
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa
File: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (raw, json)
Hash identifier: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=
Subject key identifier: A3:E8:44:E5:05:1E:B2:F2:6B:7D:E2:07:B4:DC:D5:1B:AD:02:3B:67
Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Certificate serial: 018A
Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:07:44 +0000
ROA not before: Tue 09 Dec 2025 02:41:52 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139794
IP address blocks: 103.145.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Validity
Not Before: Dec 9 02:41:52 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a599b0-2ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:26:b6:14:ac:11:b3:4a:b3:c0:38:0b:28:
50:63:34:75:4c:03:aa:ad:90:30:3a:e3:21:18:aa:
18:ab:26:56:8f:32:f2:e8:af:7d:b1:48:ec:bd:c0:
d7:0b:79:35:3b:03:3a:cc:e7:f1:2f:a6:15:27:ef:
54:7e:d5:70:3a:e3:97:a5:b6:aa:57:bb:4e:6d:1f:
cb:5a:55:35:ab:37:10:fc:a0:42:60:94:ee:b3:6e:
12:71:07:b2:13:e3:2e:ce:47:3f:06:0c:cf:66:60:
e6:ff:a4:e1:39:50:92:55:96:95:2c:4d:7c:51:46:
ab:ff:6a:6b:8d:73:94:fd:d9:10:bb:f8:df:4b:e6:
c7:82:da:91:8c:a6:3e:06:9c:70:8b:45:22:52:85:
9f:b9:e4:e9:28:73:57:24:80:1d:ba:c8:22:0f:f8:
db:82:0a:ba:8b:b5:14:43:03:6f:81:22:af:94:d9:
cc:4b:f2:28:c0:49:cc:52:6f:02:d0:a4:95:47:6b:
a2:27:47:6a:29:6e:dc:f5:71:aa:75:66:81:2c:2a:
95:2e:55:62:28:fb:14:92:92:9c:1b:3e:64:61:a8:
29:a3:5a:7c:7d:a1:e7:9e:d9:14:f1:7d:bc:c5:3e:
65:02:ee:b4:fc:74:55:9f:cb:af:16:7e:24:25:49:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:44:E5:05:1E:B2:F2:6B:7D:E2:07:B4:DC:D5:1B:AD:02:3B:67
X509v3 Authority Key Identifier:
keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:51:87:c7:de:d4:f6:1b:b4:d9:16:c6:ac:88:98:60:94:3b:
c2:67:22:44:55:47:4c:a5:97:44:44:81:67:19:39:2c:11:9a:
ff:ab:2b:3b:d8:f7:78:5d:a3:af:a0:99:fc:26:aa:f5:e5:82:
d4:9d:da:30:46:90:b7:6b:ee:bb:72:ac:17:0c:69:49:bc:e6:
53:98:1e:3f:2e:1a:71:f6:85:56:5d:83:89:88:d9:fb:5b:42:
49:e1:d1:99:05:e1:a8:7a:6c:3e:b9:f1:c5:3d:81:a7:b3:7c:
00:93:32:c1:a7:b3:a2:f3:28:b4:44:87:61:56:8c:43:90:e2:
f4:1b:86:5f:24:9e:42:c5:33:de:cd:06:12:ca:c4:1f:e1:3e:
c3:31:08:67:13:7b:44:c8:3e:01:4f:dd:b8:0a:4e:cb:00:f9:
51:2c:49:73:9d:96:e2:43:27:74:e6:c1:18:ad:83:5f:b0:34:
3a:89:47:ca:20:30:eb:81:8e:f6:a6:2a:4d:41:84:c4:ec:2b:
a6:01:0b:58:f0:75:e3:8b:6f:35:1c:ca:bb:20:4a:00:ae:3b:
cd:42:cd:a1:22:f0:76:2a:63:7c:dd:51:1d:dc:cc:8b:5b:a9:
72:ee:25:1b:ae:4e:0a:69:6d:39:26:6c:b7:7b:41:ea:0c:e3:
6e:3a:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:16 2026 by rpki-client