
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CAF5CED2E1A511EC8AB72944C4F9AE02.roa
File: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (raw, json)
Hash identifier: kBeeEqAw0diDfwSiGukPQsABNUsAeKM1rhQVHNmy2e8=
Subject key identifier: D2:9C:A0:30:21:C7:48:AF:48:C8:A9:AF:9B:01:57:75:6D:2C:13:A3
Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial: 0862
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CAF5CED2E1A511EC8AB72944C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:36:49 +0000
ROA not before: Tue 06 May 2025 21:31:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.151.192.0/24 maxlen: 24
103.151.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Validity
Not Before: May 6 21:31:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a408b1-b996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:98:7a:ed:53:e8:db:d8:6e:31:02:5e:e6:
65:d1:e2:d7:8d:fc:83:0e:52:68:34:ff:cc:09:bb:
10:2c:db:aa:98:ce:44:c7:77:75:83:90:58:3d:b3:
5f:68:d8:18:b6:6b:01:76:e4:d8:83:3a:e9:39:97:
bd:31:f3:5f:8b:b0:7c:38:18:9a:cd:80:21:fb:ef:
29:c8:4c:4d:b6:f9:fb:25:3d:0a:46:b5:2b:fd:91:
86:81:8e:a1:84:fa:29:7f:72:2a:ee:f1:3a:d6:fa:
73:55:9d:15:3d:33:cd:bf:26:6b:c7:a6:26:d8:a8:
9f:cc:61:ec:03:19:d4:80:a2:d8:77:f6:13:4f:e4:
2e:8a:9b:2f:d7:a6:af:6b:43:e3:a7:69:28:9f:2b:
9d:67:69:46:78:5d:38:c1:50:39:9b:2d:28:94:01:
0d:6b:0e:5a:89:57:37:3d:8d:0e:95:bd:2b:09:0d:
24:7d:33:70:e9:9c:c0:de:dc:c2:0c:bb:04:fb:93:
a5:c5:d6:7b:9d:3a:f0:35:a9:34:c7:5e:33:32:34:
b8:92:c6:b7:50:4c:88:d0:6f:ce:e9:21:44:c6:7c:
d3:e0:a8:73:2c:9c:5e:3e:c2:12:78:7e:88:61:e7:
93:81:a0:a8:9e:41:90:00:11:73:ee:ae:5a:fa:62:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:A0:30:21:C7:48:AF:48:C8:A9:AF:9B:01:57:75:6D:2C:13:A3
X509v3 Authority Key Identifier:
keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CAF5CED2E1A511EC8AB72944C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.192.0/23
Signature Algorithm: sha256WithRSAEncryption
38:7e:4b:39:49:a5:dd:b6:28:5c:f0:5c:b5:67:f8:07:4b:f6:
20:3c:22:dc:82:67:46:6c:bd:75:9c:fb:aa:41:91:2a:fc:46:
a6:55:2f:36:4d:69:f6:cf:2a:16:9c:6e:d1:53:8e:69:69:0b:
17:d9:06:79:22:55:0f:c7:7a:d8:cf:b4:88:37:e7:52:b6:56:
28:ed:b2:f1:73:76:7a:bf:9a:33:32:4f:33:54:e6:78:6c:61:
a0:ee:5c:e6:7c:ed:df:a5:a5:f4:48:d4:fc:b6:db:ff:94:bd:
47:c7:db:37:da:b2:01:d8:5f:1b:96:cd:a8:ba:f3:f3:ac:b0:
2b:d6:73:9f:de:43:77:3a:6e:e3:63:f6:50:ea:d0:e4:a9:de:
96:c4:d1:da:75:7e:0d:26:a2:f5:d4:95:fb:34:ff:83:43:95:
d1:de:f3:e0:d1:34:a6:51:9d:92:bb:62:44:a7:b2:ac:b1:3e:
a2:67:d0:de:72:18:56:30:d9:c2:1d:6d:53:ac:a6:62:9b:15:
45:84:9e:1b:dd:59:12:c5:63:fa:5a:7e:70:a0:2c:19:27:78:
a5:2d:49:bb:59:b8:ce:cc:c5:bc:e4:83:47:f2:17:e6:e4:09:
a4:e5:46:fb:d6:85:b7:ce:6a:11:9a:03:82:11:f4:df:9e:f5:
80:ba:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:50 2026 by rpki-client