
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa
File: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (raw, json)
Hash identifier: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=
Subject key identifier: FC:4B:B7:D7:60:DA:21:EB:F0:7D:6A:8E:10:54:78:2F:41:C6:16:E2
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 0856
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:46:23 +0000
ROA not before: Sun 02 Nov 2025 21:11:02 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141191
IP address blocks: 103.156.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2134 (0x856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: Nov 2 21:11:02 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a46d5f-4dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:66:f6:9a:9d:7e:d4:e0:cd:28:11:a7:9c:
da:63:d9:87:b0:88:2d:30:fb:b1:40:9d:6f:58:3c:
3f:b7:52:21:49:1e:50:10:09:18:61:74:1e:8c:92:
3f:a2:ca:6e:71:6d:78:33:4a:44:5a:e0:5f:4d:8e:
7b:08:3b:09:ed:6a:6a:d1:7a:9e:35:67:72:e3:70:
5a:e7:b7:13:9c:d5:37:d1:f2:67:1b:29:fe:29:61:
72:32:95:75:3f:ff:f5:d7:e0:21:ba:32:46:22:97:
8d:6d:3f:ee:32:61:80:2b:26:3d:b4:8e:cf:a0:94:
e7:5b:cf:4a:38:6b:29:8e:3a:be:04:29:ba:fe:b9:
27:8b:b4:e5:2b:27:65:dd:51:ea:90:10:4d:65:34:
14:20:7c:09:fc:ab:37:d1:54:81:28:04:1b:1c:29:
4c:bb:84:85:f7:37:60:6b:a5:66:7e:1e:0f:43:2d:
ff:82:49:7a:74:62:d6:6b:a8:f3:4e:92:a0:82:af:
71:a4:d6:74:f4:61:63:6b:ca:93:48:d2:37:0e:47:
64:43:0c:eb:e3:4d:01:dd:a7:60:cd:9c:fb:24:6c:
7e:4c:69:7a:9c:4d:6c:bc:7f:d1:6c:7c:7c:2a:fb:
b5:3a:f4:fa:e1:cc:a1:d7:91:eb:44:d9:c5:32:3f:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:B7:D7:60:DA:21:EB:F0:7D:6A:8E:10:54:78:2F:41:C6:16:E2
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:2a:6a:20:33:a7:2e:9d:3c:15:d0:64:a7:1c:92:bb:cf:db:
f0:7e:0e:ce:5b:4c:8d:76:a5:ec:9a:72:a8:df:86:96:92:ad:
a3:50:00:56:d0:6c:70:53:45:7e:3a:20:18:2d:a3:b0:ab:87:
d0:fb:29:65:1a:1c:a1:89:9a:c0:52:eb:43:38:5f:1f:c8:ab:
0b:47:5c:06:11:b8:02:d3:7c:c0:48:6d:54:15:07:a8:f5:92:
63:d9:03:2d:2c:99:63:30:b6:a1:9e:cd:6f:f7:c9:32:ac:68:
ed:70:67:5d:7a:43:a7:ac:57:20:8c:4f:70:4e:c9:e8:5a:c6:
04:33:80:a7:0e:eb:37:78:92:1f:a5:4a:32:77:05:81:87:e3:
e7:99:39:1d:80:5e:00:7a:9a:d5:9f:82:46:83:c4:52:ff:0d:
1f:d6:f5:51:5f:35:09:4d:f2:31:cd:ff:ba:e5:c3:25:4c:9c:
20:54:ae:22:00:3b:f3:b6:0c:35:94:32:0f:de:f9:5f:25:9b:
d3:92:30:e5:71:fc:3f:4e:c4:89:fd:5a:8c:77:9c:90:39:7e:
f7:cc:6e:2e:68:80:a8:8a:bd:42:6e:4f:bc:f1:52:50:14:39:
5c:28:49:58:d4:66:cc:07:7d:54:3e:c8:c4:13:21:54:ac:96:
37:4f:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:45 2026 by rpki-client