
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa
File: 7659B89AADCC11ED84051211C4F9AE02.roa (raw, json)
Hash identifier: eJa3zEY0Ga68FBEmFuzcrfb78XN2VTH6jOriLW6rBuc=
Subject key identifier: D1:74:B3:C2:7B:1C:CA:A2:C9:9D:B6:9C:E5:31:E1:A4:E6:19:44:11
Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Certificate serial: 024D
Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:58:41 +0000
ROA not before: Wed 03 Dec 2025 01:00:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139802
IP address blocks: 103.145.102.0/23 maxlen: 23
103.145.102.0/24 maxlen: 24
103.145.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl
rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0721, serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Validity
Not Before: Dec 3 01:00:34 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a51900-d953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:98:69:03:02:ec:e1:b0:5f:d4:09:97:59:
c0:d0:ec:8b:b2:57:e0:78:ad:2c:55:1d:61:88:ac:
1b:58:95:1e:4f:22:6f:1b:1b:81:86:d2:94:da:f0:
52:45:a4:8c:a3:7b:96:97:7e:be:e0:d3:4a:21:29:
17:94:f0:09:1c:38:84:d3:fc:95:81:65:20:88:3b:
6a:91:a3:3b:89:89:3a:9e:0a:8b:0c:85:9e:8b:84:
7d:47:72:e8:90:49:a1:24:b3:6b:d8:d5:09:79:6d:
e0:3e:49:5f:b1:7c:a6:9a:7f:e2:9f:22:18:7d:d9:
e2:d0:69:1a:f7:60:44:54:ff:0b:3e:db:43:20:75:
0d:bc:a8:e8:fb:31:d2:c2:96:62:d8:a3:cc:0c:f5:
bb:7a:7f:c2:6a:c9:49:66:1a:e2:c7:b0:16:2f:81:
c4:32:73:7d:c6:60:67:54:4f:f2:1a:a5:25:e6:9c:
43:57:bf:c7:19:a4:95:83:f5:d0:2d:41:25:8d:fa:
10:76:98:71:ec:18:c5:9d:a6:69:7e:16:e9:c6:01:
88:80:97:21:2b:00:b6:a4:97:ae:be:85:d9:6b:91:
1e:16:f1:f7:ba:87:fb:66:1b:76:4a:c3:f2:cd:2a:
df:42:44:61:a5:4d:86:01:24:b2:6b:f9:97:db:88:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:B3:C2:7B:1C:CA:A2:C9:9D:B6:9C:E5:31:E1:A4:E6:19:44:11
X509v3 Authority Key Identifier:
keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.102.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:74:ef:23:ab:c4:32:83:e9:44:83:9c:2f:02:8f:be:33:df:
e5:ae:0b:6d:fb:05:8d:e9:f8:43:2e:ee:22:e8:46:74:eb:6a:
76:ae:e6:18:df:bb:bb:e9:62:3b:53:51:28:d2:3a:20:08:a7:
11:75:38:0f:89:07:d1:0a:d3:30:fc:38:74:cc:92:2b:a6:5c:
4e:93:24:69:75:7e:05:c7:ac:12:e2:6e:de:ce:94:c9:99:10:
ec:1e:aa:2a:76:4a:ae:a8:2f:06:13:b4:58:3b:5f:a7:a0:ca:
0b:c6:a0:72:24:e4:65:10:10:c1:f9:c8:37:b8:01:ae:8e:48:
cf:8d:58:aa:06:2e:97:af:ba:61:d0:ae:94:53:23:ab:17:fa:
59:2a:0f:e4:fe:e3:56:c5:56:92:06:04:25:1b:44:d0:05:89:
13:c6:da:87:71:1d:6e:dc:6c:cf:99:6e:3b:d5:5a:d0:2e:6f:
46:2f:c0:9e:70:b0:db:68:eb:7a:e0:14:0d:9f:c9:a0:d8:bc:
48:8a:dc:ad:87:fe:cd:0d:0b:5a:eb:b0:41:e7:fa:19:f2:ce:
02:f4:c7:fb:42:e4:34:8f:14:6e:25:50:07:70:f3:ba:e7:e5:
fa:5f:90:75:92:5e:8c:3c:b9:39:87:ba:7c:dd:bf:1d:ff:6f:
7c:c4:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:10 2026 by rpki-client