
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa
File: 048E963C92B611F0841D2F21C4F9AE02.roa (raw, json)
Hash identifier: 9QN47A/xiyVIjZhqkG9Ma9dyQH6r8QDrfXfIFF2/lM4=
Subject key identifier: 3B:00:1F:2C:71:AC:D2:38:48:0F:F8:4F:F7:51:FE:4B:6A:CD:64:83
Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial: 6B
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:39:59 +0000
ROA not before: Tue 16 Sep 2025 04:31:31 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152177
IP address blocks: 103.214.156.0/22 maxlen: 22
103.214.156.0/23 maxlen: 23
103.214.156.0/24 maxlen: 24
103.214.157.0/24 maxlen: 24
103.214.158.0/24 maxlen: 24
144.48.112.0/22 maxlen: 22
144.48.112.0/23 maxlen: 23
144.48.112.0/24 maxlen: 24
144.48.113.0/24 maxlen: 24
144.48.114.0/24 maxlen: 24
2407:ea40::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Validity
Not Before: Sep 16 04:31:31 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5149f-1e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:a8:d1:17:59:37:af:17:2a:24:30:a4:b4:
c2:62:04:ae:a3:e9:a9:25:36:c3:00:91:7a:d2:9c:
31:a0:c0:9d:19:d9:cf:3b:76:f5:e4:8a:57:4a:74:
30:c4:4c:33:57:59:65:c1:e1:99:c5:87:30:db:4c:
fd:cb:0f:9a:8b:8f:d8:58:27:6e:a7:a0:5f:1d:37:
91:a7:21:db:e2:42:59:d3:c1:12:4a:94:f6:cb:28:
f4:a6:e2:d2:69:51:28:46:20:21:d1:6a:c7:89:36:
b4:53:f1:9f:c4:42:d3:0c:1a:7f:59:04:63:ed:5f:
d4:69:ac:df:62:84:52:f6:21:9d:9a:50:b0:7c:d1:
9b:64:86:e4:1e:aa:f0:8b:7d:f5:0a:78:61:13:a5:
14:80:0f:76:88:d8:81:bb:21:f0:ec:09:ae:e3:34:
64:60:9a:ea:ae:1c:f6:c4:88:58:bc:49:cd:a3:dc:
09:af:74:9f:0d:96:58:cb:ba:25:41:6c:eb:a7:f6:
45:22:76:c0:05:cb:15:75:4a:84:f5:77:93:83:1e:
af:4e:5c:a7:75:6d:82:04:f2:93:78:ea:97:95:2d:
51:fd:9d:b5:96:7f:e8:8a:10:80:7a:ba:3f:f4:6e:
86:bf:e2:37:dc:e3:4e:ac:2e:a9:fd:c7:a2:c0:e5:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:00:1F:2C:71:AC:D2:38:48:0F:F8:4F:F7:51:FE:4B:6A:CD:64:83
X509v3 Authority Key Identifier:
keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.156.0/22
144.48.112.0/22
IPv6:
2407:ea40::/32
Signature Algorithm: sha256WithRSAEncryption
7e:77:77:cc:10:bb:e9:58:68:12:55:46:49:28:01:a8:82:43:
3d:10:de:f7:a3:ea:22:34:84:a2:70:5c:8f:0e:27:7c:77:d2:
7d:c7:9e:33:d5:8f:50:b3:9f:6a:4e:d3:22:c6:3a:12:24:f5:
12:95:79:73:e6:32:fc:9e:89:f2:a2:c2:c0:d7:de:9e:b0:79:
a0:00:67:e5:89:40:28:2c:c4:12:18:5f:6b:d7:dd:47:ca:d9:
cd:88:02:b1:a5:2b:0e:70:20:39:1d:30:2b:94:62:71:cf:20:
1a:9b:60:37:41:9b:ef:cd:f4:85:19:82:94:5c:3a:ef:30:5d:
dd:71:ab:18:d0:72:93:82:f8:7d:ae:52:73:4f:f2:3e:8a:80:
b6:39:6a:41:13:34:64:25:0b:00:85:73:16:a7:e8:c7:42:0d:
91:5b:ff:8a:8b:d5:d7:68:0b:70:80:02:54:ca:ce:77:d1:8a:
eb:b5:6c:a9:db:fd:5c:d0:52:e9:84:fe:01:48:f9:2a:bb:64:
5b:83:2b:f9:7f:81:d8:ab:89:61:b9:76:a3:08:f7:4c:63:9c:
11:66:80:2c:98:bc:37:16:c7:da:a4:96:8d:ea:47:4f:4c:a2:
c0:f6:3e:48:f4:d3:a1:37:f1:91:c8:15:5c:f0:8e:9d:b1:62:
ef:20:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:23 2026 by rpki-client