
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/A0AA3CC84A1D11F1B98DEBB6C9833773.roa
File: A0AA3CC84A1D11F1B98DEBB6C9833773.roa (raw, json)
Hash identifier: vg1YeXy7A3skRrMrzsOzoL6vwmPs9b3WJpIatWza3uI=
Subject key identifier: 91:A0:3C:9D:F5:05:37:58:1F:9E:8E:AC:11:A5:3E:5F:3F:BB:64:BD
Certificate issuer: /CN=A91582DF/serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
Certificate serial: 04
Authority key identifier: C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/A0AA3CC84A1D11F1B98DEBB6C9833773.roa
Signing time: Thu 07 May 2026 14:06:05 +0000
ROA not before: Thu 07 May 2026 14:06:05 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137445
IP address blocks: 45.112.128.0/22 maxlen: 22
103.205.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl
rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582DF, serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
Validity
Not Before: May 7 14:06:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69fc9c4c-ef60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:43:81:80:fc:51:bd:5c:ee:6e:e1:2b:4d:
63:94:ea:29:10:52:43:e1:f0:cd:06:9a:24:cb:2b:
38:f4:ed:6e:52:04:2e:39:95:1d:2d:0b:c7:3d:53:
a1:44:ca:0e:da:6d:50:35:80:38:53:58:cf:ca:71:
48:82:f6:06:8f:25:08:7e:6c:c4:01:62:92:d6:ad:
83:ed:23:37:31:ff:1a:fe:47:fc:e2:53:e4:3c:b3:
b5:7b:16:1d:c8:2d:cf:a8:09:ab:4b:6a:8b:e7:3d:
0b:77:6f:84:ee:1b:96:35:9f:c7:c3:56:7c:63:eb:
bb:d1:e9:78:6f:89:bf:6d:c2:76:74:ef:30:02:0a:
7e:c7:33:63:fe:8a:f3:50:00:54:0b:b7:87:c2:e5:
af:db:62:66:ee:0b:38:e2:2e:83:fb:09:ad:c7:5d:
c0:77:fc:59:25:d5:b0:fd:ac:d8:f6:d1:15:7c:6b:
c7:9c:c6:17:12:83:83:60:bc:da:c1:a3:1d:7d:57:
ca:a0:1c:4c:7b:ab:c1:e0:2d:84:3b:c8:07:b0:1f:
65:de:6e:f0:47:e7:26:91:1e:c6:3b:7a:46:90:b4:
17:cb:b7:a5:bd:81:a1:d9:fe:c2:86:dc:28:dd:fe:
0e:60:2b:c6:77:89:91:69:f9:3f:24:4c:ce:c3:7d:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:3C:9D:F5:05:37:58:1F:9E:8E:AC:11:A5:3E:5F:3F:BB:64:BD
X509v3 Authority Key Identifier:
keyid:C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/A0AA3CC84A1D11F1B98DEBB6C9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.128.0/22
103.205.72.0/22
Signature Algorithm: sha256WithRSAEncryption
61:e5:d2:91:7d:73:cd:4c:02:7c:3e:27:3c:61:04:e6:95:1d:
f4:60:fe:97:f4:a7:f1:ee:5d:c1:bc:37:75:44:b8:2f:a6:9a:
33:bc:20:f4:fa:bb:5d:e5:01:f2:96:6c:ac:dd:cd:ac:03:21:
1d:7d:ca:71:7d:05:9a:18:ad:7c:0d:21:e4:7d:81:d5:7d:74:
51:d1:69:ba:a9:f3:b9:bf:76:3c:81:f6:90:fa:33:ea:75:52:
5d:db:99:41:df:74:09:c6:a6:25:6a:3d:dc:ed:de:3d:cb:02:
78:e1:8d:00:91:a1:53:76:fb:01:86:b8:67:79:6d:35:2c:af:
5c:fe:f1:a0:95:13:59:2d:5e:b5:e9:ee:30:b8:f0:8e:b1:21:
fe:fd:dd:75:63:26:22:8d:2e:77:06:1d:f0:00:69:e0:fa:af:
b0:9c:69:73:d8:2a:48:8d:aa:fc:ad:8d:fe:52:0a:9e:a5:16:
9e:d9:ec:18:3e:cc:d5:30:a4:46:ac:4a:96:89:10:d2:79:25:
2f:6c:a2:de:e9:6b:64:83:c2:4c:e9:eb:b7:c3:f5:b2:15:fd:
71:81:4f:1c:42:7d:76:2f:82:ff:13:6d:1b:62:94:69:7a:7d:
cb:c2:05:f6:c5:00:03:fb:3c:bc:90:11:82:d0:08:ea:b4:de:
95:2c:d3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:15 2026 by rpki-client