
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa
File: 2A425550ADCA11EC9AD18044C4F9AE02.roa (raw, json)
Hash identifier: xPGpz8DL8ktRdkErUAI2qz+k2Ed7ll35xRQkBX7lQE0=
Subject key identifier: EA:E1:8F:93:8E:14:54:02:EC:DC:4B:6E:E9:DC:D7:74:34:ED:71:5D
Certificate issuer: /CN=A91D15BF/serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E
Certificate serial: 0427
Authority key identifier: F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:02:27 +0000
ROA not before: Wed 03 Sep 2025 01:16:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 137976
IP address blocks: 103.119.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.crl
rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063 (0x427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D15BF, serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E
Validity
Not Before: Sep 3 01:16:53 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a40eb2-e44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:91:25:cb:3d:ee:4a:de:42:7d:b7:ba:9d:
d1:2e:0c:56:24:91:d2:e0:86:f2:7b:56:1d:7e:8f:
9d:68:13:2f:e3:68:a5:df:fa:59:e0:26:7e:bb:81:
6b:e6:0e:bd:b2:c0:b0:c6:06:28:f4:8c:c2:88:39:
94:35:23:81:5e:6c:4f:54:10:d2:83:0b:a6:d0:74:
60:24:f9:ad:04:3b:52:a6:d7:17:84:7e:e5:8d:62:
9c:a8:69:1a:60:1e:5d:c4:8f:bd:79:22:9a:ef:04:
fd:76:50:3b:2b:e5:41:03:0c:f3:e5:90:f2:d0:d9:
db:2e:cb:46:06:57:53:e9:a5:90:e8:3f:f6:03:7f:
6d:b0:f4:bc:71:96:a7:24:36:8c:04:a9:c5:66:db:
6f:5c:96:5e:75:ba:a9:28:41:fa:8e:33:88:eb:46:
0c:83:67:d2:e3:a3:e9:42:e5:24:14:71:cc:d7:be:
84:b9:8e:27:43:32:e9:0e:a3:f4:e0:25:b2:de:44:
34:2e:14:21:34:01:92:97:0c:e9:c4:f6:da:e8:6a:
30:84:65:63:dc:22:fc:08:2e:db:b9:2b:5e:ed:8b:
27:77:b1:b8:84:5a:b1:18:7f:4e:ef:b3:04:98:fe:
89:11:fd:1b:6d:d4:d3:55:f7:ae:60:12:dc:db:61:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:8F:93:8E:14:54:02:EC:DC:4B:6E:E9:DC:D7:74:34:ED:71:5D
X509v3 Authority Key Identifier:
keyid:F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/2A425550ADCA11EC9AD18044C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.119.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:d5:52:92:5e:68:f4:31:82:5e:56:ae:51:f8:03:7c:4a:ba:
76:42:7d:fa:32:76:18:4a:3c:37:9c:ca:67:72:83:d1:55:51:
2c:14:cc:36:56:bf:fe:99:c2:7a:83:22:82:03:f7:4e:f5:b7:
df:70:d3:df:3e:1a:45:5c:c5:1a:3c:93:99:78:35:98:d4:b9:
fd:cb:34:0f:01:4b:17:1b:4c:74:dd:bb:64:2e:d4:d8:6a:25:
02:be:e5:cd:89:20:46:0c:64:6d:74:fb:46:47:b6:3c:b0:d2:
8c:0b:24:ca:b5:42:cd:84:db:fa:b8:0e:bc:bd:74:ca:f0:e3:
64:32:b9:46:3a:05:70:8b:42:4f:47:90:36:68:ba:be:96:fe:
e9:f2:eb:35:a1:a0:5a:ab:84:fa:87:80:b1:30:21:a2:34:9b:
f1:82:d8:66:23:e5:34:40:35:6c:68:d0:7f:c7:67:bd:e7:ad:
35:37:05:d4:80:01:14:d0:72:57:d7:d7:67:b2:37:e3:78:86:
03:e1:1e:73:ca:b6:7e:33:17:2d:cc:39:0e:1e:b7:d0:6f:32:
5e:5e:a4:40:eb:a2:7e:23:9e:1f:c9:be:e3:22:c9:61:8b:90:
fb:0a:f7:99:df:b4:9f:c7:35:5d:ba:c7:28:ad:79:58:30:1e:
d2:7f:ad:9b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE1QkYxMTAvBgNVBAUTKEY3NzE4MTRDRjZCRjBEMTlCNjMyNDkwOEQwN0UxRTQw
QUJCRUY3NkUwHhcNMjUwOTAzMDExNjUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGViMi1lNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKeRJcs97kreQn23up3RLgxWJJHS4Ibye1Ydfo+daBMv42il3/pZ4CZ+u4Fr
5g69ssCwxgYo9IzCiDmUNSOBXmxPVBDSgwum0HRgJPmtBDtSptcXhH7ljWKcqGka
YB5dxI+9eSKa7wT9dlA7K+VBAwzz5ZDy0NnbLstGBldT6aWQ6D/2A39tsPS8cZan
JDaMBKnFZttvXJZedbqpKEH6jjOI60YMg2fS46PpQuUkFHHM176EuY4nQzLpDqP0
4CWy3kQ0LhQhNAGSlwzpxPba6GowhGVj3CL8CC7buSte7Ysnd7G4hFqxGH9O77ME
mP6JEf0bbdTTVfeuYBLc22HkqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOrhj5OO
FFQC7NxLbunc13Q07XFdMB8GA1UdIwQYMBaAFPdxgUz2vw0ZtjJJCNB+HkCrvvdu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVCRi8zREIwRjlDQTlG
ODgxMUVDQURBMEM5MERDNEY5QUUwMi85M0dCVFBhX0RSbTJNa2tJMEg0ZVFLdS05
MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzkzR0JUUGFfRFJtMk1ra0kwSDRlUUt1LTkyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE1QkYvM0RCMEY5Q0E5Rjg4MTFFQ0FEQTBDOTBEQzRGOUFFMDIvMkE0MjU1NTBB
RENBMTFFQzlBRDE4MDQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3cUMA0GCSqGSIb3DQEBCwUAA4IBAQB81VKSXmj0MYJeVq5R+AN8
Srp2Qn36MnYYSjw3nMpncoPRVVEsFMw2Vr/+mcJ6gyKCA/dO9bffcNPfPhpFXMUa
PJOZeDWY1Ln9yzQPAUsXG0x03btkLtTYaiUCvuXNiSBGDGRtdPtGR7Y8sNKMCyTK
tULNhNv6uA68vXTK8ONkMrlGOgVwi0JPR5A2aLq+lv7p8us1oaBaq4T6h4CxMCGi
NJvxgthmI+U0QDVsaNB/x2e95601NwXUgAEU0HJX19dnsjfjeIYD4R5zyrZ+Mxct
zDkOHrfQbzJeXqRA66J+I54fyb7jIslhi5D7CveZ37SfxzVduscorXlYMB7Sf62b
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:36 2026 by rpki-client