
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/1B5E44FC9AA311F18B8864883E11F970.roa
File: 1B5E44FC9AA311F18B8864883E11F970.roa (raw, json)
Hash identifier: NxNm6oazSdpRh6axfmesg9/w4othsFM0hiBYDwhgf2E=
Subject key identifier: 42:A2:BB:D0:5C:3C:70:9E:D6:0A:9E:61:D8:53:C3:8E:17:5F:0D:0A
Certificate issuer: /CN=A91FE50D/serialNumber=A46423F7F9C3D172EA1BD4E54870E0D177C83F9A
Certificate serial: 02
Authority key identifier: A4:64:23:F7:F9:C3:D1:72:EA:1B:D4:E5:48:70:E0:D1:77:C8:3F:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/1B5E44FC9AA311F18B8864883E11F970.roa
Signing time: Tue 18 Aug 2026 01:21:16 +0000
ROA not before: Tue 18 Aug 2026 01:21:15 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 38572
IP address blocks: 103.150.171.0/24 maxlen: 24
203.27.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.crl
rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE50D, serialNumber=A46423F7F9C3D172EA1BD4E54870E0D177C83F9A
Validity
Not Before: Aug 18 01:21:15 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a83b38b-9478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:d1:1b:75:6f:67:17:a8:20:e2:d3:e6:4e:
26:74:b8:99:cb:3d:bd:75:e0:08:39:65:25:c0:5b:
9a:5c:8b:a9:21:0a:6e:cf:28:5d:a7:62:2f:d2:37:
24:28:61:a8:35:ec:54:09:29:56:cd:d8:77:5c:c0:
4f:20:24:cf:7f:4a:ba:26:93:97:57:5e:17:be:95:
25:33:2d:73:58:5f:dc:57:10:dd:ba:2a:f3:43:84:
f0:1b:64:3d:db:08:86:87:83:33:44:d4:0c:04:6b:
52:f0:0c:b0:0e:01:00:a7:22:a0:71:ac:32:b2:d7:
8c:16:93:35:6c:05:61:ac:00:ad:ca:c7:fd:f6:fa:
1a:b5:b5:e2:ac:8d:df:49:95:92:9a:b6:b5:08:cf:
f6:d7:23:ca:8d:3d:73:4e:d5:f8:da:61:14:12:83:
6e:ab:0e:bf:ad:8d:fb:95:7a:1d:f9:ed:5f:ef:64:
f1:25:c1:e9:e5:5e:ae:e5:df:27:c5:19:bf:7c:f6:
61:58:c0:59:21:f4:99:03:fa:fe:9c:e2:3e:15:58:
93:fc:1e:de:31:75:e2:69:7e:07:8c:f4:05:9a:04:
d1:de:7c:e5:7d:9a:a7:64:5f:a5:3e:a6:49:2e:13:
ab:f5:68:a1:3d:a1:bb:0a:39:bd:04:c0:20:4a:6b:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A2:BB:D0:5C:3C:70:9E:D6:0A:9E:61:D8:53:C3:8E:17:5F:0D:0A
X509v3 Authority Key Identifier:
keyid:A4:64:23:F7:F9:C3:D1:72:EA:1B:D4:E5:48:70:E0:D1:77:C8:3F:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/1B5E44FC9AA311F18B8864883E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.171.0/24
203.27.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:9e:46:ea:34:32:24:2d:80:45:0d:7f:47:93:e6:1d:57:47:
ee:23:9b:37:e4:65:c5:f8:12:7b:db:97:0f:78:e5:2e:3f:76:
34:6d:65:81:74:99:78:ad:9d:3a:9f:d7:23:28:70:67:c0:36:
77:20:8f:3f:5c:60:6d:fa:b0:64:2c:0c:4f:82:4d:5c:1b:2a:
7b:80:b9:b5:64:39:4b:63:e3:bf:e7:85:4f:57:67:d8:1d:72:
fc:2d:67:18:4b:dc:2d:bd:d3:d3:ec:2a:52:26:ef:7b:d4:5a:
a0:6d:66:3b:ae:e5:5f:fc:17:02:71:4c:5a:4d:69:96:7a:b3:
dd:cc:4d:3f:a7:2b:b3:d1:6a:58:92:74:d9:18:13:1b:de:38:
06:c3:3f:14:03:ea:2a:ee:19:92:d4:3c:e0:76:26:40:af:ed:
8d:57:e4:9a:b9:d2:a4:74:c4:e0:15:af:7d:05:65:a2:64:c4:
0a:ec:f3:49:b0:60:78:24:27:1b:c5:49:1c:ea:d9:af:73:7f:
1c:0f:e5:2b:45:03:72:de:cb:75:b4:61:e3:9d:b0:77:d1:98:
6f:14:e2:87:19:d6:dd:a1:bd:14:1a:0a:72:31:05:d5:29:fa:
4b:d6:92:32:bb:55:d4:9e:49:6a:c0:6c:b7:04:1c:25:54:0f:
33:ad:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:55:34 2026 by rpki-client