
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5879949ADE9B11EC9AE23269C4F9AE02.roa
File: 5879949ADE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=
Subject key identifier: 2D:C9:3B:B7:77:BF:34:D9:F1:BF:B0:6A:69:40:4B:56:51:F0:55:E8
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 04D9
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5879949ADE9B11EC9AE23269C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:21:30 +0000
ROA not before: Sat 07 Feb 2026 00:20:07 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137427
IP address blocks: 103.80.132.0/22 maxlen: 22
103.80.132.0/24 maxlen: 24
103.80.133.0/24 maxlen: 24
103.80.134.0/24 maxlen: 24
103.80.135.0/24 maxlen: 24
182.161.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Feb 7 00:20:07 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a483a9-e333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:51:d5:ea:ca:4d:63:0f:f2:35:d8:d5:ac:
a6:89:3e:31:ff:0a:9d:01:f8:26:5c:3a:42:0e:ec:
4e:47:a2:5f:f9:8a:9d:e2:5d:a3:c5:13:db:8d:cf:
4c:81:0d:95:f1:72:35:b5:bd:3c:3b:99:b0:f2:d6:
94:57:0b:0b:65:76:f3:5b:a1:d7:21:20:e8:48:93:
df:07:b7:0a:5b:da:e9:d5:41:29:a0:58:92:fc:6a:
a9:b4:fd:c3:01:eb:46:cd:c0:8b:f6:bd:90:d3:fd:
9a:74:36:e2:7e:54:c5:04:26:6a:ae:dc:13:7a:36:
73:b8:af:0a:57:bd:2c:82:46:29:0d:d4:58:08:fb:
68:be:2f:13:1f:38:13:4b:3a:90:35:74:fc:65:05:
69:34:6f:09:d2:7e:4a:66:a2:4f:b4:f1:46:17:42:
32:41:89:d6:63:ac:13:f9:89:43:8f:0c:6b:b3:96:
11:98:be:29:3e:6d:5c:bf:df:4c:c6:e6:be:b7:7b:
fd:89:e7:58:ae:df:8d:89:53:b1:4a:d9:03:4a:2d:
36:dd:42:d9:83:7c:d1:d7:45:2b:d1:65:00:9a:83:
33:24:f4:27:81:b0:6b:86:af:98:ea:bd:6e:56:15:
7a:84:9a:ef:b9:b7:a8:bf:c5:e1:0c:5c:ad:ed:84:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:3B:B7:77:BF:34:D9:F1:BF:B0:6A:69:40:4B:56:51:F0:55:E8
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5879949ADE9B11EC9AE23269C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.132.0/22
182.161.66.0/24
Signature Algorithm: sha256WithRSAEncryption
17:af:f3:7c:8c:e7:56:96:fc:e6:c3:65:66:cd:22:28:47:a5:
fd:2a:c6:b8:6c:f7:c7:34:39:1d:44:69:4a:2f:12:ff:a6:93:
7d:5b:88:2c:9c:ae:48:fb:a7:b3:ef:85:45:2d:e1:11:ed:24:
c3:ca:ff:8c:8e:1d:89:df:f2:94:25:92:68:38:d9:0d:e3:93:
76:8b:8b:68:6b:f6:cb:97:e6:93:59:da:c4:f6:cc:f7:32:15:
43:66:fe:4c:00:6a:2d:db:a8:39:47:98:ed:d6:45:64:dc:ef:
c9:92:2f:63:63:d2:cb:32:87:b0:a8:3b:0b:68:5d:f9:52:dd:
f4:87:a1:f2:74:b8:f9:7b:0d:b0:91:48:08:7f:da:2f:47:e5:
0a:d3:48:ca:64:4a:93:45:54:c3:22:d6:9e:3d:f3:19:f4:ea:
6e:10:79:26:f2:b0:25:c3:15:b1:1b:33:d1:39:f8:fb:b4:af:
04:c5:55:06:a3:3d:7e:2a:16:d6:cb:e6:e1:cf:06:84:39:68:
ff:8a:86:1f:8c:55:e6:9e:e2:3d:3b:ba:20:16:1a:18:2a:94:
84:21:72:29:06:da:5a:50:7a:5e:1d:1e:a4:ef:b5:bc:33:97:
16:6d:74:ca:cd:bd:9d:0a:46:32:e5:35:7d:18:e1:34:29:7d:
d7:6b:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:47 2026 by rpki-client