
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/D59CB8F4968511EF93AE8239C4F9AE02.roa
File: D59CB8F4968511EF93AE8239C4F9AE02.roa (raw, json)
Hash identifier: wqlmOzC4r2OFFnVkKx+k6opW2fr0/I9zXCLneKuJctU=
Subject key identifier: 1F:CA:89:FF:5C:65:4F:54:F8:48:8E:A0:D3:B9:1F:19:CC:33:67:53
Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial: 0D48
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/D59CB8F4968511EF93AE8239C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:13:04 +0000
ROA not before: Sun 04 May 2025 18:28:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139053
IP address blocks: 103.214.82.0/24 maxlen: 24
144.48.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3400 (0xd48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Validity
Not Before: May 4 18:28:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59af0-9e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:8e:9f:5e:28:14:ec:c0:23:8c:83:62:d8:
d9:a3:86:6b:b3:08:ec:01:60:f4:4b:ba:0e:78:0e:
5f:53:55:67:d6:70:b5:26:0b:57:05:7b:f0:3d:de:
96:91:08:f6:b7:1f:ec:7a:9f:3a:85:43:1c:55:69:
28:1d:d6:8a:b0:0b:d2:9c:39:19:d3:2e:40:9a:63:
31:e3:e5:87:0f:e6:94:78:3a:a1:f4:fe:77:70:8c:
67:9c:0e:70:ff:76:c9:5f:6f:02:66:f2:b9:e6:bc:
ad:fb:be:32:5d:6e:78:10:9b:e0:f8:59:59:82:4b:
03:3b:97:bf:fe:f1:25:f7:fc:0e:59:e1:8f:ba:16:
19:42:a9:33:19:a7:19:29:fa:85:ca:e3:5b:4b:c6:
31:b6:d0:5c:f4:21:5d:b3:22:c7:27:95:e5:e5:dd:
7f:c0:c0:32:77:8e:d0:4a:7a:5c:ef:bb:19:63:62:
71:cd:0f:9b:b8:67:5a:97:7f:85:fc:0e:9c:fc:06:
6e:97:95:fc:9b:e3:b7:75:3f:e0:fa:ad:7f:81:ac:
35:aa:3e:ce:6d:8b:a0:e7:3a:48:a2:66:31:c1:7e:
c3:8f:28:8a:62:f1:0f:d3:58:d8:03:f4:a4:57:09:
be:ee:4c:7e:ae:d9:2f:70:b2:a4:cc:f9:a0:87:20:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CA:89:FF:5C:65:4F:54:F8:48:8E:A0:D3:B9:1F:19:CC:33:67:53
X509v3 Authority Key Identifier:
keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/D59CB8F4968511EF93AE8239C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.82.0/24
144.48.84.0/24
Signature Algorithm: sha256WithRSAEncryption
10:13:a6:f8:d5:a2:05:f3:4f:d0:a4:75:de:5c:17:c9:da:c2:
d7:47:f0:83:7c:43:3b:03:33:eb:16:9a:dc:51:00:4c:1f:f1:
3a:96:32:b0:b6:2c:69:77:40:73:5f:4b:1f:71:87:59:c3:5a:
20:b5:f1:82:de:e2:82:62:77:2d:a4:f0:5c:7e:91:1c:d2:33:
ac:4a:7e:0c:d4:bb:54:2a:d4:74:53:91:23:cc:7f:28:a9:64:
f1:1e:7f:be:e4:02:f7:f9:02:07:81:d4:98:2e:bb:b6:91:8b:
48:df:4b:b9:09:95:ab:28:53:c2:99:bf:f9:ca:b7:f2:59:b8:
ac:46:75:ba:20:1d:23:87:56:e2:f4:76:56:7e:51:cc:d6:12:
35:40:d2:c6:40:21:b3:1b:dc:56:0b:e0:28:da:93:34:8e:28:
29:cc:c2:7c:cd:1a:bc:df:d4:d6:58:64:a1:9c:dc:26:6f:de:
2e:8d:88:9e:a9:82:6d:e7:ad:e2:da:88:3b:79:37:aa:a8:ae:
4c:2b:aa:5d:85:2b:8c:78:61:0b:7e:30:00:35:dc:40:46:ee:
9c:ed:c5:9f:83:c5:75:16:fb:5d:1c:49:24:e5:c9:c4:56:17:
f5:19:b7:a3:4d:90:fb:28:ff:6b:5c:01:ae:1b:04:e7:a3:e9:
b1:6b:54:f5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE
MTdGQTk2Q0QwHhcNMjUwNTA0MTgyODEyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWFmMC05ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRGOn14oFOzAI4yDYtjZo4ZrswjsAWD0S7oOeA5fU1Vn1nC1JgtXBXvwPd6W
kQj2tx/sep86hUMcVWkoHdaKsAvSnDkZ0y5AmmMx4+WHD+aUeDqh9P53cIxnnA5w
/3bJX28CZvK55ryt+74yXW54EJvg+FlZgksDO5e//vEl9/wOWeGPuhYZQqkzGacZ
KfqFyuNbS8YxttBc9CFdsyLHJ5Xl5d1/wMAyd47QSnpc77sZY2JxzQ+buGdal3+F
/A6c/AZul5X8m+O3dT/g+q1/gaw1qj7ObYug5zpIomYxwX7DjyiKYvEP01jYA/Sk
Vwm+7kx+rtkvcLKkzPmghyA6ZQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB/Kif9c
ZU9U+EiOoNO5HxnMM2dTMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0
NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVCRTMvODBBRTEwQzYwNDUwMTFFQUJBODJDNDE1QzRGOUFFMDIvRDU5Q0I4RjQ5
Njg1MTFFRjkzQUU4MjM5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ9ZSAwQAkDBUMA0GCSqGSIb3DQEBCwUAA4IBAQAQE6b41aIF80/Q
pHXeXBfJ2sLXR/CDfEM7AzPrFprcUQBMH/E6ljKwtixpd0BzX0sfcYdZw1ogtfGC
3uKCYnctpPBcfpEc0jOsSn4M1LtUKtR0U5EjzH8oqWTxHn++5AL3+QIHgdSYLru2
kYtI30u5CZWrKFPCmb/5yrfyWbisRnW6IB0jh1bi9HZWflHM1hI1QNLGQCGzG9xW
C+Ao2pM0jigpzMJ8zRq839TWWGShnNwmb94ujYieqYJt563i2og7eTeqqK5MK6pd
hSuMeGELfjAANdxARu6c7cWfg8V1FvtdHEkk5cnEVhf1GbejTZD7KP9rXAGuGwTn
o+mxa1T1
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:30 2026 by rpki-client