
$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/5B596EA26B9B11EBA6B7E387C4F9AE02.roa
File: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (raw, json)
Hash identifier: te1kdq92VgFygTtdop1iQjv7JxZOQ/Lth61MfMSAoiI=
Subject key identifier: C9:24:7E:BE:87:E1:D6:CF:9B:B0:B4:BE:6D:1C:CD:CD:55:61:1E:D6
Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Certificate serial: 0736
Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/5B596EA26B9B11EBA6B7E387C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:55:24 +0000
ROA not before: Wed 04 Feb 2026 21:18:58 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134462
IP address blocks: 103.160.122.0/23 maxlen: 23
103.160.122.0/24 maxlen: 24
103.160.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Validity
Not Before: Feb 4 21:18:58 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a588bc-f953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:98:30:0d:03:5e:85:2f:28:d8:3c:c2:98:
46:37:c7:55:83:34:89:00:50:5c:42:71:ef:cc:f3:
2f:cc:e8:50:96:09:4f:57:ef:03:63:d3:e3:8e:1f:
ef:2e:05:ba:ee:70:26:12:7a:1e:7f:b5:66:63:4b:
de:b7:d7:9b:26:01:76:70:b1:92:aa:a1:8b:82:12:
80:57:90:bc:7e:7a:97:8a:2a:76:07:eb:8f:59:bc:
b6:5e:c2:fb:e4:97:ff:49:7b:99:b9:1e:b0:73:76:
4f:78:ec:af:17:57:76:ed:9a:f4:d7:67:fd:02:b4:
e4:10:20:da:d1:88:53:56:ad:63:fa:11:00:8b:42:
a4:3d:8d:9d:0c:2b:9a:d3:d1:78:7e:93:94:6a:2c:
ae:3e:ca:91:d5:be:2e:23:9a:3d:17:3a:92:48:53:
69:3c:a0:72:73:3a:d7:38:df:22:99:21:92:b2:0d:
5d:5d:04:37:dc:f6:90:23:b1:42:fb:f9:c4:60:15:
41:3a:7a:27:62:30:ce:0f:e5:6b:bf:20:bf:05:8d:
31:1e:1f:f0:42:b2:94:64:b7:0b:8e:97:87:05:8b:
80:7c:4f:0b:29:7d:1b:d5:bb:c1:15:11:d9:08:9f:
4a:a2:0d:64:dd:b1:f3:dc:25:f3:b2:ba:b8:5b:e5:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:7E:BE:87:E1:D6:CF:9B:B0:B4:BE:6D:1C:CD:CD:55:61:1E:D6
X509v3 Authority Key Identifier:
keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/5B596EA26B9B11EBA6B7E387C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.122.0/23
Signature Algorithm: sha256WithRSAEncryption
89:b8:b0:2c:66:1a:27:25:d7:68:b8:5f:15:9b:be:86:7e:af:
be:6b:b7:25:28:10:8e:75:e3:04:c6:2e:61:ec:0c:31:cd:fc:
b3:08:3f:c1:25:df:37:9d:35:e5:03:3a:a9:5f:b6:d2:dd:75:
33:09:64:1b:04:ec:0d:ff:8e:0b:1a:78:3d:23:e5:0a:94:80:
52:a6:5a:48:05:f1:d3:5d:24:6a:a8:6b:15:0d:19:55:e8:a2:
e8:a7:3d:52:40:fe:b7:7f:65:21:87:0e:57:48:34:54:3d:73:
7f:e2:9b:b3:a1:34:bd:5d:11:e1:c0:ba:5c:7c:02:f3:e9:4d:
e7:6a:7e:87:4c:78:7b:f0:9c:91:ae:05:b9:45:f4:dd:99:a1:
62:ef:8b:e8:ee:fd:43:53:54:45:ac:bd:1a:a9:92:4b:3e:32:
2a:8b:dc:0c:d9:87:6e:01:70:bb:d6:95:7c:eb:e0:3b:63:3b:
1d:9f:b5:fe:30:9e:9d:dd:d4:e4:a3:22:b4:52:34:90:5e:73:
b5:f7:3f:48:a3:f1:88:48:01:46:78:d8:9f:0a:79:2c:1a:4b:
87:21:9c:62:09:cb:e6:61:cf:1b:cc:4d:30:c1:f9:0d:f7:61:
41:f9:e4:2f:31:85:f4:5a:19:9d:68:7d:0d:1e:09:44:a0:49:
49:85:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:13:36 2026 by rpki-client