
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
File: A915A3543FEC11EE99AC0F43C4F9AE02.roa (raw, json)
Hash identifier: kQQtoUock6v51XesRrhDlErgmW8VAdf0TAeHQYio1TE=
Subject key identifier: A3:7B:DE:7F:9D:A4:E6:08:BC:4B:11:22:99:C1:D6:59:1B:32:C4:92
Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial: 01E3
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:37:11 +0000
ROA not before: Sat 23 Aug 2025 04:09:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151646
IP address blocks: 103.248.140.0/23 maxlen: 23
103.248.140.0/24 maxlen: 24
103.248.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Validity
Not Before: Aug 23 04:09:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3eca7-2aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:88:88:8e:ae:0b:19:a3:c7:f4:26:f2:47:
03:29:8e:71:15:b4:b5:b7:df:06:e7:1a:7b:eb:eb:
f3:1a:e5:61:27:ca:ea:82:a1:38:24:9e:88:fe:db:
b5:8b:79:5a:ef:42:85:0c:db:6a:de:0f:fe:ef:6e:
91:29:a9:6b:32:07:fc:81:74:ae:8c:97:74:2a:95:
97:99:ea:52:4c:c3:5d:ba:f8:92:0f:dd:48:a6:13:
f6:a3:94:50:b8:30:34:31:dd:41:34:2b:bc:44:2f:
fb:81:a0:96:a2:4d:3f:b3:4c:55:04:87:b4:45:9a:
4a:a1:72:75:6e:d1:89:4c:2c:f6:a4:5c:38:92:99:
c0:97:e3:75:26:60:30:6a:5a:46:71:fe:1d:d3:8a:
2b:1f:7c:de:d8:26:3b:2f:34:d8:2c:06:89:d4:ac:
24:c9:a1:5e:7a:82:20:ad:46:02:b1:96:5c:ba:b4:
74:e8:92:53:6c:5a:33:6d:fb:49:a6:b4:33:80:9f:
ff:00:12:d7:54:f0:28:c1:cc:21:ba:10:ea:7e:e7:
be:86:62:92:cb:18:de:4a:30:d4:1a:8b:05:b5:b3:
71:0b:d4:9b:9f:bd:69:cd:4d:8e:18:68:94:7b:5c:
83:71:2c:23:27:20:0f:9b:ac:96:0f:d6:c7:06:36:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7B:DE:7F:9D:A4:E6:08:BC:4B:11:22:99:C1:D6:59:1B:32:C4:92
X509v3 Authority Key Identifier:
keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.248.140.0/23
Signature Algorithm: sha256WithRSAEncryption
06:90:3a:07:40:92:74:7d:96:ca:37:26:d5:b0:04:5d:8e:cc:
d4:ae:f7:7c:a8:99:a3:29:d4:0d:88:d4:3c:3b:8c:18:20:70:
80:87:5d:a8:4f:5b:90:41:5c:af:6b:c7:b0:6d:75:f4:95:86:
e1:be:36:6d:7f:cc:0f:f7:dc:d1:e7:7a:c9:be:ff:79:4c:37:
4e:d3:a8:54:1e:cb:f0:ff:bb:65:10:65:4b:23:9c:a7:be:b8:
18:30:62:13:33:26:14:d3:b8:da:85:6b:b3:15:8a:89:0c:48:
10:4c:68:9a:56:33:7d:cb:65:d2:b3:5e:06:65:8e:d5:e2:45:
44:5e:5e:ba:57:d9:e0:91:e0:b9:42:b0:e3:2e:02:76:8b:c1:
5e:d9:ed:45:f4:53:34:0f:3b:cd:27:2c:fe:61:1c:26:94:85:
75:f4:7b:e1:e9:17:1c:38:19:cd:55:e9:c0:8d:da:f6:2f:01:
f5:0d:5b:3d:24:de:2a:9c:6e:10:22:d7:cf:46:7d:74:d5:e1:
6b:57:2f:e5:6f:19:20:c6:fb:d9:30:3b:bb:3a:30:91:f5:3d:
e7:34:6f:1c:d3:0b:dc:2f:12:d6:94:4c:d4:63:9b:a5:72:34:
27:c5:13:cc:0b:b0:23:97:0e:b7:8c:9f:42:24:2c:fb:b0:b9:
d1:8c:d6:26
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx
NDA1NTEyMEIwHhcNMjUwODIzMDQwOTIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWNhNy0yYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv96IiI6uCxmjx/Qm8kcDKY5xFbS1t98G5xp76+vzGuVhJ8rqgqE4JJ6I/tu1
i3la70KFDNtq3g/+726RKalrMgf8gXSujJd0KpWXmepSTMNduviSD91IphP2o5RQ
uDA0Md1BNCu8RC/7gaCWok0/s0xVBIe0RZpKoXJ1btGJTCz2pFw4kpnAl+N1JmAw
alpGcf4d04orH3ze2CY7LzTYLAaJ1KwkyaFeeoIgrUYCsZZcurR06JJTbFozbftJ
prQzgJ//ABLXVPAowcwhuhDqfue+hmKSyxjeSjDUGosFtbNxC9Sbn71pzU2OGGiU
e1yDcSwjJyAPm6yWD9bHBjZuVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKN73n+d
pOYIvEsRIpnB1lkbMsSSMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG
RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUYwQzYvM0ZDRUJEMjIzRkVDMTFFRUFERjVEMzM4QzRGOUFFMDIvQTkxNUEzNTQz
RkVDMTFFRTk5QUMwRjQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ/iMMA0GCSqGSIb3DQEBCwUAA4IBAQAGkDoHQJJ0fZbKNybVsARd
jszUrvd8qJmjKdQNiNQ8O4wYIHCAh12oT1uQQVyva8ewbXX0lYbhvjZtf8wP99zR
53rJvv95TDdO06hUHsvw/7tlEGVLI5ynvrgYMGITMyYU07jahWuzFYqJDEgQTGia
VjN9y2XSs14GZY7V4kVEXl66V9ngkeC5QrDjLgJ2i8Fe2e1F9FM0DzvNJyz+YRwm
lIV19Hvh6RccOBnNVenAjdr2LwH1DVs9JN4qnG4QItfPRn101eFrVy/lbxkgxvvZ
MDu7OjCR9T3nNG8c0wvcLxLWlEzUY5ulcjQnxRPMC7Ajlw63jJ9CJCz7sLnRjNYm
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:53 2026 by rpki-client