
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD0A5C28242B11EDB3156081C4F9AE02.roa
File: DD0A5C28242B11EDB3156081C4F9AE02.roa (raw, json)
Hash identifier: jCHyUE8m6ayLuD6+22RwnWtOxYSYB1QDYMlT5mALRtU=
Subject key identifier: 8E:92:B5:24:46:D7:27:AD:C1:56:B9:7C:6A:D6:8A:9D:85:C2:A8:42
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E46
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD0A5C28242B11EDB3156081C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:17:30 +0000
ROA not before: Thu 28 Aug 2025 14:54:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 149124
IP address blocks: 103.149.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24134 (0x5e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c7a-4f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:c1:9d:34:97:dc:78:a2:6e:ee:c0:1b:aa:
49:28:7b:47:6f:5f:61:06:33:8a:e7:de:d6:d7:7e:
a4:c1:08:83:ac:55:ef:4d:b1:a1:f2:01:0d:08:e5:
3f:45:63:35:ab:fd:14:97:17:5f:9c:dc:24:0f:f5:
f7:e6:02:9f:f5:d1:7c:65:46:52:40:28:d2:6b:61:
6d:1b:54:98:e2:ae:f7:17:09:ee:56:38:ea:2c:c1:
06:78:90:22:cd:bf:27:35:2f:bc:5e:34:99:6e:37:
ea:29:ac:fe:d8:37:4f:b2:be:df:35:eb:94:06:33:
a8:e3:dd:c1:80:84:3e:5b:ff:fe:10:54:d4:71:97:
63:42:0c:21:9f:91:21:3f:a4:25:23:53:a0:e1:72:
70:b0:8c:c9:b0:15:be:de:cd:85:fd:a3:c4:8d:c5:
37:5c:ee:ae:79:35:00:aa:40:2b:07:da:d2:40:62:
01:ca:44:ab:ff:cf:bb:27:22:7f:28:02:7f:b3:04:
6c:4e:ff:ef:fc:95:e1:19:eb:07:cc:43:4e:10:1c:
26:c2:3f:0c:60:b3:81:d8:b7:90:a0:a1:92:49:11:
9d:31:b4:db:9d:e0:73:33:8b:1b:68:c1:d0:0a:ca:
0f:6f:cd:14:19:06:34:ca:d3:8e:0f:e9:28:a5:c3:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:B5:24:46:D7:27:AD:C1:56:B9:7C:6A:D6:8A:9D:85:C2:A8:42
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD0A5C28242B11EDB3156081C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.28.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:7e:8d:eb:be:b8:fd:8f:50:ff:16:ae:ea:6e:f5:6a:76:b1:
0b:79:1c:ef:66:df:70:15:df:70:7d:8e:f8:79:b5:de:fb:88:
ae:ee:53:b6:12:f5:23:95:2f:2f:1e:d9:f7:d4:94:d6:dc:38:
82:34:e2:eb:13:c8:0f:f2:4e:f2:af:ce:aa:0b:a9:c6:ac:19:
d1:ca:61:2d:d2:96:c1:4b:55:57:91:c3:4e:4d:00:4c:7b:b8:
f8:cb:86:6b:88:7a:08:76:34:28:97:c9:9a:fe:02:42:9f:a6:
f8:c1:ae:16:70:a2:28:01:57:e3:08:7c:63:91:46:b3:16:88:
39:8b:e1:12:96:ae:30:ef:e6:39:6b:0a:3d:74:08:44:cb:8a:
97:01:49:38:3c:12:2c:6f:db:63:2a:b8:37:0c:cc:1b:24:c4:
1a:7e:5b:fd:ba:94:1a:f5:d5:8b:2d:df:e7:13:36:c5:70:90:
0c:f4:7a:80:c9:fe:4d:5f:23:ea:54:ca:28:03:97:a3:17:88:
19:e2:46:fd:e0:23:57:7e:61:ce:18:46:63:99:78:e3:23:e0:
f7:d2:fc:d7:4f:7c:63:a8:e8:36:9e:cf:97:72:1e:ff:ee:06:
e1:8b:0e:6c:03:34:35:98:90:41:c3:34:5b:4d:c6:e3:d7:9c:
e7:9c:2f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:12 2026 by rpki-client