
$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/D575368892D011F0B767031EC4F9AE02.roa
File: D575368892D011F0B767031EC4F9AE02.roa (raw, json)
Hash identifier: +49R+niUVHEGa6s++c9bW33UyinzUzW6Yjq4fPcKfcU=
Subject key identifier: 9E:48:2D:60:1A:DA:1C:FF:2D:32:39:93:21:BE:66:8C:20:C1:D4:D0
Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial: 058C
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/D575368892D011F0B767031EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:06:47 +0000
ROA not before: Tue 16 Sep 2025 07:43:28 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 64013
IP address blocks: 103.139.198.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Validity
Not Before: Sep 16 07:43:28 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a46416-bf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:84:7e:87:54:a4:8c:6f:9d:0a:9c:82:ac:
1d:17:1b:60:43:ae:3c:3b:f3:01:b8:06:8f:0a:3f:
96:f3:2c:85:93:7d:c5:8f:51:09:73:ab:bb:5b:0f:
9a:fc:c4:c4:cf:dd:28:29:e8:70:af:ef:3d:55:72:
0c:2f:5f:a0:05:df:86:05:5b:b7:c0:dc:63:72:e2:
d9:a4:1e:c6:1e:0b:ba:4d:31:4e:d7:7b:1a:b2:e2:
b6:32:3e:8e:ef:c5:b3:f8:0d:83:b1:91:42:d9:fd:
80:99:6a:33:44:e1:5c:3a:f2:4b:a3:e5:c2:2b:98:
13:9a:bc:a6:0d:2d:49:db:21:2e:4d:82:e9:29:d8:
4a:b9:b1:b4:2a:c5:4f:cf:99:eb:d6:de:6f:14:7c:
8a:67:4b:d8:65:4e:46:11:eb:6c:a7:bf:19:18:56:
03:0c:3d:67:30:41:dc:a9:31:75:34:75:7e:88:6a:
7f:32:80:10:8c:b2:8b:63:07:10:8f:ad:ec:2b:8e:
53:72:5e:ee:bb:b4:d5:12:54:ee:a0:74:f3:5f:b7:
61:0e:40:11:f0:60:d7:ff:6b:3f:35:06:00:96:54:
e8:a0:71:a7:67:cc:d3:5f:62:e9:2d:1f:bc:5c:25:
35:10:0e:af:3e:60:9b:c9:1f:69:ee:30:e9:b0:ca:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:48:2D:60:1A:DA:1C:FF:2D:32:39:93:21:BE:66:8C:20:C1:D4:D0
X509v3 Authority Key Identifier:
keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/D575368892D011F0B767031EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a9:02:02:a7:fa:7a:7c:85:f5:9a:10:8d:4d:55:97:3b:bf:
ec:e1:4c:0f:d8:7b:0f:ff:aa:62:c7:56:58:ef:0f:1a:dc:50:
9e:af:90:06:bd:67:0c:90:eb:49:82:85:0c:94:a4:0d:b6:4d:
f3:0c:55:cc:a0:35:ba:51:fb:5c:f3:bf:c0:89:9d:e9:d4:35:
27:18:15:62:86:3f:14:fc:75:e1:bb:1a:6a:a4:af:af:13:9b:
7d:80:e3:54:0f:14:40:ae:97:e4:d4:04:36:88:fe:ab:32:67:
e5:53:73:ab:3f:9f:3e:9e:17:1a:e7:b4:5b:42:34:f8:60:71:
72:04:79:3d:8b:61:4a:1d:44:0a:c0:c9:66:a2:d3:d9:bb:f5:
b5:04:86:64:7b:3e:53:b8:0f:8e:fa:68:77:71:02:c7:f1:1f:
05:9a:09:a2:d1:d0:4f:58:c3:86:ed:ea:6e:48:98:32:ae:b6:
b5:73:39:a0:a9:b9:3c:9d:97:10:57:32:79:5b:3d:f1:fc:0b:
92:fe:32:2b:af:2d:a9:90:3a:73:d9:43:ed:6d:7f:cc:98:be:
ee:13:94:03:9d:4a:5b:bc:95:54:e3:3b:89:82:1d:26:6c:2f:
c4:6f:97:b9:7c:f1:03:a4:02:38:f9:95:18:4a:fe:bc:84:5d:
77:31:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:37 2026 by rpki-client