
$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa
File: 8F467E0082DD11EABD325010C4F9AE02.roa (raw, json)
Hash identifier: q4cXehVjnW5Frytnddrazb4hlR7ZeGkY8+gUIhDzgls=
Subject key identifier: FE:B2:A3:37:3E:63:65:DC:F4:90:1B:D2:65:F8:67:47:2F:41:E0:F7
Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Certificate serial: 0A6A
Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa
Signing time: Tue 31 Mar 2026 20:25:06 +0000
ROA not before: Tue 31 Mar 2026 20:25:06 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 4657
IP address blocks: 103.149.23.0/24 maxlen: 24
2001:df3:a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Validity
Not Before: Mar 31 20:25:06 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cc2da2-da48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:4a:af:fa:7e:b2:40:e4:2b:1c:2e:6b:3c:
37:f5:fc:e0:82:ea:0e:3d:b0:bd:f4:42:7b:10:d5:
ca:36:9a:dd:28:2d:90:94:dc:15:13:a4:60:ec:58:
54:16:4e:ce:89:b7:f9:12:8f:b7:49:cb:11:dd:87:
b9:38:c1:be:a5:5f:fe:24:26:88:98:b7:76:c7:8e:
bd:b9:94:1c:35:3a:d2:df:b6:43:21:9f:d8:43:cb:
75:33:1e:d3:8f:f2:b3:67:23:12:b1:55:f2:b8:7c:
92:51:ae:44:4d:cb:e2:24:d8:d3:06:a1:e3:4c:53:
7f:58:9c:8c:a8:d5:3d:e5:49:67:8a:43:e3:35:f5:
c8:ab:3c:da:79:e7:8c:b5:70:d2:79:b7:f9:04:30:
00:1e:8e:1f:9a:bb:d3:fa:d7:e1:59:4d:2d:02:70:
4f:78:f6:dd:52:34:fb:ba:86:65:98:19:58:d0:03:
99:b6:0b:5b:15:7a:6d:5a:ce:39:82:39:cb:8d:ca:
14:f1:82:e8:82:0e:cb:38:41:93:a6:12:45:ea:3d:
66:07:77:75:d1:25:10:aa:ce:3d:8a:1d:34:4a:38:
f0:14:d6:77:37:f1:4f:be:c1:65:04:6f:71:9a:62:
44:0a:6f:47:28:e7:e8:56:11:4e:0b:45:28:2b:f2:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B2:A3:37:3E:63:65:DC:F4:90:1B:D2:65:F8:67:47:2F:41:E0:F7
X509v3 Authority Key Identifier:
keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.23.0/24
IPv6:
2001:df3:a80::/48
Signature Algorithm: sha256WithRSAEncryption
5b:27:f0:e0:1b:5e:ae:39:09:85:ca:87:32:19:16:b8:ca:f9:
07:ed:a2:f5:f9:0f:7a:71:b6:11:c2:31:59:05:10:94:98:ba:
2a:94:0f:07:9d:64:f6:01:b9:b2:6e:75:cd:67:63:a1:76:6e:
76:90:87:27:0d:3c:b4:4a:75:07:b9:6b:fa:94:7c:28:b6:13:
06:7c:1c:f5:1e:42:83:7c:66:d5:15:80:31:ef:9b:08:9d:c6:
e6:33:90:0f:1f:ba:7a:b6:a1:0e:c0:cb:6b:81:a0:15:7c:29:
d5:4d:ae:ff:cd:d3:f3:92:ef:c3:2e:72:04:3d:91:ea:b0:b1:
fb:0b:14:ef:60:f0:00:22:4f:c4:46:aa:2c:bd:6e:67:2d:ac:
59:43:8d:28:ba:22:4f:1e:5c:3c:b5:50:27:ad:f0:a8:01:35:
2f:4e:45:ea:bf:36:7b:00:66:7d:a4:74:6c:98:2f:70:08:2e:
99:ad:ec:8f:02:f5:d6:95:52:c9:28:33:31:ea:84:73:47:e0:
a7:97:e3:9d:8c:cb:0c:38:00:32:cc:88:15:28:a3:6e:5c:e7:
c6:07:aa:9c:21:d9:c1:f4:c3:7a:b0:cf:60:59:96:86:48:68:
89:83:03:a2:d3:c1:99:d0:20:3e:47:1d:3a:e4:ce:fc:de:0f:
73:0a:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:07:13 2026 by rpki-client