
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
File: 80F75824FAAD11EDB0C98683C4F9AE02.roa (raw, json)
Hash identifier: GNsFivW7Cs+ML6I7eCh6qC+A58oL1ugghHS/rkeeyfc=
Subject key identifier: DC:1D:1F:63:B8:5C:02:24:C1:B4:C0:AD:C5:52:4A:7B:3A:9D:DF:9B
Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial: 020E
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:36:08 +0000
ROA not before: Tue 29 Apr 2025 04:10:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133929
IP address blocks: 103.91.156.0/22 maxlen: 24
123.253.44.0/22 maxlen: 22
123.253.44.0/23 maxlen: 23
123.253.44.0/24 maxlen: 24
123.253.45.0/24 maxlen: 24
123.253.46.0/23 maxlen: 23
123.253.46.0/24 maxlen: 24
123.253.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Validity
Not Before: Apr 29 04:10:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3de58-5ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:86:78:68:0a:7d:c8:9e:f7:ee:f5:09:26:
cb:a9:d9:53:2e:b1:fa:1b:8b:30:71:1e:54:5d:bd:
b1:22:2b:64:38:c2:bc:53:11:4c:c8:00:95:d2:ae:
de:7e:a9:e5:e8:fd:12:ad:d2:d6:77:65:c8:fb:b8:
58:33:3d:45:d1:a1:ea:c4:fd:46:35:c6:fd:8b:cd:
61:36:94:b8:eb:3b:d4:7f:cd:f6:53:07:3f:fd:38:
5c:e5:4c:70:87:e0:f4:66:cd:eb:73:71:51:18:81:
4b:ab:96:16:4a:ce:21:5b:97:52:4a:2c:5f:76:71:
c5:df:eb:bc:3c:7c:19:1e:21:4b:cd:f6:2a:34:c3:
ee:d6:9c:0a:87:b0:81:9a:5c:6e:de:ae:06:6e:49:
d0:f5:6a:d0:6f:b8:10:6b:95:04:a0:89:d2:a3:7e:
c3:0e:b4:c0:c5:ea:92:38:c1:66:28:fa:dc:6c:af:
b0:41:23:76:0c:2d:6c:97:2c:c7:bb:fa:ed:e6:d4:
8c:09:f5:90:e7:80:17:01:7a:62:cc:4b:b1:5c:70:
39:92:1d:ce:41:79:01:30:79:7a:11:d3:2c:ac:86:
16:bc:ee:5d:bd:fe:31:2e:00:f5:d0:d1:61:0c:d5:
5b:df:22:72:9b:da:49:32:d8:b6:dc:9f:f6:14:05:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:1F:63:B8:5C:02:24:C1:B4:C0:AD:C5:52:4A:7B:3A:9D:DF:9B
X509v3 Authority Key Identifier:
keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.156.0/22
123.253.44.0/22
Signature Algorithm: sha256WithRSAEncryption
26:3b:64:8f:c9:8c:e9:4f:6c:8f:2a:7c:d7:7a:9e:96:56:1a:
aa:59:14:05:ee:f4:df:cc:06:d7:c4:4f:72:57:15:50:41:7c:
b7:e2:1d:dd:cc:05:d1:d1:3a:e6:f9:ee:aa:9b:94:09:54:57:
a7:43:e3:16:37:a0:cc:fe:15:36:a5:9a:77:18:e9:de:32:00:
6f:e1:78:bf:7b:52:09:21:d9:10:53:51:5c:b3:54:52:2d:bc:
6c:09:a5:f0:2a:d9:fe:4a:05:50:de:08:43:3b:54:aa:19:a0:
86:24:20:5a:97:8d:64:c7:cb:cb:13:52:b5:58:44:93:e0:60:
86:19:08:7b:eb:d5:d7:10:5e:eb:d0:79:bc:f3:ae:25:56:6c:
94:07:ff:ad:d2:75:d0:fc:20:2b:ac:46:72:2f:19:db:9b:98:
68:6e:a1:2f:db:fa:f8:a3:7f:d9:a0:81:75:3c:1a:89:63:8c:
68:ce:37:fc:f7:dc:78:9c:74:08:ea:c5:a1:9b:9c:21:50:4e:
9a:f5:e5:62:a5:7f:1b:3a:6a:48:09:c0:42:58:5a:f9:6a:af:
aa:31:47:21:3c:ce:25:fa:b1:bb:7e:a2:03:10:7a:5c:58:39:
10:90:ba:3c:a7:9c:67:9e:f8:7d:66:55:3c:cb:b9:c9:66:f9:
23:01:46:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:44 2026 by rpki-client