
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/150C1686283511EDABF49D69C4F9AE02.roa
File: 150C1686283511EDABF49D69C4F9AE02.roa (raw, json)
Hash identifier: LLGJ17Nou/4s6iU/phgh61bl/Dsvbl9fuqtoB8+Y6Fw=
Subject key identifier: C6:19:36:56:53:1C:83:5E:BB:61:3D:57:39:38:D1:F8:CB:08:9A:3F
Certificate issuer: /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
Certificate serial: 02C9
Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/150C1686283511EDABF49D69C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:08:03 +0000
ROA not before: Wed 13 Aug 2025 02:39:11 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150182
IP address blocks: 103.209.108.0/23 maxlen: 23
103.209.108.0/24 maxlen: 24
103.209.109.0/24 maxlen: 24
2001:df1:31c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl
rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
Validity
Not Before: Aug 13 02:39:11 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a401f3-cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:16:b0:ce:be:a1:04:51:4c:36:bf:5d:52:
b6:3e:50:43:9d:51:72:d3:96:04:d6:86:71:35:29:
46:e9:46:52:f1:e7:52:18:83:ce:f7:15:35:bf:0d:
0b:05:18:18:3e:46:7a:6e:d8:01:43:d8:4c:62:32:
ef:90:ce:8d:63:af:21:fb:2d:f3:7b:9b:f6:25:fc:
ef:ab:0a:6e:ea:8a:61:7a:fc:26:5e:c1:1a:e0:8a:
90:d4:4f:42:5b:cd:59:f9:29:9a:27:a0:6a:45:4d:
4f:03:df:27:81:e9:4d:b0:e4:f0:34:12:6a:8d:57:
f7:ad:a4:21:90:9c:3b:b8:8c:a0:5d:fb:2c:51:de:
75:04:a9:27:f0:ca:52:6c:a5:0e:80:40:5a:81:57:
2c:92:9d:92:23:31:05:3a:0e:85:d4:59:e2:53:f7:
a7:8a:d2:c8:2d:6e:ab:c5:92:72:b2:55:9f:35:4a:
21:72:81:54:bc:a2:b2:bf:98:3f:2c:5e:91:7e:03:
cf:ff:43:56:93:5e:a9:95:e5:0f:5c:9f:62:b9:fe:
01:7a:03:cc:2c:0b:ca:4b:7b:c2:dc:35:49:c3:98:
af:cc:23:32:2b:17:80:e3:0b:06:ef:2f:ac:d0:17:
81:a0:6e:3e:0a:d4:fb:94:15:20:56:33:55:d4:a5:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:36:56:53:1C:83:5E:BB:61:3D:57:39:38:D1:F8:CB:08:9A:3F
X509v3 Authority Key Identifier:
keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/150C1686283511EDABF49D69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.108.0/23
IPv6:
2001:df1:31c0::/48
Signature Algorithm: sha256WithRSAEncryption
09:77:00:60:46:f3:ec:bb:cd:0b:be:da:52:9c:d0:66:b0:d5:
30:ce:ad:a7:a2:ef:01:b1:ce:7f:e9:cb:d5:cf:10:a0:ae:55:
27:f4:fc:68:85:d8:1f:1e:e1:60:4e:56:fa:57:2d:a6:0a:74:
28:c7:a8:bb:82:3c:6c:fa:27:72:2f:7b:a1:60:13:43:0d:89:
35:af:93:56:b5:88:6f:90:aa:30:ea:f1:2f:d9:dd:4e:6e:f0:
39:26:dd:71:82:af:9e:81:45:3f:31:ea:b4:4d:68:be:fe:30:
29:fb:8b:a3:3a:99:2c:d4:6b:50:32:e2:54:a9:98:b8:b3:97:
94:fa:16:50:df:2d:2d:af:91:f7:51:e1:3a:22:a3:ba:c8:7f:
e7:4e:10:2e:d4:f2:3c:87:ab:5d:82:5b:ef:03:ee:d1:09:2f:
70:6d:4b:63:02:2f:e4:25:9f:ce:3e:bc:f6:22:98:ec:a9:26:
cb:5b:e0:f4:47:ed:fb:72:87:27:0c:69:df:41:08:9b:41:db:
c9:b1:cb:7b:89:7c:2e:6d:15:c2:56:fa:51:12:f9:ec:54:e2:
34:eb:13:85:20:14:b9:1c:4b:8e:82:fb:df:5c:b1:82:c8:b2:
63:f6:3f:4f:2e:87:50:97:be:72:46:84:40:ce:b3:90:0a:bb:
39:af:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:04 2026 by rpki-client