
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/259AE280753B11EEBF306F35C4F9AE02.roa
File: 259AE280753B11EEBF306F35C4F9AE02.roa (raw, json)
Hash identifier: Fx8pr8XvKDN4R+SF/zRwvHYyEvKW8jczksOxopP8w7U=
Subject key identifier: 5C:4C:7B:93:BA:99:6B:CB:7B:70:68:8D:B8:96:1B:D9:9C:72:74:9C
Certificate issuer: /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
Certificate serial: 01C3
Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/259AE280753B11EEBF306F35C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:40:14 +0000
ROA not before: Thu 15 May 2025 04:54:13 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151408
IP address blocks: 103.224.94.0/23 maxlen: 24
2401:8b20::/32 maxlen: 32
2401:8b20::/34 maxlen: 34
2401:8b20:4000::/34 maxlen: 34
2401:8b20:8000::/34 maxlen: 34
2401:8b20:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl
rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
Validity
Not Before: May 15 04:54:13 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3ed5e-925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:47:41:c0:6d:d1:d1:90:05:f2:54:5c:32:
56:27:70:62:78:5b:96:e2:a8:96:c7:12:e7:c8:f1:
2e:36:b5:e0:4a:9b:42:7c:34:4a:a8:a3:56:65:29:
66:1c:1d:7e:cc:50:15:b8:fd:82:da:71:b9:ff:96:
14:89:6f:7c:3b:fb:15:dd:07:73:ad:12:bf:fa:67:
69:a9:0a:98:0e:fd:60:97:eb:d2:a8:f4:15:23:80:
fa:fc:49:4c:f2:96:77:d5:25:97:04:2b:e8:58:93:
93:00:9e:6b:c6:14:44:0a:69:75:ce:35:ce:79:6f:
6d:2a:e4:fc:2a:fd:17:ed:cb:4d:e1:ce:01:da:46:
46:a7:92:01:1b:25:89:9f:60:b5:79:31:cb:5e:82:
b3:4e:ca:76:fa:d7:3f:90:f9:a6:ef:92:24:84:7b:
90:08:e3:54:49:0f:90:94:2d:71:70:8c:c8:f3:c6:
eb:5e:57:94:ce:31:52:b8:af:78:2f:03:5d:26:9c:
31:90:e9:7e:f4:ed:69:06:42:ed:82:6f:38:40:07:
18:bb:95:00:d2:81:b0:d8:9e:35:c2:0d:c2:74:de:
85:e7:e9:95:84:8f:2f:c3:a5:c5:97:4f:ec:12:c9:
d8:ea:e2:44:07:7f:fd:36:41:c4:29:00:f1:b6:a2:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:7B:93:BA:99:6B:CB:7B:70:68:8D:B8:96:1B:D9:9C:72:74:9C
X509v3 Authority Key Identifier:
keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/259AE280753B11EEBF306F35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.224.94.0/23
IPv6:
2401:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
88:a7:d1:75:50:8a:fa:07:76:e1:70:99:c3:1c:47:ef:73:26:
39:5b:4b:42:78:42:c4:ec:b2:e9:c3:c1:35:31:59:fa:f9:0d:
76:98:d3:7f:50:80:2d:ee:fb:4f:7c:03:06:8c:54:7f:8f:80:
95:f7:57:11:eb:9c:de:b8:31:b4:cd:58:98:c7:d0:9c:3c:2c:
af:73:2c:93:c8:12:bc:43:0b:ef:90:99:c4:a0:d1:4a:e0:a2:
3e:4f:b8:48:87:ae:2a:9d:ba:18:c5:96:67:6d:ff:7b:88:c6:
f5:e0:71:b2:3e:72:8f:1c:7c:7d:3a:9d:94:c7:fa:48:8f:c9:
40:3f:84:26:1e:48:96:16:7e:9f:8a:68:ff:84:a4:76:ce:6d:
bd:6c:59:61:28:9a:54:23:2f:bc:8a:1d:a6:eb:56:d4:68:62:
97:c0:41:48:2c:47:f6:97:b6:02:75:96:2d:0b:9a:eb:26:53:
a6:d1:7c:4a:62:d8:8e:85:89:6e:71:44:7a:fe:3a:ae:26:86:
43:d5:07:9a:f7:e8:83:7b:11:6e:66:86:da:07:7d:11:75:c6:
a4:69:5d:2a:fb:1c:e2:85:e1:9c:7a:cd:a4:f5:62:86:ee:9b:
24:78:da:d0:1a:2f:37:75:39:f4:16:98:03:0a:69:f2:97:9d:
2f:c2:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:53 2026 by rpki-client