
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
File: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (raw, json)
Hash identifier: ZX3gzuVVdSt9pwPI3aB1UqH4krxlC/IXAAYaCHcrBD8=
Subject key identifier: 06:6C:6C:BA:3F:B7:B1:45:F2:28:12:53:AB:53:72:BD:4F:FA:EA:96
Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Certificate serial: 01FF
Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
Signing time: Fri 02 Oct 2026 20:40:03 +0000
ROA not before: Fri 02 Oct 2026 20:40:03 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137432
IP address blocks: 103.153.52.0/23 maxlen: 23
103.153.52.0/24 maxlen: 24
103.153.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004
Validity
Not Before: Oct 2 20:40:03 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ac016a3-2298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:20:98:8a:44:96:0b:c1:44:94:ca:65:71:
fa:c8:8c:e9:8e:42:27:bf:55:b0:67:e1:65:91:e6:
61:82:04:4c:ac:87:a2:d7:e3:08:ee:91:7b:00:ad:
5d:fa:71:49:09:8f:1f:46:43:32:02:0a:ab:f3:54:
17:88:15:67:e7:e2:c7:b0:d5:5d:c2:0e:4d:03:0a:
3d:24:eb:8d:dc:71:a8:73:1e:0a:4d:6a:eb:2b:fa:
1f:d0:e9:4b:1b:72:b1:44:9d:94:07:38:26:a0:6e:
16:3e:f0:03:82:98:ab:71:55:38:c5:f8:a6:39:68:
eb:63:88:c4:4e:50:71:17:87:6f:81:90:bf:59:c9:
49:08:ac:cf:fe:d4:81:bc:9e:b5:87:a3:43:b4:51:
54:29:db:02:71:4d:65:67:5b:42:e5:bd:98:59:21:
3c:b9:e4:2a:6b:a7:36:08:5e:90:90:28:98:d0:da:
f1:0b:b3:98:e0:63:81:cb:5c:40:e2:aa:de:24:38:
f6:41:67:44:d3:9d:64:3f:90:ba:07:b8:d1:c3:3e:
c2:63:27:d8:a0:d1:77:da:2c:69:d7:fe:c1:68:b2:
e3:b6:03:39:49:e3:0b:3e:42:4a:6a:ef:75:ba:d3:
f3:d9:af:5e:b2:9f:ce:75:4f:76:d7:4d:3b:fc:b8:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:6C:BA:3F:B7:B1:45:F2:28:12:53:AB:53:72:BD:4F:FA:EA:96
X509v3 Authority Key Identifier:
keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:d0:b5:51:db:f4:7a:ad:ae:fb:9f:b9:c6:5d:1c:25:aa:08:
38:ff:5a:4a:5a:8b:4c:d9:dc:59:5c:4a:6e:be:85:e7:3e:fc:
a0:1e:80:8f:83:62:76:80:1b:dc:f3:17:90:46:cc:98:04:a9:
46:65:b9:2a:1d:bc:85:a3:17:e8:46:3d:20:2a:9a:77:b1:90:
1c:31:9d:02:99:8f:65:63:08:74:b8:53:c9:ca:2e:c9:41:3f:
5b:3c:66:78:4a:f2:01:ab:19:ed:08:cd:28:6f:12:7d:e1:3a:
30:07:51:53:64:58:9e:18:b9:94:2f:a0:4b:84:7b:a2:54:92:
20:2d:4e:ce:f3:b3:29:4e:7c:3f:2f:a5:4f:ff:de:a2:41:41:
ad:a2:43:67:9a:08:46:4a:db:f8:3a:ba:7a:f9:d5:74:07:20:
64:b7:fa:7b:fd:96:52:1c:8c:ae:8f:98:3b:ca:96:44:76:f0:
14:67:dc:eb:ea:b2:ca:d0:a4:bf:9b:dd:90:b1:32:55:f2:96:
a9:c8:c7:8f:e6:79:4e:e2:a1:e2:67:2d:6d:41:f0:f2:23:2f:
36:02:64:e9:87:86:8a:c1:22:23:78:12:b9:49:e9:3f:2d:0b:
82:17:c2:64:8e:39:74:be:79:de:8c:87:0c:f2:fa:7f:b2:52:
f4:5d:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:59:08 2026 by rpki-client