
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/D3D36BE0271011ECA0D7D95AC4F9AE02.roa
File: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (raw, json)
Hash identifier: 3HHpLWwhlM54c0ygayHpZ//nfGJy4YzZlrDagN2/hEE=
Subject key identifier: 70:54:2B:FC:54:0C:75:32:4A:E4:F8:DB:83:7C:E7:50:8F:4F:49:AC
Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial: 05EF
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/D3D36BE0271011ECA0D7D95AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:36:32 +0000
ROA not before: Fri 01 Aug 2025 00:36:00 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 198949
IP address blocks: 161.43.102.0/24 maxlen: 24
161.43.122.0/24 maxlen: 24
198.142.0.0/24 maxlen: 24
198.142.152.0/24 maxlen: 24
198.142.231.0/24 maxlen: 24
198.142.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Validity
Not Before: Aug 1 00:36:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a46b0f-d3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:46:8a:bc:d1:cb:32:86:a2:50:a6:58:7d:
56:9e:8b:df:57:39:d8:2a:31:78:48:51:00:ef:1e:
1a:97:dd:34:63:9b:33:62:84:73:8b:c5:77:2b:59:
65:76:1c:39:18:45:27:c4:d1:a4:9b:e8:34:b6:ff:
52:22:78:23:b8:1f:15:85:56:eb:e8:0e:2a:4e:1b:
3f:a4:ec:a7:4a:98:b9:5f:14:40:c2:05:a9:30:ed:
62:27:53:64:48:51:5b:d2:04:e4:a6:78:81:30:0e:
0d:c6:20:ff:5f:9b:f1:72:9c:f2:f3:5e:86:93:5b:
51:e7:ea:23:37:4a:80:0a:cb:6c:44:8d:90:df:53:
3d:84:e0:a3:cc:03:be:ef:21:38:9e:70:fc:a1:08:
83:ea:92:ed:43:bb:db:e4:9d:17:3e:b8:da:c4:5f:
85:71:98:95:4f:1c:fd:00:16:8f:b1:6b:a4:95:d9:
71:6f:ad:6a:4c:53:9b:23:61:d9:19:78:0e:22:3b:
6c:86:8f:da:b9:c1:e4:b5:3f:b1:0d:ea:cf:3d:fd:
f1:c4:07:5a:76:05:c6:37:20:41:69:b3:36:34:33:
9d:f9:b2:a5:e9:4b:69:76:80:9c:3c:d1:e2:e7:9c:
d2:5f:c8:a9:bb:7d:e9:6e:78:58:5d:03:8d:4c:d0:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:54:2B:FC:54:0C:75:32:4A:E4:F8:DB:83:7C:E7:50:8F:4F:49:AC
X509v3 Authority Key Identifier:
keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/D3D36BE0271011ECA0D7D95AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.43.102.0/24
161.43.122.0/24
198.142.0.0/24
198.142.152.0/24
198.142.231.0/24
198.142.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d6:ea:28:c4:3b:55:0f:a8:c9:86:56:b3:16:68:2b:4d:f3:
56:c2:a5:b6:40:cc:82:af:a8:7b:1c:27:a5:75:42:de:70:75:
f6:0b:9e:db:ca:84:26:9d:b8:7f:00:1b:07:3f:f8:0d:4c:f8:
3d:cc:48:66:45:88:14:4a:e3:d9:83:a2:6b:a4:6f:3a:70:97:
6b:ed:32:fb:60:24:41:03:b6:2f:82:18:6d:76:2b:29:89:8e:
3e:54:06:fb:69:55:33:4e:db:aa:a3:33:87:b6:4a:4a:fe:7b:
61:f5:aa:bf:85:25:06:20:c5:93:2e:7c:fd:d1:f6:98:0c:2a:
87:6a:79:5b:73:55:32:f0:3f:09:8e:01:fd:75:5c:76:ec:67:
7a:64:7f:da:31:ce:32:dc:94:4b:e7:c5:7a:95:94:2f:65:cd:
45:c8:8d:c2:36:82:d7:75:95:ae:39:16:b0:26:03:bc:5d:22:
a6:a2:0e:5b:9c:dc:85:28:d0:cd:23:66:ef:6d:fd:53:a6:ff:
5f:c9:95:a5:e7:41:2e:51:35:62:6a:c3:65:60:54:5e:0c:b6:
f8:b7:c3:b7:66:1b:ef:42:c3:5b:3a:c7:25:47:82:3c:00:ed:
28:9a:2d:f4:14:6e:c7:c0:08:bf:8f:77:b4:08:f5:f7:50:21:
b6:10:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:39 2026 by rpki-client