
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/865F2F80EE8911EBB390AC76C4F9AE02.roa
File: 865F2F80EE8911EBB390AC76C4F9AE02.roa (raw, json)
Hash identifier: 4tQkVgaEfrNeT5ZxKwsq/6JwQwooD/KUZ+m6cfHLrN0=
Subject key identifier: 95:E1:45:B2:78:A5:D8:A7:3F:E7:96:D7:2B:AA:0B:3B:DD:8C:E8:C6
Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Certificate serial: 076A
Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/865F2F80EE8911EBB390AC76C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:54:55 +0000
ROA not before: Tue 30 Sep 2025 22:24:49 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45620
IP address blocks: 103.226.64.0/22 maxlen: 24
202.52.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Validity
Not Before: Sep 30 22:24:49 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4533f-1f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:3b:06:31:f9:74:de:e4:13:2a:c8:78:e0:
09:b8:93:e8:25:f9:83:46:1e:c9:5f:64:a4:c0:bb:
79:82:69:d1:23:35:20:41:2d:95:a1:64:06:87:37:
73:87:a0:a6:9c:46:cb:51:fa:36:0f:29:4b:9c:f2:
93:34:9f:09:e2:b8:92:6b:97:02:bb:7c:f0:0b:e5:
d9:71:ed:e0:36:34:0a:6c:c8:43:55:55:03:8e:cb:
67:3b:b6:30:4f:98:f9:be:50:b2:8b:72:d8:34:9f:
54:36:c6:e1:16:9b:a5:e9:18:9e:6f:1a:dd:d2:93:
d4:10:7d:13:86:d6:04:b9:94:cb:32:9d:10:c3:9c:
6e:2c:30:5b:66:6d:9b:56:97:b2:35:24:6a:2d:b0:
8c:18:b7:a3:71:e8:88:93:6c:5d:8f:84:85:45:e3:
27:81:86:67:75:1f:84:b6:da:a2:31:4b:a4:17:cb:
d6:d5:5e:42:f9:94:53:24:5b:6f:6f:0b:b0:34:33:
16:4f:5a:7d:a3:19:8a:19:0e:28:d6:18:3f:dc:66:
2e:12:1a:5f:e9:1e:f3:97:90:79:49:7c:45:df:1e:
58:86:1e:0f:35:90:29:5b:0a:87:0b:2c:57:b8:83:
73:38:46:d3:7b:25:99:e6:16:57:9a:9f:7c:92:ae:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E1:45:B2:78:A5:D8:A7:3F:E7:96:D7:2B:AA:0B:3B:DD:8C:E8:C6
X509v3 Authority Key Identifier:
keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/865F2F80EE8911EBB390AC76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.226.64.0/22
202.52.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ab:7f:4d:4e:42:4d:31:b1:69:ce:49:6d:58:f0:03:7d:c1:
0c:87:cc:47:ff:db:85:97:96:ce:82:20:27:06:e7:09:2a:c8:
70:00:23:e7:00:d9:74:d8:37:d1:e6:43:e3:fb:f2:55:7c:28:
a3:78:83:f4:e2:58:91:c0:fc:30:db:b9:1b:fd:5f:86:b6:a7:
8c:52:66:96:1a:22:ea:7c:43:ea:a3:24:a6:90:a3:0d:56:9c:
bc:50:13:6b:61:46:fb:94:d5:fc:82:c8:6d:a5:e5:3b:02:3b:
e8:17:89:9c:6d:a4:8e:c0:d3:f5:87:a3:fd:0f:c9:0c:02:ee:
5a:90:0b:55:40:58:83:16:f5:93:9c:d1:60:3b:21:3d:1c:59:
4c:7f:df:48:64:9b:36:90:7d:61:10:1f:a4:53:03:55:73:0a:
d3:92:10:64:4c:07:37:7c:d2:83:41:72:e1:80:4d:45:ba:f5:
bf:14:7e:e8:32:28:52:87:ea:8e:48:4c:ef:b1:f7:51:e2:a2:
04:b3:f3:7d:d3:4f:d6:d3:62:d9:3f:41:7f:53:a9:61:51:bd:
3a:6b:61:21:e9:c8:5f:87:66:69:4c:8d:8a:10:26:37:e6:d1:
1f:8b:38:b4:e9:af:3e:7a:d7:c8:cc:8d:0c:87:3f:4b:6d:23:
66:09:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:07:51 2026 by rpki-client