
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa
File: 801F61DCC1E111EBB27A0812C4F9AE02.roa (raw, json)
Hash identifier: BhSSYqZSGXXpI1luTNwOhhg1H/mMPyn+rBgpYKIGd48=
Subject key identifier: 11:CC:A5:F6:75:09:81:55:99:92:53:B8:94:DD:41:69:F7:B3:53:51
Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial: 0746
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa
Signing time: Wed 04 Feb 2026 21:18:50 +0000
ROA not before: Wed 04 Feb 2026 21:18:50 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 21859
IP address blocks: 45.251.136.0/24 maxlen: 24
45.251.137.0/24 maxlen: 24
45.251.138.0/24 maxlen: 24
45.251.139.0/24 maxlen: 24
103.225.84.0/24 maxlen: 24
103.225.85.0/24 maxlen: 24
103.225.86.0/24 maxlen: 24
103.225.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862 (0x746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Validity
Not Before: Feb 4 21:18:50 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6983b7ba-c335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9a:94:5e:9e:9d:e9:5d:dc:b9:a5:b1:bb:c5:
59:4b:5f:ab:18:95:b0:72:43:f1:79:69:6d:ef:25:
8a:75:60:ad:9e:b2:b5:8b:ff:74:47:ab:16:14:51:
dd:4b:2d:31:1c:a0:86:34:0d:7d:39:0d:08:1b:31:
e5:7e:47:9f:be:0b:a4:c2:fc:19:e4:45:b8:a8:71:
78:54:cf:6b:24:86:2f:9a:35:90:c0:25:6e:f7:50:
45:1e:6a:3e:7a:ff:91:57:8b:72:18:08:84:bd:c3:
cb:39:af:e7:ba:ad:50:c3:37:ba:e4:69:1a:93:53:
74:9b:ba:df:2f:53:44:e3:b8:52:62:c3:48:43:68:
bd:00:fc:7e:1d:14:af:fe:92:6b:20:5c:9d:93:d1:
3e:c6:10:53:9c:e9:9f:67:24:87:af:5a:ee:cf:af:
00:59:af:33:ca:cc:35:65:f7:eb:5a:ac:07:3f:c2:
b6:42:da:8f:15:7d:d6:b0:9d:75:19:7d:32:88:cd:
5b:51:be:8b:5b:94:87:f6:5e:20:21:6f:74:2c:cb:
a7:2d:0f:3d:37:52:86:00:c8:99:bb:42:c2:56:da:
2b:a3:f3:7a:de:51:79:b1:42:88:6d:71:f7:24:56:
13:67:86:38:1b:72:9e:6f:76:8c:39:23:8f:dc:a4:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:A5:F6:75:09:81:55:99:92:53:B8:94:DD:41:69:F7:B3:53:51
X509v3 Authority Key Identifier:
keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.251.136.0/22
103.225.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:4d:9f:a3:74:03:3c:79:d9:82:f2:00:61:86:04:0c:56:24:
88:e2:85:d2:27:b2:27:d0:18:3b:6a:54:de:00:a8:1e:32:ca:
85:e7:97:dd:5e:ef:c2:65:0f:b2:01:d7:d5:5e:d8:4e:1b:fb:
02:ea:58:bf:f8:ed:a9:6c:6b:45:13:03:92:96:e5:51:41:93:
b6:f4:6e:bd:50:aa:cd:61:df:89:54:ef:9f:79:44:7b:d2:c6:
6d:89:65:15:ef:87:21:35:2b:f9:c8:58:97:1c:94:73:f7:5d:
b2:ca:24:df:a9:49:0d:8b:9f:5c:43:89:44:a0:cb:3f:cb:36:
2f:3c:46:cc:3d:f5:9a:f5:19:38:d1:95:92:13:6e:a7:2a:10:
01:97:a1:24:4b:e0:13:5f:e6:c1:8a:7c:e0:fc:51:43:e2:11:
17:39:45:35:d2:f4:ab:01:55:03:e9:a2:a9:08:c6:72:8e:5f:
92:fe:c0:51:e5:b8:aa:24:55:93:e9:db:bc:c2:06:2f:60:d8:
ad:d7:06:ab:27:91:99:b7:e0:33:70:21:23:ab:97:87:22:0c:
1f:97:c8:bd:bf:25:ac:82:80:8f:bf:81:30:52:3b:b0:f6:38:
55:39:4a:29:25:e2:10:2d:6e:aa:e1:bc:51:2b:52:8f:31:ba:
fa:72:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:12:57 2026 by rpki-client