
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/5A0EFF08D55011EF9880B254C4F9AE02.roa
File: 5A0EFF08D55011EF9880B254C4F9AE02.roa (raw, json)
Hash identifier: +WoZwM5c/G0GJuCqWJdEv5dlh2s21arWb1UeVjCf9K4=
Subject key identifier: 46:09:7A:0D:10:A7:19:0A:25:B5:FC:E8:B9:4D:60:CE:7F:45:88:66
Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial: 043F
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/5A0EFF08D55011EF9880B254C4F9AE02.roa
Signing time: Sun 11 Oct 2026 00:50:14 +0000
ROA not before: Sun 11 Oct 2026 00:50:14 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 153494
IP address blocks: 43.248.60.0/22 maxlen: 24
103.39.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Validity
Not Before: Oct 11 00:50:14 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acadd46-7ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:76:10:97:d4:41:0d:ff:42:23:29:9f:2f:
66:f5:0b:e6:97:bd:33:0c:6e:e9:a3:f2:89:94:4f:
c8:03:85:7f:f2:e9:1e:ae:eb:9b:b3:9a:9e:44:37:
bd:81:fc:a1:f3:dd:5f:fd:a7:88:bb:a0:5a:a4:a3:
86:48:ec:3a:05:00:be:d1:3c:fb:19:df:e3:18:d1:
04:10:82:3b:61:f2:94:24:74:88:d8:f0:1e:76:16:
43:49:4c:8e:54:19:d3:88:73:9e:7c:72:c5:96:20:
7d:46:b9:02:d4:0d:45:0c:d4:dd:da:7f:0b:32:fc:
29:ad:c5:d3:d5:ea:c6:c1:45:78:7d:d0:ce:99:09:
33:66:10:ae:21:b3:f0:8f:8c:b0:5a:b0:5e:be:e2:
15:11:8a:db:dd:71:bf:a1:2c:5b:49:95:34:7e:7e:
d2:e1:04:0c:8b:5f:10:3a:56:16:96:1e:90:92:db:
92:45:10:8d:5c:7f:71:94:cc:d8:33:9e:94:d4:6d:
a5:26:0b:8c:29:29:87:c6:f5:bf:6a:78:5a:53:7e:
f6:30:25:79:e1:4e:af:c8:4f:19:bb:90:98:c3:8b:
c1:7c:88:8e:b0:fe:47:9b:62:fe:91:b1:24:db:19:
46:49:97:94:b8:94:13:f8:fe:7a:9f:5a:27:a9:2c:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:09:7A:0D:10:A7:19:0A:25:B5:FC:E8:B9:4D:60:CE:7F:45:88:66
X509v3 Authority Key Identifier:
keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/5A0EFF08D55011EF9880B254C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.248.60.0/22
103.39.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:fd:c2:1f:59:64:c3:f4:53:eb:43:09:9e:3d:cf:b0:60:d6:
54:57:77:b1:24:67:af:95:e5:99:e4:3d:1b:42:f2:02:0e:7f:
6e:0e:f0:1d:ee:4a:1e:78:33:81:48:d5:86:dd:3d:34:53:28:
b2:5b:5e:78:d7:12:68:c2:5a:d1:0c:59:49:a4:ca:90:a2:8e:
4f:6b:55:16:3f:01:a4:00:b4:12:2c:e9:c1:2f:79:0e:72:fd:
ac:14:6a:e1:bd:8b:3b:79:71:e6:e5:76:ad:4a:e1:71:77:f7:
f9:c0:1e:0a:34:99:60:4b:63:7b:aa:8a:ea:f2:ec:8a:a8:e7:
4a:b3:58:3e:20:4e:1f:b5:4b:e2:04:16:0a:73:37:f8:0d:ad:
e8:ed:d9:bb:ef:c4:26:61:a8:dd:34:fb:16:12:23:cf:bb:40:
e4:1b:0c:f1:20:74:7e:65:2e:d4:f7:ff:b6:0d:60:69:5d:03:
82:19:d6:0b:ae:d0:87:80:ae:6b:bc:62:55:06:1d:27:bb:49:
a2:fd:4c:8b:e2:1d:cd:ae:c6:bc:24:3c:a8:7d:4b:fe:fe:15:
72:2c:7f:8f:99:8c:64:69:39:b6:bc:a5:fd:36:cc:1d:ed:ab:
3b:81:b2:b6:3f:8b:ff:46:56:84:b0:d1:4a:26:29:16:31:6d:
5d:ae:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:34:22 2026 by rpki-client