
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/713001A0A35811EC88C42869C4F9AE02.roa
File: 713001A0A35811EC88C42869C4F9AE02.roa (raw, json)
Hash identifier: 4M3Fk+WKBIinWZRiTCbk5MOj0nW9lIZtA5YZhFRKCT0=
Subject key identifier: 72:95:20:75:F4:F4:6D:DD:32:2E:F1:79:B5:45:97:95:D7:3E:7E:13
Certificate issuer: /CN=A91BA8F5/serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5
Certificate serial: 0417
Authority key identifier: 51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/713001A0A35811EC88C42869C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:55:46 +0000
ROA not before: Tue 29 Apr 2025 01:38:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149645
IP address blocks: 103.183.192.0/23 maxlen: 23
103.183.192.0/24 maxlen: 24
103.183.193.0/24 maxlen: 24
2400:6360::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl
rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA8F5, serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5
Validity
Not Before: Apr 29 01:38:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3ff12-88ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:69:1f:34:22:2e:76:8a:1f:ea:1a:35:c1:
2a:86:24:aa:16:af:47:28:b9:3d:75:62:bc:73:f1:
4f:b5:c2:e9:af:6f:08:af:76:4f:bb:04:eb:2d:c5:
ca:93:74:30:29:57:ba:c7:35:cd:8e:a5:80:05:d1:
68:bb:31:d1:87:d8:1e:9b:d6:14:21:0a:cd:52:25:
01:86:f1:d8:29:3c:75:87:ab:f5:e5:26:b0:2d:0f:
e4:54:a8:fa:5d:bc:e1:4e:b5:89:c4:36:9d:9f:84:
8a:4e:72:1c:9e:31:42:fd:8b:d6:5d:a0:74:00:06:
30:b1:6c:1b:ae:ab:32:43:9c:a2:8b:07:c9:be:b4:
a4:d1:37:15:8e:99:1b:aa:a9:68:3e:49:8f:79:98:
98:93:4b:12:56:7c:ce:90:00:f9:a7:00:fe:b1:85:
33:80:d2:93:d9:5c:4a:fe:8e:9d:af:55:c8:2a:5f:
08:eb:dd:f8:4b:02:73:ed:08:1f:10:fd:78:d2:98:
e0:f3:fc:eb:3d:5b:4c:be:18:bc:57:fa:34:e5:84:
44:92:0f:1c:e9:ec:24:cf:22:33:69:ff:13:cf:6b:
b2:c8:54:b9:21:25:73:5b:6d:ce:27:7f:e8:2f:48:
24:5c:ea:2d:ef:4b:10:50:63:6b:b5:e1:a0:d4:65:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:95:20:75:F4:F4:6D:DD:32:2E:F1:79:B5:45:97:95:D7:3E:7E:13
X509v3 Authority Key Identifier:
keyid:51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/713001A0A35811EC88C42869C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.192.0/23
IPv6:
2400:6360::/32
Signature Algorithm: sha256WithRSAEncryption
4b:83:09:45:92:28:32:f7:c3:d3:a7:de:03:fc:db:39:be:86:
b9:c2:e5:5d:85:c4:3f:e3:28:34:02:41:de:56:08:24:96:ed:
be:8c:fd:89:34:1e:84:85:3f:ae:23:13:c3:cc:12:e8:5c:c4:
63:7a:ad:27:66:fa:84:bf:3e:25:c4:db:37:b7:ce:87:86:3d:
9b:f4:bf:a9:40:d8:28:54:1d:75:46:1e:e2:64:30:09:53:4c:
ea:e3:f8:19:4e:79:8f:91:fa:a1:6e:c2:bd:97:2c:91:ef:c2:
f4:70:a7:a6:d9:f7:44:ec:8b:5e:58:fd:9e:56:8c:38:7f:3e:
aa:af:13:2f:a4:a6:c2:f4:6e:c8:f3:99:7d:d0:40:ed:76:23:
40:d1:d5:f0:40:c8:56:53:b4:63:7b:3f:ca:9e:c0:0a:f3:9c:
31:75:38:12:9c:95:7e:5e:7e:2e:7f:c1:dc:0d:03:fd:18:5e:
ed:ad:d4:c2:62:b5:05:b8:b2:eb:b7:fa:39:4d:fb:63:3f:e4:
42:83:2c:e2:43:f4:46:1a:a2:93:3d:f9:57:6c:3d:72:e4:3d:
8e:b1:38:3e:99:66:91:74:bc:b3:c9:26:5a:b1:11:f1:ed:4d:
fe:36:c5:5a:2a:e1:4b:79:96:fa:e8:75:11:ca:72:ac:a0:95:
90:9f:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:32 2026 by rpki-client