25:24:FD:C1:84:E2:C0:DA:71:E0
X509v3 Authority Key Identifier:
keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/1489D376FB2611EFBA3F0167C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.212.228.0/22
160.202.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:5b:0e:6e:cc:85:4a:96:e0:9e:80:2f:fd:ec:01:3c:a3:71:
e2:05:32:91:56:eb:fb:7b:a2:55:bd:5e:3a:d9:d6:f0:50:77:
93:7d:e4:a3:c1:d3:64:4a:f2:56:87:ad:1d:c7:ac:5e:17:93:
6f:f8:77:3b:5f:5f:c4:9b:dc:f2:a5:c8:3d:0b:14:4a:9d:1e:
b7:dd:3b:68:89:d2:2b:29:dc:36:2d:b7:29:74:e0:f2:c3:d6:
77:3f:5f:24:61:59:83:b5:1d:3b:81:a7:e5:57:ae:e1:e0:50:
25:2f:bd:35:85:0d:49:02:e2:5b:77:f6:06:51:fb:bb:14:5d:
5e:1c:88:c7:89:e7:76:fa:a7:0e:19:44:90:bf:ab:fe:6d:ca:
a1:4e:c6:ab:e6:35:43:e1:f1:76:6a:cc:eb:b0:e5:91:ba:b9:
45:24:1d:21:c0:aa:c8:aa:12:57:17:10:6f:31:36:b0:32:8a:
81:ac:5b:f8:b7:3c:fa:ed:2f:01:a3:37:24:d7:ab:d4:e0:6f:
46:9d:55:c3:5e:89:83:d5:78:da:5e:be:37:b4:2d:25:e0:88:
ce:9d:68:d1:ce:5e:e1:2d:78:b0:e4:89:b9:f4:0f:d4:a7:fb:
14:9e:0f:6c:63:b9:93:6e:f5:e3:27:27:65:f6:c6:1f:f9:56:
64:10:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:23 2026 by rpki-client