
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa
File: BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa (raw, json)
Hash identifier: GzxogbU8QiwwF++aswC6YdHu3ZoZCEYz5G0xx5UJTJQ=
Subject key identifier: 13:E8:8B:7F:50:F0:10:3F:EF:81:5D:E4:08:61:58:1C:87:14:2A:9C
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 0928
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:41:22 +0000
ROA not before: Sun 28 Dec 2025 20:17:03 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 203963
IP address blocks: 103.125.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2344 (0x928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: Dec 28 20:17:03 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a47a42-c12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:50:5e:8b:89:61:34:d2:7c:88:e4:63:66:
a5:6e:f2:55:f5:09:fe:46:67:ba:50:7e:dc:85:b6:
ce:e5:5f:cf:65:4b:76:7a:af:55:f4:02:5b:83:6c:
51:8c:73:5b:62:7b:06:4f:3c:54:f8:65:e7:63:55:
f8:e7:2f:9a:cd:83:53:43:fa:19:df:6e:c9:34:4f:
7a:14:2b:4e:1d:4c:cf:18:13:8a:46:89:30:f9:be:
49:69:cd:62:2e:3f:67:7d:3e:af:36:75:3a:85:9d:
d5:8b:0d:aa:69:05:22:b7:77:6f:01:6c:23:09:38:
34:5e:a5:7a:15:a0:14:6b:86:99:16:16:9b:75:13:
58:86:97:41:c9:bb:72:1c:1d:1b:5e:44:82:c8:4c:
df:a2:30:a5:c2:7d:4b:2d:c4:13:30:a0:bb:07:ce:
a5:8e:64:5a:6c:11:a4:e7:8f:58:2e:a6:74:8a:8c:
36:16:2b:00:38:88:4f:d1:00:aa:07:1e:87:89:53:
98:14:ef:36:db:ad:06:7c:fb:07:1e:be:71:e1:54:
4d:be:27:ce:10:79:d9:45:dd:7b:54:b8:fb:71:f4:
f5:22:ff:58:58:85:2d:4c:9d:f5:68:64:cc:39:0d:
15:49:ec:e6:fb:28:3e:a1:8e:52:ec:14:23:79:17:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:8B:7F:50:F0:10:3F:EF:81:5D:E4:08:61:58:1C:87:14:2A:9C
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.125.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2d:25:b8:5e:39:4a:e8:06:04:61:0f:63:ed:2e:5e:a9:39:
63:7d:bd:01:b9:36:2f:0b:55:13:dd:d3:f6:d5:5d:eb:e6:7e:
38:e0:2e:46:31:49:14:5b:ca:7a:c7:fc:aa:50:4c:81:16:0a:
c0:d4:55:90:a6:53:b4:37:8a:c0:ea:ce:4d:21:49:2c:7a:1a:
4d:63:ed:97:7b:a9:5c:aa:03:4f:92:41:65:d7:63:93:d3:91:
7e:bd:1d:70:5d:bd:81:06:98:b8:1a:a8:da:6d:8f:74:10:5d:
8d:07:0b:ed:a5:9d:95:f5:3f:72:07:0e:fd:d5:ae:ec:4f:fd:
95:ae:99:54:44:39:fb:a8:84:04:08:2e:2d:5e:35:79:8b:12:
57:50:87:ff:77:e5:4d:9c:90:6f:91:03:d5:3e:3c:62:7e:aa:
34:2e:dd:f5:70:8e:e6:5d:db:28:d3:23:ab:03:e9:39:dc:1a:
75:a7:be:60:fe:f9:d4:db:0f:44:fc:bf:63:17:2e:59:2d:50:
07:31:70:f3:37:5f:ac:f9:0a:8c:61:1b:1a:14:21:16:4e:d5:
09:c1:a0:89:1f:60:2d:cf:65:39:c6:26:37:aa:15:c1:11:fd:
9a:85:e3:92:7f:5f:20:7c:04:e0:79:d4:7d:63:b5:1a:e1:b1:
94:ef:34:2c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw
NTYwMTc0QTIwHhcNMjUxMjI4MjAxNzAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2E0Mi1jMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrdQXouJYTTSfIjkY2albvJV9Qn+Rme6UH7chbbO5V/PZUt2eq9V9AJbg2xR
jHNbYnsGTzxU+GXnY1X45y+azYNTQ/oZ327JNE96FCtOHUzPGBOKRokw+b5Jac1i
Lj9nfT6vNnU6hZ3Viw2qaQUit3dvAWwjCTg0XqV6FaAUa4aZFhabdRNYhpdBybty
HB0bXkSCyEzfojClwn1LLcQTMKC7B86ljmRabBGk549YLqZ0iow2FisAOIhP0QCq
Bx6HiVOYFO82260GfPsHHr5x4VRNvifOEHnZRd17VLj7cfT1Iv9YWIUtTJ31aGTM
OQ0VSezm+yg+oY5S7BQjeRe+AQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBPoi39Q
8BA/74Fd5AhhWByHFCqcMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG
NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvQkQxRDY3MEFB
OUFFMTFGMEJBQUM0RTQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ32TMA0GCSqGSIb3DQEBCwUAA4IBAQBbLSW4XjlK6AYEYQ9j7S5e
qTljfb0BuTYvC1UT3dP21V3r5n444C5GMUkUW8p6x/yqUEyBFgrA1FWQplO0N4rA
6s5NIUksehpNY+2Xe6lcqgNPkkFl12OT05F+vR1wXb2BBpi4GqjabY90EF2NBwvt
pZ2V9T9yBw791a7sT/2VrplURDn7qIQECC4tXjV5ixJXUIf/d+VNnJBvkQPVPjxi
fqo0Lt31cI7mXdso0yOrA+k53Bp1p75g/vnU2w9E/L9jFy5ZLVAHMXDzN1+s+QqM
YRsaFCEWTtUJwaCJH2Atz2U5xiY3qhXBEf2aheOSf18gfATgedR9Y7Ua4bGU7zQs
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:58 2026 by rpki-client