
$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/AC58009E782A11EFA7DD8F7CC4F9AE02.roa
File: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (raw, json)
Hash identifier: /CXMp71PCPr4JQ7n5CMpQFrlfwbzRIj75gtHNS1QH9s=
Subject key identifier: 90:A0:3A:D4:4D:81:F4:03:6D:2E:B0:79:BB:99:5A:B2:49:42:F2:15
Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial: 05BA
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/AC58009E782A11EFA7DD8F7CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:59:05 +0000
ROA not before: Sun 28 Sep 2025 23:56:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140612
IP address blocks: 103.172.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1466 (0x5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Validity
Not Before: Sep 28 23:56:53 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45439-cbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9e:21:6c:28:87:ca:d2:ac:56:7b:f6:30:50:
5c:56:69:87:ea:cf:9e:b2:d0:84:f4:0b:9d:b7:7d:
29:6f:6d:39:0e:47:b4:a6:34:19:45:b5:a6:79:da:
b7:d1:43:55:ff:74:d1:68:a9:86:db:bb:57:68:eb:
b4:68:82:35:5d:13:74:34:6d:80:63:3d:bc:c0:ee:
89:b7:42:94:f0:66:47:62:c5:9c:04:6c:04:8c:43:
bf:8a:eb:30:8e:2c:52:73:d6:03:d0:86:0a:ef:e3:
22:43:c0:b3:36:cf:7c:13:54:6e:43:f6:3f:66:5d:
df:70:b6:5a:e9:16:0f:b4:31:b6:ba:4a:c7:12:f2:
d4:62:71:76:a1:91:0a:ff:76:a7:c3:bb:c6:3e:03:
fb:18:50:60:7a:5e:ad:df:31:a2:96:8d:8a:1b:02:
1a:34:9f:e3:7e:8b:8b:12:fe:0c:ce:ef:ea:35:51:
99:2a:80:ef:cf:de:c4:e4:b3:b9:93:e4:06:7b:56:
77:10:62:bd:a3:48:fb:48:8f:15:24:e5:e9:a3:5d:
af:28:28:a4:c1:52:4f:27:60:90:4d:45:1c:7d:7e:
f3:82:13:14:28:5c:1d:cf:c7:cd:92:00:02:8d:23:
02:dc:64:10:8b:22:79:0b:3a:bb:c4:ac:cd:5e:bb:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A0:3A:D4:4D:81:F4:03:6D:2E:B0:79:BB:99:5A:B2:49:42:F2:15
X509v3 Authority Key Identifier:
keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/AC58009E782A11EFA7DD8F7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:96:38:c8:0c:ed:0f:f4:f0:4e:fc:69:5e:34:34:26:f1:ae:
6d:37:08:85:d9:56:44:dc:41:55:ee:75:c0:9a:04:6a:9e:f6:
f7:96:92:93:96:66:8e:c1:f2:e7:7b:6b:1b:11:ad:6c:e8:d8:
60:45:c4:0b:f3:35:a3:a5:9b:60:cd:6f:66:d9:08:02:d7:6c:
9a:44:02:de:0e:65:7a:7a:f7:df:21:8a:8a:d8:fe:17:e0:2b:
f0:31:fe:3d:6b:43:9e:ea:f1:57:00:bb:3c:24:f2:20:ae:29:
58:22:ff:63:d9:1d:26:4b:ed:a7:48:31:8f:ad:b9:ab:9b:2d:
dd:de:25:4e:79:57:6a:5e:ee:97:c8:2e:0e:32:1e:28:4e:84:
8f:ea:7a:4d:b1:61:fb:95:3a:bb:bc:a4:09:0b:66:27:df:aa:
de:9f:fe:5f:4a:8b:56:ee:ff:24:d8:a5:8b:98:e1:40:db:ff:
32:b3:c7:2b:90:ab:ca:ed:9a:74:eb:5f:fb:8d:87:26:b8:61:
77:8c:d4:dc:1d:27:73:b6:32:81:c9:00:e6:6c:18:ca:f3:d5:
79:0f:cb:da:21:08:5d:87:62:53:ee:5c:35:27:80:47:61:9b:
fc:30:7a:12:e4:ce:1b:a7:e9:06:75:86:b5:1a:08:b0:77:70:
62:66:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:22 2026 by rpki-client