
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
File: F865B8887CEB11ECA79BD83DC4F9AE02.roa (raw, json)
Hash identifier: 2aYC0ELWow+IfSe343bqAO+DbKR4exbO+moWs9x1JMo=
Subject key identifier: 1E:CE:1F:73:7F:84:7D:ED:81:05:32:06:8B:F4:F2:69:B2:35:9B:03
Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Certificate serial: 048F
Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:49:19 +0000
ROA not before: Wed 05 Nov 2025 00:45:00 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136533
IP address blocks: 103.175.150.0/23 maxlen: 23
2400:1ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167 (0x48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Validity
Not Before: Nov 5 00:45:00 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a435cf-67a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:9b:22:0e:a8:45:b6:71:17:ba:5b:da:f7:
7a:be:eb:ba:91:33:95:24:bc:8b:20:14:7f:a1:c7:
ed:df:bf:0e:a4:0f:f7:82:6f:54:87:13:1f:e7:3e:
fa:1b:43:a5:89:6d:56:6b:e9:38:d4:bb:9b:17:ce:
14:52:81:47:83:3d:32:b9:ce:51:74:3a:2a:fe:3c:
e2:ae:e1:e8:9c:95:ec:af:c3:7b:5c:b6:52:45:3a:
ad:95:0c:56:43:e0:d7:c0:7a:ed:65:89:de:f5:a4:
df:c2:e0:d4:05:bb:d7:66:08:61:e4:00:0e:4d:d4:
03:ef:11:5f:79:70:cc:16:cc:96:d1:ef:b8:e6:4b:
96:fd:96:f3:4b:2d:f9:68:fe:13:8f:a3:c3:83:a3:
18:73:07:70:19:b1:99:7f:20:2f:97:49:0a:03:b9:
77:1a:71:93:10:25:0d:4c:f8:aa:e5:03:84:b0:2c:
5b:f4:e3:21:8b:66:93:ac:85:32:4f:d8:b4:11:df:
d9:03:10:ab:1a:61:de:1d:79:ef:43:71:d0:ef:ae:
e3:e8:ed:50:88:5e:91:3b:96:7c:65:a1:d5:c5:a9:
58:41:1b:40:e7:32:fc:9f:07:dd:07:26:f1:a7:ff:
72:80:14:af:4b:8f:12:ca:f4:e1:03:6a:63:14:33:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:1F:73:7F:84:7D:ED:81:05:32:06:8B:F4:F2:69:B2:35:9B:03
X509v3 Authority Key Identifier:
keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.150.0/23
IPv6:
2400:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:41:21:2d:24:8a:98:d8:2c:27:c9:78:d7:f7:f0:70:0d:eb:
a6:65:c9:52:7a:2e:f0:84:d1:51:3f:3b:e8:8d:9a:9b:f6:c8:
76:65:85:6f:1a:ba:2e:85:d2:66:86:b9:a1:c1:8c:be:00:b8:
66:cd:8b:86:93:ca:68:a9:35:6d:51:4f:12:b0:01:64:88:08:
bc:bb:bb:5b:8a:17:1a:dd:7e:39:31:19:b8:09:80:58:f1:71:
72:27:68:a8:36:13:07:70:e2:f2:dd:5e:96:a4:cd:1c:c8:1d:
40:33:52:ed:4a:75:7d:bf:77:76:96:f3:59:b3:60:f7:8e:a9:
eb:a7:97:7b:56:6b:f0:37:26:39:41:b9:70:8c:26:3c:6f:31:
02:9d:67:fc:99:66:9d:c5:de:5f:80:e1:66:1f:cd:dc:f9:7a:
85:19:ea:56:89:39:b9:8e:e2:31:66:7d:d1:49:58:95:60:38:
c1:e3:75:14:62:8d:0a:6f:6c:8a:87:89:70:ac:3f:37:1b:5a:
d3:1a:d2:02:dd:3f:57:aa:aa:bd:5c:eb:7f:eb:5b:d8:24:ba:
9d:a5:7d:97:72:02:cd:33:20:e4:cb:a3:7a:ec:34:db:58:07:
6b:eb:d9:a6:9b:45:cf:cf:33:7e:94:97:5b:03:28:53:98:ee:
4c:69:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:14 2026 by rpki-client