
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
File: 5D5B0F7C34CA11EDA301482BC4F9AE02.roa (raw, json)
Hash identifier: vF0Xep5rMnkqhhbU8FmKPsAzCnUUJ1w3mXYEGGvLr3M=
Subject key identifier: 50:8F:2F:7E:23:F3:FD:5A:93:32:BA:16:E2:69:22:CF:AE:EA:87:52
Certificate issuer: /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
Certificate serial: 02AB
Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:53:56 +0000
ROA not before: Thu 25 Dec 2025 01:21:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139863
IP address blocks: 103.146.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl
rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
Validity
Not Before: Dec 25 01:21:47 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a436e3-f77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:38:e7:a6:a7:93:cd:93:c8:5d:20:ea:e8:
7e:9e:2e:fa:b9:ea:ea:b6:02:b9:1a:89:b5:e4:15:
ad:d3:83:d4:5d:f9:3c:cf:8b:97:f0:eb:1f:b5:0d:
bc:6d:53:6c:04:6d:24:5e:87:2c:5a:f7:37:bd:14:
e7:5d:2f:8b:22:7e:62:25:cf:01:12:2e:98:d3:b1:
19:52:26:e7:3f:17:8b:9d:45:93:cc:52:dd:9f:ee:
b4:d4:a4:02:7a:f7:6d:57:b6:92:84:cd:86:51:fd:
7e:c6:b0:62:82:c0:9b:82:33:f5:b6:43:03:94:e3:
cd:fa:7c:a1:f9:c0:26:01:14:cd:38:3e:bc:2d:15:
82:e1:81:dc:62:29:95:41:cb:33:5f:70:8d:da:7a:
80:1a:e5:4c:e3:b3:9c:09:ee:f1:9e:1c:97:4d:ac:
9e:49:7d:cf:cb:a9:43:40:b4:89:50:33:30:9e:3e:
59:a7:8c:6a:25:c1:28:e2:54:f9:4d:ff:0a:f2:af:
fb:ec:51:8f:5d:24:85:6d:13:f4:cb:a4:7f:7f:40:
77:0b:6d:b4:70:97:6e:b4:81:61:5b:e5:79:0c:1e:
ab:ee:ea:0d:18:98:62:e2:59:ac:dd:4f:a4:89:e1:
c6:f0:30:60:9c:ec:1d:ad:49:36:6c:b3:04:77:43:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8F:2F:7E:23:F3:FD:5A:93:32:BA:16:E2:69:22:CF:AE:EA:87:52
X509v3 Authority Key Identifier:
keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:2c:fc:c8:6a:83:ce:a3:39:22:ab:09:55:f5:52:e3:73:81:
89:13:5c:71:fc:9a:82:9e:61:f6:23:98:5d:6c:72:2d:8b:bf:
5a:c3:1b:52:42:f8:11:74:31:cc:c1:6b:5c:0b:95:d1:bd:12:
b5:5e:63:9b:06:a8:f0:fa:9a:67:45:13:13:ef:2d:96:6a:ec:
e2:73:7f:95:b6:38:f9:1e:05:2f:b6:5e:c4:5d:76:6c:bf:b1:
d0:e1:a3:b8:85:ff:7e:27:29:a5:ae:d4:a0:bf:b3:c2:fe:11:
e4:45:8c:f8:8e:06:a8:bb:bf:fb:e5:62:5f:87:ee:63:5f:a8:
87:65:59:12:e9:b5:cd:38:d3:96:98:90:d4:72:2e:2d:b6:3e:
72:bc:0b:59:d3:be:ca:be:8c:75:02:a2:13:c8:ab:81:d9:78:
c3:1e:5e:89:73:11:1f:4f:42:2a:15:aa:3d:13:51:04:d1:61:
39:d2:93:9e:37:2e:b4:13:44:90:0a:ac:cf:fe:1e:c6:32:de:
a7:ac:43:3c:fc:f5:b5:ff:01:8e:de:65:7f:55:44:84:5f:1c:
3a:6a:eb:8c:5b:88:b5:7b:a3:80:ea:3c:52:1b:f0:84:b1:dd:
3e:92:4b:c9:8d:19:62:31:40:df:30:72:1f:3f:44:28:76:0f:
62:80:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:14 2026 by rpki-client