
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1E4548E4E1F211EEA360BE22C4F9AE02.roa
File: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (raw, json)
Hash identifier: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=
Subject key identifier: C3:BD:8E:EB:7C:0F:53:BE:E0:5B:61:70:DC:A7:58:ED:2B:54:B7:51
Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Certificate serial: 018B
Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1E4548E4E1F211EEA360BE22C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:07:45 +0000
ROA not before: Tue 09 Dec 2025 02:41:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4755
IP address blocks: 103.145.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Validity
Not Before: Dec 9 02:41:54 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a599b1-c101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:b6:e5:66:30:9e:77:08:4f:0a:0f:14:a0:
b4:e3:1f:3c:0b:f3:15:76:92:06:d8:4e:1e:02:23:
d8:71:e7:5e:ef:e4:2c:94:82:5b:70:a8:07:30:18:
d8:e3:83:7c:45:fc:97:9b:8b:20:1f:db:a4:b4:7b:
ff:32:1d:9e:44:37:7f:63:79:eb:fd:61:e0:61:f8:
fc:bd:2a:5b:39:3e:39:ce:fe:e3:9b:4b:69:a8:c3:
3d:d8:fe:58:44:d7:f1:d3:bb:a5:70:77:1f:7a:ce:
d8:98:de:64:e7:40:d9:60:49:b4:e1:2b:66:df:4f:
58:e0:21:c4:ab:59:b2:eb:08:01:fe:30:15:19:04:
4f:56:bc:42:1e:99:76:b0:8d:e4:b9:2b:28:8f:f9:
b6:96:55:20:4e:27:ec:83:31:7e:3d:14:f5:1d:87:
3a:db:f1:53:b1:21:41:1d:c9:0a:7d:01:00:69:d6:
0c:94:b9:f3:97:c6:ad:3e:ac:bb:ab:c2:98:11:c9:
75:8f:fd:e5:e8:92:b1:3d:8c:63:6f:17:85:f5:b7:
4f:cc:2d:ed:a2:8d:b4:3a:fd:41:42:f4:a1:d4:8a:
65:b8:8a:4c:d0:3b:9a:b4:7a:a1:11:ea:2d:15:5d:
df:48:2c:cf:2d:ac:1d:4a:07:af:99:23:01:73:a0:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:8E:EB:7C:0F:53:BE:E0:5B:61:70:DC:A7:58:ED:2B:54:B7:51
X509v3 Authority Key Identifier:
keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1E4548E4E1F211EEA360BE22C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.88.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b0:0b:2a:2f:3c:72:4c:d0:c1:5f:55:be:c5:5a:72:5f:40:
b8:fe:f2:41:7d:df:a4:dc:c9:fc:76:99:37:7c:a4:a8:b3:22:
5a:fe:e4:d9:dc:72:62:af:e0:fe:85:38:10:45:f1:3a:f8:c8:
5c:f2:1f:7c:27:f2:b7:7a:97:04:19:ed:8a:e5:2a:fd:c8:13:
e9:aa:66:d8:98:d4:44:13:2b:91:3e:f8:d6:4f:9b:33:b3:4b:
b4:62:cd:24:2f:b8:e4:77:f2:b5:a5:c1:83:cf:36:a6:f0:52:
73:77:4c:4b:d3:a4:d3:34:0e:fd:c8:0f:c0:27:64:b4:3d:30:
88:47:91:e4:18:d1:e6:7d:fc:24:39:f2:bc:25:5f:dd:91:4a:
3c:cc:b9:03:ed:2a:37:ef:e7:4a:e2:fa:95:e0:f9:93:9e:7d:
44:b6:4e:c1:61:d2:8c:c8:57:b1:c2:39:c7:f7:c8:31:ce:1f:
30:87:b3:17:6e:61:97:15:f7:ce:ee:af:c8:7e:42:2e:0d:cd:
a3:e6:78:6c:9c:3e:f8:8b:ed:0d:3d:93:7f:8a:55:12:8e:70:
7c:2b:5a:a5:8f:d9:84:ff:eb:2b:31:ac:24:0b:dd:87:16:56:
b3:96:e7:b0:64:09:25:c2:5b:64:d8:fa:af:2c:41:d4:84:bf:
b5:1d:13:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:05 2026 by rpki-client