
$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C446B484559C11F0BBD2D127C4F9AE02.roa
File: C446B484559C11F0BBD2D127C4F9AE02.roa (raw, json)
Hash identifier: ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=
Subject key identifier: AF:E1:12:C2:45:9C:28:E9:FF:3C:33:C4:26:5E:03:D5:FE:43:4F:53
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 0815
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C446B484559C11F0BBD2D127C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:13:06 +0000
ROA not before: Mon 02 Feb 2026 21:18:45 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140523
IP address blocks: 103.150.18.0/23 maxlen: 23
103.150.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069 (0x815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Feb 2 21:18:45 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a481b2-3595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:5f:7f:4e:11:69:b9:91:e5:cd:d1:31:26:
82:54:7f:9f:45:af:8e:6d:8f:50:97:4c:58:da:36:
cc:c4:d1:fd:88:75:79:e2:b4:c4:89:05:68:ad:f7:
fd:ad:dc:51:8d:21:85:3c:8a:8e:d1:11:3b:5d:b0:
9a:a2:dc:15:fc:2c:6b:e4:fa:a5:d4:ec:d6:36:0b:
b1:e5:36:02:a3:0b:f5:70:61:32:4a:45:1d:c9:c0:
e8:bf:5a:5a:9f:7d:c3:1d:40:b2:72:e1:a4:d9:0f:
80:1f:93:f2:75:56:36:d4:b2:f2:12:c6:a1:78:20:
9a:39:e3:11:60:0f:60:8d:d6:fb:03:52:30:99:d0:
ff:ea:ae:fc:eb:18:3f:32:10:ea:74:8e:d8:fc:8f:
90:bc:80:cf:47:38:d5:a3:36:6c:22:de:86:13:9e:
54:f6:b7:f7:6a:ca:43:6b:db:89:72:c8:b1:27:63:
de:dd:09:4b:80:71:d3:7e:93:76:96:a8:1f:21:ad:
22:d6:0e:77:2a:f5:29:98:ad:c4:8a:2c:0f:6f:dc:
37:c7:c8:eb:2f:43:d6:86:f3:b8:52:93:0d:bb:8a:
f0:24:95:cb:b0:57:06:13:42:30:d3:74:75:6c:e5:
8d:68:67:64:0c:86:d0:0c:d0:29:33:52:aa:52:cc:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E1:12:C2:45:9C:28:E9:FF:3C:33:C4:26:5E:03:D5:FE:43:4F:53
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C446B484559C11F0BBD2D127C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:de:ac:19:81:d4:05:11:a1:70:71:f9:81:96:18:d3:3a:01:
2c:71:eb:ae:5c:9c:d7:d8:99:44:4b:8d:bc:70:3e:f8:5e:15:
1f:01:91:74:89:86:98:b1:e8:34:c3:a7:39:e3:01:db:0b:9e:
95:1a:d9:10:64:eb:71:59:ff:8e:c8:06:7a:b2:68:25:e1:52:
b2:89:67:c4:76:3f:aa:43:a7:8e:ad:b9:67:f8:13:ee:e2:fc:
cf:3d:f9:71:da:7f:e1:fd:89:b7:c9:b5:9c:8e:5b:5f:30:ad:
9e:e8:8f:4c:9a:69:13:f7:9e:5f:39:58:bd:e0:8d:b9:fb:23:
05:aa:08:0a:f3:b9:43:b9:79:4b:61:15:a0:b3:c3:1d:11:f6:
d1:ac:c7:2d:15:87:6e:db:95:de:9e:a4:ad:9c:31:3a:96:ad:
b8:54:51:06:96:f8:76:17:92:bf:d6:57:34:0b:81:00:5a:66:
ec:bc:71:09:2e:14:f4:13:05:75:3c:e7:9c:5c:75:08:05:2d:
a3:6d:6a:dd:85:a8:52:9f:b2:01:b6:85:6d:ce:44:c0:d9:54:
d6:c2:e8:84:41:23:6a:ec:22:ee:2c:85:10:ce:71:c3:00:7f:
6f:99:81:e5:73:f0:ff:7d:25:ca:1b:d3:4b:41:f2:82:b1:54:
ea:77:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:03 2026 by rpki-client