
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/19250B84675711EAA928E22DC4F9AE02.roa
File: 19250B84675711EAA928E22DC4F9AE02.roa (raw, json)
Hash identifier: yAFGrO2x35rGErp9E92zZSEZN27Ua7PNYL2jUO6uhv0=
Subject key identifier: EE:1A:55:CF:C6:BC:79:0F:18:83:05:E8:87:32:68:D6:BA:31:28:7B
Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial: 0B05
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/19250B84675711EAA928E22DC4F9AE02.roa
Signing time: Fri 24 Apr 2026 19:25:27 +0000
ROA not before: Fri 24 Apr 2026 19:25:27 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 63526
IP address blocks: 103.149.142.0/23 maxlen: 23
103.149.142.0/24 maxlen: 24
103.149.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2821 (0xb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Validity
Not Before: Apr 24 19:25:27 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ebc3a7-527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:6d:b2:80:e5:ec:69:c8:4d:70:38:9d:1f:
0e:fc:6d:ba:a6:14:27:18:5f:91:9b:d2:67:7a:42:
1c:5d:6e:a8:76:14:af:9d:38:50:bc:b5:0d:0c:df:
cc:c0:37:86:cb:83:a8:5e:66:fe:7d:6a:3b:80:13:
37:4e:a3:24:7d:f2:5b:6b:59:6f:b1:92:40:d6:f8:
cb:b6:f0:fb:f4:d1:f1:a5:a3:21:4d:46:14:2a:b0:
56:95:bf:54:b2:c9:25:95:c3:ef:37:fe:fd:4f:b9:
c9:ab:2e:5f:df:68:4e:06:54:06:db:d6:ad:bd:ef:
41:6d:69:9b:fd:be:67:ce:e1:bc:91:60:db:ef:6b:
f9:db:b7:bb:1e:39:ff:66:5d:94:79:7c:3f:83:4e:
ad:63:1c:11:61:a2:33:75:90:ec:c2:f0:8d:06:59:
20:b5:67:1f:3e:77:68:d6:dd:0e:14:9e:53:84:ce:
3b:4f:b9:17:a0:92:32:be:92:a5:7e:76:1f:cd:1d:
8e:b9:0b:21:79:01:f2:2c:eb:35:0b:3c:1c:da:b2:
56:58:d7:33:4d:53:20:4a:ff:d9:3c:b1:ec:ad:d2:
c3:a0:f2:47:e0:bf:c7:1b:a4:29:e0:dd:01:e3:fd:
a8:26:0a:85:30:0d:e5:94:a2:13:fc:33:d9:72:76:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1A:55:CF:C6:BC:79:0F:18:83:05:E8:87:32:68:D6:BA:31:28:7B
X509v3 Authority Key Identifier:
keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/19250B84675711EAA928E22DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.142.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0c:1c:76:e3:e1:1b:9d:d8:55:61:c4:62:6f:93:af:e9:f3:
4f:14:95:8b:31:f7:52:44:38:d6:69:f0:07:8c:f1:51:3b:a2:
be:f2:d8:e4:16:74:c2:01:05:f3:0b:a2:cd:4d:6f:00:09:14:
52:dc:68:11:b9:97:7e:93:a7:12:e1:04:5c:3e:20:94:37:aa:
72:61:75:fd:79:a8:4a:7e:4b:3c:c0:c8:f0:46:2b:cb:e5:fb:
ab:60:50:30:2e:56:54:52:00:d0:1f:1a:42:a6:4c:7c:70:87:
ff:f2:f1:64:62:ee:6a:9e:7c:5a:ae:19:c4:38:8c:93:04:17:
7d:28:67:b3:74:45:79:03:9f:29:5f:1d:f0:5e:da:c6:9d:7b:
4b:b3:ae:b9:1d:50:08:44:04:65:e8:2a:a5:84:ee:d3:db:c2:
64:d3:ca:d5:4a:9f:c7:a7:97:11:b0:6f:65:b5:46:fe:f1:81:
51:da:97:68:91:00:b2:16:c3:46:f4:33:55:87:e0:1b:62:b2:
8b:b6:f6:83:6a:f6:a5:99:41:88:3d:b2:e5:87:7f:09:b3:3f:
89:3e:92:b0:35:5d:2f:14:15:ff:54:f8:d5:aa:86:12:12:3f:
b2:60:aa:7c:73:e2:8c:e9:34:99:e2:c6:d6:a0:5b:f1:37:86:
a1:5a:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:02 2026 by rpki-client