
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/EA903484DBE011EF8B7B8868C4F9AE02.roa
File: EA903484DBE011EF8B7B8868C4F9AE02.roa (raw, json)
Hash identifier: qYrHqLo6UNCs7hu1fqjRiYyLDCXIk6/ZaenYZLihdqs=
Subject key identifier: 54:85:AB:9B:8D:C0:5E:94:0F:5F:2A:D4:8D:88:E6:ED:28:2C:21:AA
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0CBF
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/EA903484DBE011EF8B7B8868C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:41:19 +0000
ROA not before: Sat 26 Apr 2025 18:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138953
IP address blocks: 103.137.160.0/24 maxlen: 24
2001:df0:2480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Apr 26 18:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a425df-dd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:70:74:44:6d:9b:8d:b3:01:a6:3a:82:15:
25:da:ce:72:d3:44:38:4c:97:04:cb:b6:44:c4:e4:
c4:56:a1:3e:d8:28:7b:c2:b4:68:10:61:9f:35:05:
43:48:46:ef:59:2a:cf:89:99:46:ae:c5:0a:3f:a4:
66:2e:23:9f:1b:ce:0d:b8:a4:af:3d:3b:f0:7c:aa:
b8:f1:d3:ab:96:5d:93:d0:c0:88:e0:b7:99:04:5c:
24:50:c4:58:20:af:79:24:36:af:33:0f:cc:bf:78:
9c:07:15:eb:a9:68:a8:2e:fa:f9:b5:ab:7f:b6:2b:
ce:57:61:6e:f2:dd:6d:7a:3a:3e:44:4b:76:d7:4a:
36:22:d3:0a:ac:8d:2f:f5:c7:f1:0a:73:5f:d7:75:
e2:f4:73:9e:90:cc:f2:d0:78:84:48:2f:c5:1b:51:
bb:c3:6c:b6:1a:bf:09:25:13:03:91:cc:7f:8b:06:
a1:2c:3d:c4:e4:93:df:e6:a2:c8:15:5b:de:e2:f1:
73:30:df:88:27:2f:e4:84:70:2f:8c:85:0a:75:57:
00:37:35:79:3b:55:99:de:c7:90:7b:a7:bd:db:b9:
71:07:e6:26:51:6a:85:ce:ae:19:f9:9b:78:88:26:
37:16:2f:07:3c:ba:5d:02:78:69:af:8d:09:ca:5e:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:85:AB:9B:8D:C0:5E:94:0F:5F:2A:D4:8D:88:E6:ED:28:2C:21:AA
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/EA903484DBE011EF8B7B8868C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.160.0/24
IPv6:
2001:df0:2480::/48
Signature Algorithm: sha256WithRSAEncryption
03:c1:95:f5:fc:0e:bf:f3:cc:ef:0c:71:b3:88:d5:32:b7:87:
53:5e:1e:1a:a7:83:a0:6c:6c:a6:f8:f5:03:ab:f3:c4:ae:5d:
21:40:a8:40:fe:80:bb:de:8a:41:cf:b2:c3:ce:01:16:5e:21:
91:e6:b6:3a:3a:23:2b:9c:76:40:d8:6a:bc:ed:8a:a0:bc:db:
ee:1e:b6:44:5a:c6:25:cc:c1:07:a4:97:f8:5c:3c:0c:26:cd:
fe:d5:cd:2a:62:5d:90:65:ad:83:97:bc:09:51:ad:27:19:c5:
27:05:ca:9f:f8:59:ee:d1:e4:8b:9a:09:6f:6a:1f:37:cb:55:
40:2a:77:69:de:75:a2:58:26:21:a9:fb:13:2c:dd:58:b5:db:
6e:33:c6:30:eb:96:df:1b:0c:fd:45:3b:7f:88:6f:59:38:b2:
42:20:7c:e3:e6:c8:54:0e:c1:5d:d6:2c:0c:f0:c2:2a:99:62:
93:ab:25:2d:b3:73:eb:b8:24:44:98:7c:b9:72:67:d9:86:18:
b2:d7:6b:db:83:94:13:77:67:9f:e7:a0:97:fa:9d:5c:32:c0:
3b:d7:c4:98:45:c2:57:56:ed:f7:c3:74:10:49:91:06:17:2c:
bb:26:68:12:ca:a3:7b:a5:d8:37:32:00:e9:2c:06:65:66:e1:
03:88:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:17 2026 by rpki-client