
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2C155C38E62911F0B525CBC56F6F56BC.roa
File: 2C155C38E62911F0B525CBC56F6F56BC.roa (raw, json)
Hash identifier: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=
Subject key identifier: 67:AA:9A:C6:27:34:C5:BF:1B:CB:23:C5:96:08:3D:C8:D2:B1:EB:26
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 03F8
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2C155C38E62911F0B525CBC56F6F56BC.roa
Signing time: Sun 01 Mar 2026 18:46:20 +0000
ROA not before: Wed 31 Dec 2025 09:14:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152179
IP address blocks: 103.243.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 00:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Dec 31 09:14:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4897c-6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:5d:5e:ed:26:7b:72:93:72:35:e2:be:db:
b0:97:85:b5:92:24:93:67:de:75:3b:86:6a:39:c0:
ed:83:97:22:8f:0f:14:d7:86:81:0f:4c:38:5e:b3:
17:f2:a1:87:48:ab:86:9d:18:c2:95:41:98:74:31:
55:9a:f2:49:2c:cf:2e:25:88:cb:0a:88:42:de:f4:
e7:f9:a0:e1:2e:a7:23:95:01:9a:a7:9a:98:38:9b:
45:da:cd:1c:b2:62:65:c5:75:c6:86:03:01:ca:7c:
ed:01:df:b5:b2:9b:4f:d8:fc:60:05:bc:a9:88:97:
31:37:02:78:a9:12:fa:b9:6e:34:fb:5f:7f:59:b8:
e3:ad:25:3b:dd:10:45:cc:22:3a:23:35:09:4a:f6:
13:52:0d:ff:c4:80:03:f2:a3:57:b9:d9:f6:e0:55:
8a:37:e8:32:b3:58:64:2c:89:c4:ca:92:61:23:c8:
99:5a:91:7d:e8:35:01:79:a3:41:9d:41:77:d5:d4:
46:77:1c:d9:84:bc:d9:3d:4b:6a:ba:b6:ae:cf:dd:
81:51:e6:1c:be:d4:2f:3c:6e:4a:60:c4:26:2e:ef:
07:13:46:c7:7e:04:1d:97:de:ea:59:b1:68:c4:d9:
7a:d5:a5:2e:09:ca:02:bd:b2:20:78:40:7e:97:cf:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:9A:C6:27:34:C5:BF:1B:CB:23:C5:96:08:3D:C8:D2:B1:EB:26
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2C155C38E62911F0B525CBC56F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:90:34:72:f6:f0:3c:bb:71:5c:95:23:f3:39:bf:46:87:a5:
cc:26:70:15:96:b1:8f:60:12:bd:d6:fd:73:b3:d1:a1:42:79:
3f:59:8a:7b:fb:23:ab:f1:2e:12:9c:eb:f7:a7:0c:39:95:46:
d3:bc:ce:48:bd:49:9a:da:74:6e:44:8c:12:b7:18:8d:eb:3a:
e7:02:2d:bb:17:f8:89:27:8c:c3:8f:4f:de:67:1b:7a:e7:bf:
ba:0b:09:3b:82:29:25:11:2d:d6:43:68:bd:12:75:74:c0:50:
6a:c9:79:43:01:13:b7:a4:0e:57:df:85:72:e8:86:55:4c:26:
04:35:c8:f7:15:ed:21:0b:8d:cd:5b:d1:06:6c:90:14:f6:cc:
d0:17:f6:a4:ed:dd:e9:94:9e:50:04:0a:31:69:cc:b3:46:5b:
0f:cb:95:e4:9c:0d:ab:d7:a9:bd:20:60:fd:60:0a:59:91:a5:
73:6b:4b:22:ca:da:69:0b:11:f1:8b:0d:81:25:e3:e9:90:1a:
c7:28:61:21:47:c5:f8:ac:5a:dd:98:fd:6b:2e:bb:df:14:e6:
f3:79:f6:12:94:d9:9d:c1:75:70:dd:2c:40:1c:ae:db:5c:14:
d6:aa:4c:0b:92:4f:0c:f7:ff:c2:49:9f:43:2b:89:07:c7:0b:
18:de:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:03:34 2026 by rpki-client