
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa
File: 9EA2D73236D311EF89295180C4F9AE02.roa (raw, json)
Hash identifier: vNb59XfrJrniQoC4B5nywtbnafzXLeklwV+6oTZ56io=
Subject key identifier: BA:9E:FF:1B:C1:85:48:E8:4B:DB:82:E0:6B:67:8B:2A:82:3D:6D:73
Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial: 0714
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:47:57 +0000
ROA not before: Sun 02 Nov 2025 22:42:00 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151952
IP address blocks: 103.143.185.0/24 maxlen: 24
103.168.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Validity
Not Before: Nov 2 22:42:00 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a46dbd-5e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:d1:3a:cb:95:6f:b1:9a:3f:b7:3a:c2:49:
e1:2b:39:86:97:96:9a:b4:d4:79:42:b8:34:86:ce:
2e:53:f3:7a:ee:ae:56:68:04:6d:14:ed:d3:6d:d6:
7e:06:5f:01:fa:de:c2:bc:b4:13:1a:3a:27:c5:01:
17:0e:34:cf:a8:bc:35:70:c3:b7:1a:0b:ab:7c:65:
e7:f7:b5:24:30:c0:d1:c2:b4:60:21:c9:2e:0e:b3:
b8:e9:6b:39:b6:06:f1:95:6c:2d:01:e4:17:20:88:
65:60:99:0e:47:9b:ce:9b:b4:0b:76:d9:f9:9a:d5:
9d:03:63:38:b2:13:16:27:c9:69:e9:49:ef:d3:bf:
7f:5a:9d:6c:80:99:b9:e9:c6:e8:e4:6f:c2:fb:3e:
51:60:3f:41:9e:13:3f:6c:97:16:85:58:c9:08:ca:
c0:44:48:09:1b:ca:85:18:6d:56:a7:77:37:59:6d:
70:ce:ed:e2:7a:2d:86:6a:70:9b:9f:1d:fb:70:83:
78:a6:50:44:5b:94:8b:37:c9:20:10:89:01:74:d3:
99:6d:91:80:21:b0:95:53:3b:27:ae:1c:78:e9:85:
bc:33:f5:97:22:37:50:2e:4b:e3:70:b5:8a:e1:9c:
f1:c7:72:35:5a:8d:f4:4a:08:0f:e6:a7:8b:88:09:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9E:FF:1B:C1:85:48:E8:4B:DB:82:E0:6B:67:8B:2A:82:3D:6D:73
X509v3 Authority Key Identifier:
keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.185.0/24
103.168.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:86:28:a7:25:99:97:02:65:f5:a8:8e:75:ee:1c:93:fb:dd:
17:8a:df:ed:42:30:8f:bb:f4:86:15:ea:cc:54:19:01:b1:45:
03:93:54:8b:22:77:00:14:8e:c5:f8:23:a9:65:a8:db:8f:9d:
b3:2c:78:fb:a8:3f:08:a8:5c:25:46:17:b6:e7:58:42:f2:83:
33:dc:6b:40:71:36:16:c9:62:2a:b7:20:d6:2f:2e:e6:fe:88:
9d:16:63:c8:e7:25:e4:92:0f:bc:44:59:54:6a:0a:23:0b:e6:
d6:7b:65:76:85:eb:39:85:20:53:de:6c:79:c8:68:c1:5d:76:
ac:56:24:8c:4d:ef:25:be:80:70:2f:f4:bf:6d:e4:32:a8:d9:
81:e1:a6:b0:05:0c:3f:77:aa:40:c2:a0:85:e4:a4:fb:58:b8:
16:0a:f7:8a:25:01:63:a0:ff:ef:44:04:b5:cb:73:52:ca:ab:
6a:c6:37:63:4d:17:d8:b7:89:c5:db:00:cf:00:0e:1c:49:63:
c5:a0:67:2e:ab:b2:ee:48:d1:58:06:70:da:9e:74:60:93:e2:
67:88:45:38:ca:fd:d2:54:56:f8:bd:a5:1f:5d:93:e5:18:90:
fa:b1:b2:e1:8a:3e:f3:18:9a:0f:32:fc:f6:f8:37:c6:e4:d3:
23:38:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:53 2026 by rpki-client