
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa
File: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (raw, json)
Hash identifier: l+N4J4zxNWyxlfAH9ke4Lwu5X6TI6u4/SfyZolyoLUs=
Subject key identifier: 16:F1:3D:DA:21:1A:0B:2D:CE:00:69:19:40:8E:60:C8:63:F4:66:14
Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial: 0917
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:53:00 +0000
ROA not before: Fri 30 May 2025 20:59:14 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.150.161.0/24 maxlen: 24
103.161.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Validity
Not Before: May 30 20:59:14 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4289c-84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:37:e9:ef:0b:16:e7:a5:25:cf:dd:0e:b6:
eb:02:c7:6f:fe:80:f0:60:18:e9:7a:14:2b:30:dd:
93:24:53:46:a2:ec:d5:62:cc:f2:d2:cc:8a:e8:65:
43:9a:74:64:33:16:fe:68:d8:25:cc:a3:9d:5f:99:
7f:a8:7b:e5:7d:95:8f:18:64:70:84:f2:28:96:9b:
73:fc:88:d2:99:d1:87:2f:2f:7f:bf:23:e0:05:e9:
ee:39:d9:97:5e:20:b8:06:c6:25:2d:4a:bf:0b:22:
56:bc:de:64:26:1b:00:03:71:ce:0b:db:de:d2:3a:
45:de:39:36:cc:68:a5:d8:e5:a4:8f:1f:69:b7:9e:
cc:83:63:15:79:08:a8:c0:d7:b6:43:9b:62:6f:61:
2a:9e:70:dd:7e:40:92:38:fa:b5:ee:cb:74:49:80:
44:ad:3f:7c:d6:e1:d9:7c:1b:c6:33:83:40:55:97:
04:c3:2d:da:24:7f:05:a4:79:58:22:9d:a4:61:c0:
dc:ab:46:ca:55:b5:5d:47:0a:c1:2f:b9:0c:52:3d:
b0:de:df:a1:33:db:08:49:3f:51:ac:e4:93:bf:c5:
cf:e3:b2:1d:2f:af:7d:e4:97:d0:99:ac:a9:dc:6e:
f3:47:5b:d5:b6:f8:e5:5a:de:71:64:5e:ef:36:b0:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:3D:DA:21:1A:0B:2D:CE:00:69:19:40:8E:60:C8:63:F4:66:14
X509v3 Authority Key Identifier:
keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.161.0/24
103.161.77.0/24
Signature Algorithm: sha256WithRSAEncryption
45:67:a4:31:be:96:aa:5a:25:06:b4:78:5f:14:b2:d6:47:75:
0d:44:f5:34:12:1c:47:ea:90:e0:bd:03:41:11:86:61:a5:a2:
9b:d7:5f:a2:f1:5b:ac:78:17:72:64:2c:7d:f1:be:f5:d5:4c:
b6:f9:1c:c4:a0:27:f7:5d:48:02:72:30:48:02:b5:23:a9:f2:
6f:17:34:74:32:aa:30:19:94:98:a5:c6:66:e9:17:de:bb:3c:
87:d4:52:57:ea:d8:39:4c:ff:9c:f6:0f:38:85:76:3e:76:2f:
db:ff:b6:44:19:0e:7c:e0:1c:ed:ea:a6:cb:96:2a:48:23:f6:
13:44:71:cb:bf:31:98:66:db:2c:11:ff:62:2c:61:bf:f5:41:
fe:25:4c:d5:90:be:e4:b3:53:16:c4:be:f6:2a:24:df:e8:94:
90:f5:00:68:7e:72:7b:53:4d:56:b6:f5:01:a1:ae:37:db:9c:
f1:10:82:fb:e2:83:ab:f7:5f:5e:33:c2:09:bf:83:fb:94:cf:
9c:0f:3a:c5:30:4f:1c:d3:4f:be:6a:45:8c:d2:41:fd:03:53:
74:fc:09:bb:5e:86:36:63:3a:f2:97:ce:9d:3a:f0:9f:b5:6c:
77:b2:62:46:b2:5f:4e:05:3a:8f:e6:7f:b7:d8:3f:92:6f:02:
5e:f1:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:44 2026 by rpki-client