
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa
File: 1B4BA08497A711EDA815F80AC4F9AE02.roa (raw, json)
Hash identifier: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=
Subject key identifier: 91:B8:10:BA:E0:50:FF:E8:A3:14:D8:DF:27:C2:DE:AD:35:7D:B3:0B
Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial: 0252
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:01:20 +0000
ROA not before: Sat 13 Sep 2025 00:05:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142643
IP address blocks: 103.171.144.0/23 maxlen: 23
103.171.144.0/24 maxlen: 24
103.171.145.0/24 maxlen: 24
115.178.26.0/23 maxlen: 23
115.178.26.0/24 maxlen: 24
115.178.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Validity
Not Before: Sep 13 00:05:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48d00-22b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:7e:72:72:ad:68:96:82:6c:6b:1e:80:f9:
e7:97:36:98:3d:9e:62:67:df:21:06:2c:5f:b0:2b:
9c:7a:ca:5f:13:8f:64:bd:56:52:06:dc:bb:8e:d8:
21:2d:e4:87:d2:de:77:68:ae:48:c1:b4:e2:1c:bd:
05:22:3e:c0:7b:aa:fe:7f:92:0c:d8:3e:ea:85:9c:
9b:31:e9:59:64:8b:67:5a:30:13:21:af:27:09:b8:
1d:37:84:69:e8:58:13:ec:02:5b:a1:61:88:e9:35:
a8:5a:c2:69:25:33:5f:45:1c:f6:16:c2:8a:a6:6f:
ec:ac:31:fb:03:da:ce:48:22:70:c1:22:61:a4:de:
ba:49:af:3e:6e:3d:02:d7:31:ad:b6:e3:5a:42:3f:
19:b6:e2:9f:71:05:06:63:62:f2:78:ea:a9:7b:ed:
c5:bd:8b:bf:ac:d9:5e:f6:59:20:fc:df:bd:1a:0a:
54:f2:77:14:3c:02:38:7c:2f:42:ec:f1:2c:49:6b:
28:b4:25:fa:2e:d0:24:44:13:2d:55:f0:bc:3e:32:
15:08:7c:7e:e7:91:70:07:53:79:93:6c:d0:1d:9e:
b5:d6:24:15:4b:65:fb:5f:d4:85:04:d3:0b:cb:f2:
ae:f1:e3:78:5f:41:4b:b4:f2:6d:3c:4b:48:c6:c7:
11:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:10:BA:E0:50:FF:E8:A3:14:D8:DF:27:C2:DE:AD:35:7D:B3:0B
X509v3 Authority Key Identifier:
keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.144.0/23
115.178.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:ea:f0:d4:3b:bd:12:26:0a:a2:4b:ec:73:40:3c:ef:81:6b:
0f:d1:6d:1d:c6:69:da:49:11:35:80:b2:08:f2:2a:ae:36:6e:
88:04:f4:0a:2c:88:1a:bc:ef:f3:fe:af:86:5e:d7:e9:3f:ad:
f8:d7:95:bd:17:53:66:c7:60:28:ec:a7:ee:6b:77:5f:a4:f6:
53:5f:46:75:59:05:9c:72:6c:13:17:80:0f:99:ac:19:0f:2e:
21:5a:ec:49:2d:9f:93:43:4c:73:a7:e3:39:a7:4c:a6:5a:72:
f3:b6:00:37:59:5a:db:eb:ca:5a:d2:02:df:18:9e:23:e2:34:
08:95:68:a2:77:df:57:b5:4f:66:04:82:b7:29:28:36:19:99:
90:af:88:60:5a:57:da:96:95:58:3d:c2:51:2c:99:33:81:a6:
72:ca:6c:b2:f0:ba:12:19:c0:91:e0:0f:dc:b7:e0:61:81:7e:
df:b4:ef:e3:84:6b:9a:31:bc:68:20:75:04:dd:26:ee:33:57:
29:c4:17:bc:36:cf:ea:eb:d9:b2:0f:d2:22:1c:3c:b7:90:cc:
83:ff:e2:81:16:8b:9f:36:5f:c8:13:c9:c8:3f:40:22:08:17:
c8:cb:a4:22:64:8d:be:7c:43:1c:d3:98:20:31:b5:88:d8:6f:
22:fb:c9:5f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz
NDI0MTY3NTkwHhcNMjUwOTEzMDAwNTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGQwMC0yMmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGx+cnKtaJaCbGsegPnnlzaYPZ5iZ98hBixfsCucespfE49kvVZSBty7jtgh
LeSH0t53aK5IwbTiHL0FIj7Ae6r+f5IM2D7qhZybMelZZItnWjATIa8nCbgdN4Rp
6FgT7AJboWGI6TWoWsJpJTNfRRz2FsKKpm/srDH7A9rOSCJwwSJhpN66Sa8+bj0C
1zGttuNaQj8ZtuKfcQUGY2LyeOqpe+3FvYu/rNle9lkg/N+9GgpU8ncUPAI4fC9C
7PEsSWsotCX6LtAkRBMtVfC8PjIVCHx+55FwB1N5k2zQHZ611iQVS2X7X9SFBNML
y/Ku8eN4X0FLtPJtPEtIxscRjQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJG4ELrg
UP/ooxTY3yfC3q01fbMLMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC
QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjMzRjgvRjA5MDE5RDYxQkI3MTFFQzkwM0Q4QTRDQzRGOUFFMDIvMUI0QkEwODQ5
N0E3MTFFREE4MTVGODBBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ6uQAwQBc7IaMA0GCSqGSIb3DQEBCwUAA4IBAQAK6vDUO70SJgqi
S+xzQDzvgWsP0W0dxmnaSRE1gLII8iquNm6IBPQKLIgavO/z/q+GXtfpP63415W9
F1Nmx2Ao7Kfua3dfpPZTX0Z1WQWccmwTF4APmawZDy4hWuxJLZ+TQ0xzp+M5p0ym
WnLztgA3WVrb68pa0gLfGJ4j4jQIlWiid99XtU9mBIK3KSg2GZmQr4hgWlfalpVY
PcJRLJkzgaZyymyy8LoSGcCR4A/ct+BhgX7ftO/jhGuaMbxoIHUE3SbuM1cpxBe8
Ns/q69myD9IiHDy3kMyD/+KBFoufNl/IE8nIP0AiCBfIy6QiZI2+fEMc05ggMbWI
2G8i+8lf
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:13 2026 by rpki-client