
$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa
File: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (raw, json)
Hash identifier: vNsxw0QyIyijT8fEK/xaUyiuFQdDNw7cfAxOqXgV9jo=
Subject key identifier: F0:F4:53:F9:19:EC:78:76:56:4C:D1:84:76:CE:02:2F:84:E1:D2:87
Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Certificate serial: 089B
Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:06:13 +0000
ROA not before: Thu 18 Sep 2025 21:02:18 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140993
IP address blocks: 103.154.156.0/23 maxlen: 23
103.154.156.0/24 maxlen: 24
103.154.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Validity
Not Before: Sep 18 21:02:18 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a447d5-1706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cb:82:07:1e:ca:16:6b:90:75:b9:8d:a5:55:
5a:09:14:82:51:12:f7:c8:9f:d6:00:3e:f5:91:e7:
4a:63:45:00:ce:25:b8:9c:0e:c1:48:57:ae:ee:be:
e2:ea:34:7b:0a:1d:f6:cd:f8:b7:2f:40:0f:b2:90:
8e:5e:50:44:96:01:51:22:46:84:1a:85:17:64:6c:
9f:ce:11:91:db:1b:d7:1f:8a:71:73:79:08:e1:5f:
52:a5:03:0c:20:81:56:03:b8:e2:8e:8a:80:79:01:
3f:d4:ea:3b:76:85:c2:28:f9:4f:5b:ad:d8:5a:b0:
80:2b:6f:a9:70:b6:24:65:4b:db:7f:6a:e9:3a:d7:
44:1d:43:5c:2b:94:07:1c:4b:07:8d:07:23:a0:b3:
08:86:80:b7:20:54:f0:38:62:54:99:5a:a9:d5:89:
cb:45:78:f6:3b:69:81:f2:bf:b7:aa:6b:a9:c8:75:
34:6a:eb:81:3b:e9:13:58:2f:3c:7e:04:73:10:0f:
b1:fd:e1:43:fe:fb:7f:d8:e3:95:8e:6b:61:03:69:
46:82:69:46:45:a0:7f:92:ef:74:f3:5f:86:7b:97:
5c:06:be:7d:af:2b:85:c5:fb:a1:09:af:33:42:0e:
e3:df:67:a5:44:56:64:f5:22:61:77:bd:b8:00:3a:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:53:F9:19:EC:78:76:56:4C:D1:84:76:CE:02:2F:84:E1:D2:87
X509v3 Authority Key Identifier:
keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.156.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:fb:8f:94:62:8d:17:eb:14:c0:41:fc:5d:5a:1c:5d:16:b1:
b2:d6:fd:fe:3b:83:0f:64:6a:3c:14:bc:b3:c6:11:04:35:55:
25:7a:50:05:4a:78:22:37:97:e7:ce:c0:73:29:80:6e:17:4e:
46:65:a7:0f:57:b5:3b:4d:ba:c3:c9:0b:f2:4c:70:68:85:7e:
36:55:08:ed:13:32:de:c7:75:55:c9:df:aa:62:a9:96:d8:2a:
f6:fb:55:7a:a9:b0:6d:aa:fc:b4:b8:8c:cf:62:c7:2a:60:2e:
01:eb:2f:b9:bf:db:a5:50:be:e1:3c:e4:5c:b9:b5:13:94:93:
6f:36:38:3d:4e:8b:d6:83:98:56:94:1f:ed:0b:8f:aa:0b:20:
10:f5:73:c1:09:bd:56:b5:55:4b:02:33:2e:c6:09:b1:0e:b5:
0c:cb:4a:b5:0d:a4:50:96:d9:a1:85:c2:4e:1c:82:bf:f6:4c:
eb:f9:76:d6:86:0f:52:7f:20:6d:2d:93:32:73:f6:04:1c:92:
7d:69:c6:25:d4:5a:c6:d0:f5:32:6b:9b:86:b6:0a:42:18:fb:
49:87:fb:9a:6d:92:a8:b8:8f:ed:b7:cc:b9:b2:54:aa:21:a0:
57:ca:11:6d:94:90:ae:5a:98:8e:7d:ad:60:0b:06:05:d5:4d:
f1:be:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:28 2026 by rpki-client