
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa
File: 159DA092E9B711EFB8454123C4F9AE02.roa (raw, json)
Hash identifier: 7ShatlVB6jSiCRe5XmNvlt4TSEhHSPt1cgEmAve1hIw=
Subject key identifier: 71:1A:31:83:C0:31:8E:88:18:CD:84:14:A3:38:CD:6C:2A:24:CE:C5
Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Certificate serial: 04AA
Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:48:44 +0000
ROA not before: Sun 01 Mar 2026 01:21:31 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 149433
IP address blocks: 103.179.128.0/23 maxlen: 23
103.179.128.0/24 maxlen: 24
103.179.129.0/24 maxlen: 24
2401:eee0::/32 maxlen: 32
2401:eee0::/34 maxlen: 34
2401:eee0:4000::/34 maxlen: 34
2401:eee0:8000::/34 maxlen: 34
2401:eee0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Validity
Not Before: Mar 1 01:21:31 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a435ac-b143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:fc:87:42:d8:ec:90:45:e2:2c:66:76:38:
df:18:2f:97:af:aa:15:2d:30:e7:7e:87:fd:9e:b5:
8f:c0:c7:f2:0d:57:c0:1e:a0:b6:b2:2f:c1:b2:3d:
1f:00:1c:06:d5:9d:71:a3:1b:64:f1:67:15:3f:64:
ca:50:cf:4e:82:a2:70:a8:5d:4c:0a:01:f1:c0:94:
eb:73:45:eb:30:67:83:58:89:21:9e:61:55:7c:a4:
cc:7f:c3:d0:b5:96:9e:c1:9e:b8:de:43:92:fd:bf:
35:d3:1b:1f:bc:fc:1f:5d:a1:34:6e:b6:5d:6c:90:
a5:d3:79:88:fc:1c:95:ad:c3:20:9d:4e:1e:12:4d:
b9:90:ec:82:6d:27:d7:ad:99:3f:43:15:19:34:89:
41:7b:d5:96:0b:28:93:92:f6:c9:7d:c1:ba:b9:c2:
a5:b8:50:d0:29:fd:f5:57:bd:7d:d2:b5:a4:04:07:
02:5d:ed:f0:c9:ec:12:bf:24:75:9c:5c:22:b8:19:
81:b2:3a:55:42:2e:21:07:cc:10:a5:01:56:6f:9f:
59:c5:89:38:54:68:23:12:37:c9:0d:ff:4e:5a:41:
d9:eb:b3:54:50:e4:40:cc:ce:06:62:0e:b5:d4:87:
04:e6:94:d0:0c:66:85:4f:ec:38:aa:8b:a1:5f:8b:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1A:31:83:C0:31:8E:88:18:CD:84:14:A3:38:CD:6C:2A:24:CE:C5
X509v3 Authority Key Identifier:
keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.179.128.0/23
IPv6:
2401:eee0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:cb:64:fa:1b:5c:63:23:46:aa:25:d6:a7:5a:eb:af:92:94:
54:3f:66:d8:22:ab:42:1c:53:5e:40:bc:46:1e:d5:99:4d:58:
07:5b:83:c3:a7:7f:22:5e:eb:e8:60:c2:b7:fe:df:ae:50:7a:
7d:f5:f0:8d:8b:96:1f:2e:2d:9d:cf:bd:08:28:2b:7e:01:bf:
b2:eb:39:3b:c8:d3:01:c2:62:52:60:6d:9c:af:43:45:98:f3:
0d:cb:36:a7:89:80:a9:bd:65:4e:67:94:84:26:47:39:43:60:
c9:c4:70:89:3c:f4:a4:79:49:52:70:89:f4:17:31:6b:2c:e5:
6f:cf:d5:38:6f:f1:87:87:84:88:c7:a6:32:82:ef:62:73:6e:
fd:dd:ef:3f:8e:08:86:43:a2:7f:96:01:c2:ad:3f:b0:8c:b3:
6c:a6:0c:07:71:2f:19:69:9d:b3:cb:ab:89:05:5b:34:d1:75:
4f:d7:a4:99:43:76:b3:09:a2:e4:1d:78:b8:17:f5:43:b6:26:
c6:57:13:b9:0d:a5:f3:0d:a7:87:4a:bd:24:ca:48:a1:25:a4:
c4:83:2e:fb:f5:7b:ee:76:58:66:62:4f:5d:59:17:17:05:34:
f8:a1:78:23:60:c6:3c:dc:d1:65:60:50:42:40:ba:ad:8d:d4:
0b:87:93:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:15 2026 by rpki-client