
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24C39246305711ED9363AB84C4F9AE02.roa
File: 24C39246305711ED9363AB84C4F9AE02.roa (raw, json)
Hash identifier: BhxK3PjUOpqexihI9xthZMxbmNR//Tfm56gU7EQYsto=
Subject key identifier: 4A:3E:FA:3D:8C:67:23:A3:B1:F9:37:4B:20:C0:DF:F3:9A:2C:A3:42
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E0B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24C39246305711ED9363AB84C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:31 +0000
ROA not before: Thu 28 Aug 2025 14:53:51 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140739
IP address blocks: 103.152.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24075 (0x5e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:51 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c3f-614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:a8:d0:d5:06:a7:5b:c8:46:4f:69:a8:fd:
1b:27:01:79:54:38:33:aa:34:ea:2e:20:5c:be:28:
19:59:e4:44:ce:22:78:e7:0a:57:30:59:ba:15:70:
f4:0a:97:fc:ba:3a:29:80:44:0c:8b:97:ab:ad:d3:
0b:36:5b:2e:fe:e6:0d:cb:06:12:e2:3e:0b:b2:03:
55:66:cd:31:29:ec:4c:57:bd:30:d6:1c:79:ab:28:
bf:b3:46:a3:88:65:ec:ed:8c:8f:b3:08:94:fd:8b:
6e:cc:01:86:18:a0:f8:b1:84:a1:c1:5d:76:cf:fb:
ec:5e:29:88:2f:1d:0f:21:32:4b:fb:dc:7f:f2:c2:
87:e9:08:4e:f0:7a:db:11:e2:63:75:c8:af:1b:98:
49:1b:87:6f:be:04:ec:99:12:0d:6f:cb:c8:af:52:
c6:cb:e4:9e:81:ba:88:d8:e9:be:8d:17:98:bd:4c:
fa:11:f0:93:11:43:2a:d3:b2:5a:e8:3a:ef:ca:e5:
3d:f8:c2:09:d1:c3:97:ff:66:2b:74:1f:a8:87:7b:
69:7a:87:9a:71:50:d7:b0:b7:c2:8a:b2:97:1c:da:
27:a8:b4:2f:91:30:38:3f:c2:76:19:17:a9:93:90:
b3:e8:00:cb:f9:a2:57:d0:8d:f1:e0:2a:58:a2:65:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:FA:3D:8C:67:23:A3:B1:F9:37:4B:20:C0:DF:F3:9A:2C:A3:42
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24C39246305711ED9363AB84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.48.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:d2:80:4b:4e:67:38:56:4b:06:6f:39:07:4f:82:6e:31:2f:
2e:c1:3c:c1:f6:49:f3:d0:82:42:bb:3c:0a:13:59:79:39:a6:
82:59:58:01:37:86:0a:44:ca:0b:03:54:d1:cd:3c:7c:45:9c:
41:9f:b8:28:08:2f:18:0b:86:14:09:f4:a7:4c:bf:51:76:66:
45:44:d1:c1:52:dd:27:9a:32:1b:27:62:19:0e:73:7d:58:7d:
5d:72:e1:20:dc:68:d2:62:f7:ad:fa:d0:e1:6c:69:17:40:20:
8f:2b:b8:44:9d:54:ff:31:15:aa:ab:08:45:4f:c5:dd:10:ea:
0b:ee:f3:f0:7a:02:a8:5f:c7:3d:f2:45:b3:a3:18:f0:aa:9e:
89:14:d2:13:4e:39:a1:f7:e3:10:9c:4f:09:cd:5c:01:05:f5:
25:fc:e6:ce:3e:c6:a1:f0:3d:19:5c:83:91:98:0a:a5:4f:72:
56:e8:1f:d3:e1:05:a5:68:ee:87:16:07:66:0a:56:da:60:dc:
b5:2e:b1:31:ca:45:af:45:0b:f9:fe:d4:47:9a:6d:57:b0:99:
40:8f:22:be:7b:0e:78:22:55:b6:70:07:f5:7b:67:00:ee:76:
4b:48:69:ac:d1:fc:26:00:e0:63:76:d6:2c:08:97:d6:9f:41:
b4:53:63:2e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICXgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGMzZi02MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2kuo0NUGp1vIRk9pqP0bJwF5VDgzqjTqLiBcvigZWeREziJ45wpXMFm6FXD0
Cpf8ujopgEQMi5errdMLNlsu/uYNywYS4j4LsgNVZs0xKexMV70w1hx5qyi/s0aj
iGXs7YyPswiU/YtuzAGGGKD4sYShwV12z/vsXimILx0PITJL+9x/8sKH6QhO8Hrb
EeJjdcivG5hJG4dvvgTsmRINb8vIr1LGy+SegbqI2Om+jReYvUz6EfCTEUMq07Ja
6DrvyuU9+MIJ0cOX/2YrdB+oh3tpeoeacVDXsLfCirKXHNonqLQvkTA4P8J2GRep
k5Cz6ADL+aJX0I3x4CpYomUtBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEo++j2M
ZyOjsfk3SyDA3/OaLKNCMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjRDMzkyNDYz
MDU3MTFFRDkzNjNBQjg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5gwMA0GCSqGSIb3DQEBCwUAA4IBAQCi0oBLTmc4VksGbzkHT4Ju
MS8uwTzB9knz0IJCuzwKE1l5OaaCWVgBN4YKRMoLA1TRzTx8RZxBn7goCC8YC4YU
CfSnTL9RdmZFRNHBUt0nmjIbJ2IZDnN9WH1dcuEg3GjSYvet+tDhbGkXQCCPK7hE
nVT/MRWqqwhFT8XdEOoL7vPwegKoX8c98kWzoxjwqp6JFNITTjmh9+MQnE8JzVwB
BfUl/ObOPsah8D0ZXIORmAqlT3JW6B/T4QWlaO6HFgdmClbaYNy1LrExykWvRQv5
/tRHmm1XsJlAjyK+ew54IlW2cAf1e2cA7nZLSGms0fwmAOBjdtYsCJfWn0G0U2Mu
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:06 2026 by rpki-client