
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa
File: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (raw, json)
Hash identifier: tFJq8prm/jm01/luS9MVt882V4/WGQN42LpWhd1UgG4=
Subject key identifier: BA:05:B0:F6:F5:B7:C6:78:25:B8:23:DB:CB:3D:B0:C3:9D:D5:F3:70
Certificate issuer: /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Certificate serial: 0B7D
Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa
Signing time: Sat 14 Mar 2026 19:24:58 +0000
ROA not before: Sat 14 Mar 2026 19:24:58 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140087
IP address blocks: 103.148.82.0/23 maxlen: 24
2001:df2:c580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2941 (0xb7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Validity
Not Before: Mar 14 19:24:58 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b5b60a-cb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:bb:f5:14:3e:2d:02:43:3e:b6:13:f2:4c:
0e:07:a2:63:2c:40:1b:6c:e0:39:7e:be:ae:3a:e0:
24:19:15:44:e5:88:af:8e:07:17:ef:7c:e8:f6:b7:
7d:f6:9d:66:d5:5e:55:02:d8:97:14:fd:f8:37:43:
d3:dd:4f:7d:d7:13:b2:a1:4a:be:e1:5a:96:69:a0:
bf:43:c9:00:e6:6c:4d:6b:37:b0:d4:52:6f:c7:c8:
9b:f8:35:86:29:a3:5c:52:7d:1d:25:b6:9f:cb:f1:
06:ce:f8:a4:6f:6e:5f:86:c4:e3:7b:e4:e6:67:36:
4c:2d:7c:8a:22:0c:f6:2a:ad:f7:85:82:9b:38:91:
24:86:4c:d5:fb:d3:a3:5f:7a:ca:84:d1:d0:7d:ad:
c4:98:6a:07:3d:73:c0:4c:e4:94:19:fc:cf:86:92:
b1:f9:55:43:76:3a:05:e0:78:3f:ab:33:8c:3b:f8:
fa:f9:9f:f2:ed:12:9d:ac:e9:36:b1:2a:9d:cf:6c:
93:77:f8:6e:a8:c9:ce:e5:90:2b:23:8b:57:a3:ec:
07:e1:24:ea:03:c6:e5:6d:ad:e8:7f:b0:62:c8:54:
c3:73:4d:b7:38:65:45:79:6b:9b:01:0f:b0:26:d9:
ed:e6:17:ea:c0:7f:0d:8a:ac:5b:a4:14:bf:81:3f:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:05:B0:F6:F5:B7:C6:78:25:B8:23:DB:CB:3D:B0:C3:9D:D5:F3:70
X509v3 Authority Key Identifier:
keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.82.0/23
IPv6:
2001:df2:c580::/48
Signature Algorithm: sha256WithRSAEncryption
39:f0:d5:64:7c:e8:c7:a1:1d:02:30:f9:45:db:ac:57:fa:60:
7d:b6:20:2e:19:60:c3:90:e3:99:91:14:01:57:d0:47:01:6c:
c5:64:df:57:20:cd:93:5d:98:12:0c:d1:bc:25:a8:cc:37:b2:
21:18:9d:09:27:7a:fc:f4:69:2c:2e:2d:8a:93:5f:45:9e:62:
dc:9b:09:71:fa:5b:f7:44:c4:4a:06:c2:74:8f:34:46:fb:9a:
c1:37:1c:d0:59:5c:ec:d7:e9:48:8f:34:04:71:86:b2:6c:79:
74:45:03:cd:88:a9:e8:e3:13:5a:fc:66:d1:ca:26:52:57:63:
b6:57:d9:55:fc:93:23:64:a8:4f:b6:5d:74:09:15:ec:0f:b7:
00:cf:b2:cf:4c:3b:33:cb:2a:ee:73:4b:28:8d:c1:14:16:52:
50:d0:68:2f:21:ed:3e:69:b2:42:6e:3a:98:1a:02:1a:fc:0c:
e6:eb:8c:dd:ef:93:82:f6:bd:21:52:60:c5:e5:17:73:e4:bd:
04:9e:07:86:1e:41:59:3c:09:e2:ab:6b:ee:e3:01:14:f3:31:
3a:2f:5c:e5:c1:3e:e2:cf:c3:f9:51:21:db:1c:f3:ab:4d:7e:
c5:73:c5:6e:d3:21:76:b5:2a:0d:52:9f:ad:9f:39:5b:e2:c4:
18:9c:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:26 2026 by rpki-client