
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa
File: FD5158C044C511F0ABA4E977C4F9AE02.roa (raw, json)
Hash identifier: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=
Subject key identifier: 52:FB:FF:00:CD:3E:BA:E3:B4:5C:A0:69:BA:92:38:37:1F:41:DE:70
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11EC
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:56 +0000
ROA not before: Wed 20 Aug 2025 17:57:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 216047
IP address blocks: 103.140.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4588 (0x11ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48298-926d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:3b:1d:77:79:de:60:bb:8c:34:27:0a:dc:
2f:b0:52:4e:0b:b8:31:d8:86:97:56:51:8c:00:40:
0b:f4:75:54:5e:da:d9:d0:fc:87:f1:2f:26:cc:15:
07:99:9f:61:4b:93:5e:57:2e:58:84:64:f7:41:9f:
da:8d:b6:e9:36:bc:bb:46:a9:98:07:3e:96:59:c9:
27:07:00:0b:1a:34:a3:6f:a9:48:f0:40:83:3f:7d:
b9:7c:de:c8:72:fd:a4:a5:59:4f:6c:43:4f:3f:01:
aa:78:8f:33:e6:d8:68:80:2f:17:3a:1a:67:76:d6:
57:14:21:53:d1:ba:ad:b7:52:33:2f:22:cf:35:c0:
57:40:c0:1c:48:6c:fb:2b:6e:97:d6:0f:14:06:6f:
79:6d:bb:57:c1:38:b4:cb:7c:99:c8:96:3f:5e:8e:
72:ee:a7:fa:9f:8e:ef:47:37:28:e1:fc:e9:ba:be:
17:59:64:20:01:46:6b:39:b7:fb:bf:74:30:3e:ee:
39:d8:82:d2:f7:96:93:9c:86:e9:26:21:64:76:e0:
ee:a9:8c:32:5e:e4:72:86:b3:b2:54:28:ba:49:56:
6a:3a:74:14:11:55:31:5f:ce:6f:4e:b4:10:1c:67:
74:30:7a:60:4b:1e:94:12:6e:83:81:5c:8f:b8:2f:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FB:FF:00:CD:3E:BA:E3:B4:5C:A0:69:BA:92:38:37:1F:41:DE:70
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.9.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d6:45:07:35:fa:88:ce:b2:5d:3b:d6:8b:ef:09:c8:e3:ba:
7a:e4:6f:3e:4d:e2:dd:5b:58:8e:8d:09:3f:43:fc:72:02:d2:
c7:cb:71:2d:c9:9b:49:b8:a6:06:2c:03:98:ff:e5:50:e5:31:
c0:f1:50:95:ef:58:41:b2:9a:1b:f9:59:ec:73:01:1e:70:e3:
26:55:05:d3:a1:ae:e6:42:4b:4b:a4:e0:04:d5:c9:df:54:68:
6b:9c:41:7e:b5:9f:9f:06:1e:88:64:61:58:ca:21:9a:67:4f:
28:2a:f3:9d:55:31:c2:0d:85:9d:5b:c9:46:4d:0e:fd:6f:84:
36:e5:d2:35:20:d9:30:66:45:0c:a7:a8:20:fb:22:a3:4e:05:
5d:be:9e:f6:d9:4a:6f:e6:cb:a9:e4:8f:59:c3:41:95:00:ee:
e5:a2:21:78:98:b2:36:e7:bb:b8:5c:1d:af:75:90:55:20:46:
17:3f:dc:0e:23:f1:bf:48:3b:03:32:5f:98:ed:24:56:87:81:
c5:22:9b:f6:bf:38:f8:0e:b2:2e:73:1c:be:cd:37:82:82:85:
c8:57:0b:a0:3f:86:11:c6:b1:96:d6:05:6b:53:15:37:22:f1:
1e:22:c7:24:1f:37:0f:24:28:47:6c:6d:41:76:69:4d:64:e5:
55:8c:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:26:18 2026 by rpki-client