
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/4DC69458F51C11F0B1C1D2E9586F56BC.roa
File: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (raw, json)
Hash identifier: QcCJl1UfRJP0/shxvSvEBu5HkTvWkijjCe1nldV+mo4=
Subject key identifier: 5B:9F:29:53:CD:E5:8B:5C:7A:63:C3:4F:F6:CA:91:5B:D3:98:8E:3F
Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial: 0187
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/4DC69458F51C11F0B1C1D2E9586F56BC.roa
Signing time: Sun 01 Mar 2026 17:53:17 +0000
ROA not before: Mon 19 Jan 2026 09:50:36 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153473
IP address blocks: 103.15.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Validity
Not Before: Jan 19 09:50:36 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47d0d-261d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:5b:45:48:89:3a:47:af:4c:e1:f6:9d:68:
b8:6a:33:ba:87:48:20:7c:9e:b3:1e:9e:b7:ec:4c:
11:dc:bc:22:45:c4:15:70:7b:4f:bc:2f:5d:64:08:
86:37:b1:7b:25:5e:ea:3e:de:8d:7c:19:65:d3:7a:
d7:bb:93:69:de:d5:a8:9c:9c:54:41:95:f7:a9:17:
f2:73:7e:7c:38:8f:f8:eb:fe:77:7f:33:b4:26:6c:
f4:7b:3c:bd:c1:01:9e:d6:31:29:30:f5:b1:38:f4:
13:13:b1:f5:81:56:7f:47:7f:8a:5a:8f:10:24:e0:
59:31:6a:32:72:09:75:ad:64:59:6a:ef:f7:9b:4d:
3a:23:c6:39:13:df:ac:65:8b:87:71:9e:a5:26:51:
c6:06:40:b9:13:53:dc:36:21:34:d3:2c:d2:91:73:
40:eb:2d:ae:3f:ed:dd:07:38:7a:01:2b:af:fd:7c:
87:f0:bd:5c:1a:7a:5a:38:34:82:ab:39:d1:19:af:
4a:37:2a:20:d4:ed:a8:2d:67:4a:99:80:ed:ef:dd:
d8:ad:be:9a:14:48:fa:fc:82:71:b4:6d:41:cf:06:
54:2d:b9:fd:0d:52:3b:87:41:fe:2e:36:fd:a6:d3:
d3:0c:49:f1:47:4d:74:e0:88:a1:cb:1c:da:dc:05:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:29:53:CD:E5:8B:5C:7A:63:C3:4F:F6:CA:91:5B:D3:98:8E:3F
X509v3 Authority Key Identifier:
keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/4DC69458F51C11F0B1C1D2E9586F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.156.0/23
Signature Algorithm: sha256WithRSAEncryption
04:95:8b:07:4a:6f:10:3a:dd:9c:3b:58:93:3e:27:a4:35:d8:
14:09:f7:a2:4c:9e:56:b1:ff:07:aa:10:dc:1b:3a:b7:e4:2d:
03:88:b0:fe:e4:4c:1e:a8:85:9b:6d:4c:69:f7:5f:ab:1d:d2:
a5:33:a8:87:6d:90:74:0a:76:d3:25:09:d4:a1:bb:d0:1d:18:
dc:c8:6b:73:2f:51:cf:75:36:09:e2:5b:4d:9a:9a:40:36:8d:
1d:8e:68:19:e5:ce:3b:07:f5:d4:bf:56:20:aa:61:f1:f7:da:
a0:fc:b2:9b:73:e1:ad:b9:2a:19:05:1d:2b:d6:8c:d7:fd:3b:
b7:76:ee:e4:d3:05:c4:cd:fd:cf:26:3c:4e:a5:01:41:2e:5c:
76:be:9a:86:03:94:f4:df:9f:a3:31:b8:e0:64:0b:d9:84:f6:
da:18:b0:b6:68:0d:2f:c7:70:33:78:4e:8f:db:34:e9:b4:ce:
1a:16:3d:b1:1c:71:f7:c6:3c:04:4f:8d:de:de:9b:3b:ba:40:
a6:69:90:be:48:88:2d:7f:bd:f6:5a:97:48:ab:e5:46:00:ef:
52:fe:4c:44:f8:8e:43:c9:29:cb:ec:c1:30:c4:83:e8:df:36:
c0:79:98:e4:37:66:4b:d7:de:c6:19:51:05:1b:04:e5:55:12:
c4:3c:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:03 2026 by rpki-client