
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/680D797023E611EF8165F17BC4F9AE02.roa
File: 680D797023E611EF8165F17BC4F9AE02.roa (raw, json)
Hash identifier: aW25kEfOm3Y6z0dJwR8QkAiS+sy9HyUcqVGhB3onEl8=
Subject key identifier: D0:3C:C2:8E:A6:D1:C8:1E:1E:C2:55:02:4A:AD:B2:1D:FE:A6:18:A1
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: 015A
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/680D797023E611EF8165F17BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:09:39 +0000
ROA not before: Mon 05 May 2025 05:12:12 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137443
IP address blocks: 103.23.148.0/23 maxlen: 23
103.23.148.0/24 maxlen: 24
103.23.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 04:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Validity
Not Before: May 5 05:12:12 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a43a92-549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:19:5e:9a:9f:a8:21:6b:fb:48:96:42:ac:
77:df:1b:e2:93:09:73:7c:2b:c1:0f:23:4f:0c:9c:
23:eb:1c:16:c7:dd:2b:7a:48:bc:cb:19:0a:5f:0d:
9e:9b:99:9b:b0:fa:1c:cc:74:fc:c8:8c:ad:2c:28:
fe:d2:12:27:b9:61:c4:6b:64:97:9f:2b:b7:c4:47:
54:9c:c9:d0:3a:7f:8c:cb:0c:37:47:11:88:7c:e0:
72:2a:06:98:ad:0e:0e:b1:f8:3d:80:40:6c:48:12:
f2:a3:7d:db:75:2c:bf:03:a8:a5:84:bc:89:0b:f5:
7c:ce:79:75:ef:b4:df:f7:52:57:de:83:c9:ae:03:
8e:80:25:82:e3:91:ec:97:8a:a5:3f:8c:69:2e:06:
c5:f9:8a:9b:e8:e0:8c:e3:7a:e4:16:e5:a8:da:25:
19:e0:3e:e6:e9:49:ae:44:d5:cf:c8:1c:86:0d:27:
7e:7f:0e:92:ff:bc:7e:38:5c:92:b9:2f:25:68:fb:
de:57:28:4d:0e:fe:44:7c:98:bd:c4:10:e2:7c:21:
38:59:bc:01:5b:fb:69:11:98:1f:76:7f:fa:6f:3e:
80:ad:c2:12:fb:5a:23:1f:59:76:3f:c3:f5:22:43:
6d:53:49:ab:52:ff:93:37:01:5a:64:45:d2:ce:02:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3C:C2:8E:A6:D1:C8:1E:1E:C2:55:02:4A:AD:B2:1D:FE:A6:18:A1
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/680D797023E611EF8165F17BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.148.0/23
Signature Algorithm: sha256WithRSAEncryption
58:88:8e:c8:61:e0:79:ca:6e:c9:52:7c:ae:a6:53:a1:0f:16:
5c:32:d8:bd:98:59:6b:1e:70:0e:a5:6f:fb:32:7d:39:33:f3:
a9:98:38:64:c8:5b:ec:b7:1e:9c:5d:79:ce:1e:12:cd:b8:f4:
a9:90:0a:ac:c7:a3:5c:f0:ba:4a:be:41:88:b9:80:8a:04:e2:
45:2b:d0:87:25:d2:c1:af:69:7e:62:61:ad:c8:8d:fd:f2:e0:
ee:76:3a:db:f7:f2:22:52:c2:4f:76:de:a4:49:be:f5:dc:47:
c4:99:bf:99:92:11:92:35:e9:10:a2:97:8a:15:05:45:d5:62:
ac:39:25:47:f7:15:01:8d:6a:e7:5f:fe:3a:64:f9:4b:dc:46:
5b:dc:94:9b:fa:3d:33:da:f6:b8:88:5f:09:d7:50:3f:cb:ff:
e4:9a:26:2b:83:ba:f0:8a:52:56:1b:40:0f:10:4e:73:8a:16:
46:33:3f:03:9f:24:bf:21:df:3c:8e:af:86:1b:82:22:75:e4:
a6:55:68:e1:20:16:22:f7:51:ca:75:84:5a:31:0a:30:e9:e6:
c9:5f:49:9e:7e:44:45:80:03:42:f3:aa:85:fa:a4:63:72:69:
15:50:17:01:4f:e8:0f:77:1d:9e:0e:46:ff:d2:1e:c5:05:96:
e0:fc:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 18:07:20 2026 by rpki-client