
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa
File: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (raw, json)
Hash identifier: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=
Subject key identifier: BF:F0:6E:1C:EB:AD:E8:B0:12:CA:73:04:E9:9B:F4:40:92:C0:C0:D0
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11E6
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:51 +0000
ROA not before: Wed 20 Aug 2025 17:57:24 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 0
IP address blocks: 103.140.8.0/23 maxlen: 23
103.149.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4582 (0x11e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:24 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48293-67a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:d7:b1:be:5d:96:be:4f:94:29:f2:c4:85:
99:51:7a:62:8f:7d:d1:d0:14:68:bd:ad:94:61:8b:
e3:46:fa:42:2b:1b:b1:15:10:dd:f5:ac:2f:c7:d5:
ce:c9:51:d0:cb:7c:f1:e6:bb:43:bf:fb:27:08:64:
f8:ec:6b:f2:55:5f:aa:da:dc:33:f1:84:4b:e2:a3:
2c:60:79:11:3c:93:e8:8e:aa:1a:9f:d3:e2:f9:a9:
5a:7b:6a:dd:f8:5d:1e:bc:78:2e:29:83:e4:a1:e6:
cf:ee:e3:ec:cf:d6:0f:0c:5a:0f:bd:09:2b:38:95:
17:fa:ac:76:ab:71:32:22:c5:e8:6d:56:48:f8:72:
2e:bc:fa:64:d5:a5:f1:41:e0:58:cd:2e:4f:08:2b:
c8:66:23:47:b2:69:ca:64:de:e4:d5:2b:62:92:09:
4d:b8:85:62:5d:90:5b:3e:9b:48:29:d2:c1:61:6c:
5f:0a:40:f3:e2:10:f7:41:08:63:53:aa:bf:f9:b0:
a3:f5:6c:d2:4c:1d:0b:2a:9b:82:50:da:77:d0:18:
e2:43:2a:2e:a1:c0:9e:e9:2f:9a:6c:43:9b:01:97:
c6:ce:1a:d3:eb:35:a6:88:6a:04:8d:6c:90:6b:2a:
69:34:05:a4:82:28:a3:d2:94:b0:96:58:79:06:dd:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:6E:1C:EB:AD:E8:B0:12:CA:73:04:E9:9B:F4:40:92:C0:C0:D0
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.8.0/23
103.149.144.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:13:1e:5f:da:93:fc:d7:a5:32:f0:38:54:97:37:f3:f6:5e:
36:82:8e:de:9a:70:d8:07:b7:3f:7d:2a:d0:94:09:e8:17:1a:
a8:48:9c:be:9e:c0:33:00:08:6a:54:a6:77:2e:5a:20:87:18:
73:c0:36:1f:12:af:c7:c5:86:2b:0c:dc:fa:d8:a5:8c:a7:84:
57:57:7c:f7:ac:a9:7e:ba:bb:af:98:73:86:c3:1a:da:98:86:
c4:b6:19:b4:78:fd:b2:14:81:3b:3d:07:b4:ab:ba:6b:c2:82:
23:2d:ad:e3:70:f4:21:d6:9a:95:1b:02:d8:f6:0a:a1:bb:41:
d0:e8:a6:fe:3d:77:dc:80:f3:ff:f6:d0:2d:67:3f:64:e0:fd:
13:92:71:a3:c8:b4:01:ac:a1:8b:6e:25:b4:0b:1a:97:3f:53:
1c:42:3d:24:02:05:61:65:df:a6:d7:12:fc:33:3c:81:4e:33:
3f:af:ce:4d:86:64:60:9b:87:8b:36:ee:7c:e9:8b:c8:c8:72:
44:3f:8e:29:5a:8c:89:d4:4e:18:11:54:3a:65:82:ae:b7:da:
89:54:be:a3:9a:46:11:85:d1:2d:a5:0e:b9:02:0e:ae:e2:1a:
c6:58:a8:44:27:8b:7d:e8:e2:2b:79:b2:68:9a:e0:02:a7:d4:
e7:49:e3:73
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjUwODIwMTc1NzI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODI5My02N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWvXsb5dlr5PlCnyxIWZUXpij33R0BRova2UYYvjRvpCKxuxFRDd9awvx9XO
yVHQy3zx5rtDv/snCGT47GvyVV+q2twz8YRL4qMsYHkRPJPojqoan9Pi+alae2rd
+F0evHguKYPkoebP7uPsz9YPDFoPvQkrOJUX+qx2q3EyIsXobVZI+HIuvPpk1aXx
QeBYzS5PCCvIZiNHsmnKZN7k1StikglNuIViXZBbPptIKdLBYWxfCkDz4hD3QQhj
U6q/+bCj9WzSTB0LKpuCUNp30BjiQyouocCe6S+abEObAZfGzhrT6zWmiGoEjWyQ
ayppNAWkgiij0pSwllh5Bt0x9QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFL/wbhzr
reiwEspzBOmb9ECSwMDQMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvMkE0RUUxM0U3
Q0ZEMTFGMDhBOTFFRTIxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ4wIAwQBZ5WQMA0GCSqGSIb3DQEBCwUAA4IBAQDVEx5f2pP816Uy
8DhUlzfz9l42go7emnDYB7c/fSrQlAnoFxqoSJy+nsAzAAhqVKZ3LloghxhzwDYf
Eq/HxYYrDNz62KWMp4RXV3z3rKl+uruvmHOGwxramIbEthm0eP2yFIE7PQe0q7pr
woIjLa3jcPQh1pqVGwLY9gqhu0HQ6Kb+PXfcgPP/9tAtZz9k4P0TknGjyLQBrKGL
biW0CxqXP1McQj0kAgVhZd+m1xL8MzyBTjM/r85NhmRgm4eLNu586YvIyHJEP44p
WoyJ1E4YEVQ6ZYKut9qJVL6jmkYRhdEtpQ65Ag6u4hrGWKhEJ4t96OIrebJomuAC
p9TnSeNz
-----END CERTIFICATE-----
Generated at Sat Mar 7 08:26:17 2026 by rpki-client