
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/C01378B2D87411EE85EACB5CC4F9AE02.roa
File: C01378B2D87411EE85EACB5CC4F9AE02.roa (raw, json)
Hash identifier: Dn+JL4IFF8F6udJCXJBfFR0N/JW0riYqK/noh4aF+Rg=
Subject key identifier: DC:6E:67:D1:CB:84:9F:BC:BF:66:8D:07:81:20:4D:D2:A4:D3:19:88
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 01D3
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/C01378B2D87411EE85EACB5CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:44:02 +0000
ROA not before: Thu 07 Aug 2025 04:41:54 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.14.230.0/24 maxlen: 24
2001:df2:b740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Aug 7 04:41:54 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5a232-ad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:d5:14:e8:38:4a:b5:94:d0:4b:93:a4:94:
07:a8:85:5b:55:fc:c7:05:2f:98:e6:2f:00:11:3f:
3f:51:83:8c:67:ec:44:50:1e:2f:79:11:42:13:e8:
39:89:b7:b6:3b:49:bd:2a:99:9f:ea:0d:29:6c:3d:
c5:c9:24:a3:44:09:f0:b0:0d:c3:25:74:e3:17:5b:
1c:bd:08:e9:1e:26:12:66:1a:a2:84:3f:de:d0:c1:
0b:3e:49:cc:b1:ad:f0:31:9c:58:72:14:ed:75:b6:
20:83:c4:9f:ab:d1:ea:8e:d3:00:d1:8f:4d:2e:f7:
b9:fe:38:0f:a6:0c:a9:76:10:1b:9d:6f:c1:5d:59:
65:61:78:c3:75:26:7d:f3:af:b0:df:7b:53:97:3d:
32:da:bf:56:08:7f:b3:2f:fb:3f:63:23:f1:30:b9:
00:35:1c:06:87:f6:5e:de:2f:a1:83:d1:2c:06:16:
47:77:b7:ef:9f:3b:c0:bc:72:ad:5e:5c:44:10:18:
94:84:fa:4c:40:48:b0:d4:c8:4e:64:c4:f2:15:2d:
a9:d3:27:4a:df:d7:03:bf:46:79:e7:f3:6c:fd:3c:
b5:15:61:48:85:0e:90:a8:90:a4:25:72:ad:d7:3a:
eb:fe:5f:77:cb:b0:7c:e5:6b:87:ff:b2:45:53:03:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:67:D1:CB:84:9F:BC:BF:66:8D:07:81:20:4D:D2:A4:D3:19:88
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/C01378B2D87411EE85EACB5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.230.0/24
IPv6:
2001:df2:b740::/48
Signature Algorithm: sha256WithRSAEncryption
3d:2e:0e:f0:7f:62:33:0a:1b:e5:ea:d0:1f:71:e0:56:30:38:
20:c8:d0:25:e6:48:a0:13:c3:5d:40:42:3b:98:cb:47:ac:19:
17:19:bf:9b:53:92:c2:be:ab:e2:2c:13:99:5d:2d:6a:ff:6e:
d6:c2:4e:42:fd:55:2f:26:96:5d:63:5f:e4:b3:24:a4:c1:1c:
4b:73:b0:c9:35:5b:31:15:98:c4:7b:55:78:3b:71:93:33:90:
93:a8:6f:96:37:f8:c4:0c:bc:3f:dc:50:2f:4c:a5:84:87:94:
6e:d0:77:21:ea:43:3d:9f:28:d7:43:fa:8e:5f:79:8f:1f:fc:
a6:c8:ca:c1:7a:aa:82:bf:39:59:6b:1e:8c:30:8d:b7:02:0a:
1e:ba:32:5d:c6:29:6c:16:da:18:6f:34:e9:7e:04:89:e5:57:
70:7c:2e:65:1b:d9:be:68:4d:60:39:54:61:91:84:d7:7f:ab:
ee:6e:9d:14:7e:94:c3:68:4f:34:df:69:b6:0e:e1:fc:d9:d2:
30:9e:80:4b:14:54:15:9f:45:f1:40:21:37:e0:2e:d9:78:2e:
80:ed:ad:db:57:77:7f:1a:b7:38:5e:3e:f5:bc:98:45:08:70:
c9:9d:7f:0e:46:e5:7a:8a:43:0d:e9:9e:30:55:75:bf:da:fd:
0a:d1:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:03 2026 by rpki-client