
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa
File: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (raw, json)
Hash identifier: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=
Subject key identifier: CC:6B:3F:48:D2:7F:C9:13:62:13:A7:C3:E1:97:94:43:48:46:14:7D
Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial: 023A
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa
Signing time: Thu 19 Mar 2026 02:36:50 +0000
ROA not before: Thu 19 Mar 2026 02:36:50 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136557
IP address blocks: 203.34.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Validity
Not Before: Mar 19 02:36:50 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69bb6142-56b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:87:ae:01:ce:de:e5:0c:c1:81:7a:77:57:
91:a6:44:d2:22:f5:41:3d:42:f1:db:09:eb:91:52:
20:a5:2d:75:22:71:11:5b:ff:d9:9c:90:5d:99:9e:
81:4c:9d:88:9c:76:38:ba:06:77:01:a0:89:b1:9a:
85:83:e8:b4:a1:c1:4e:52:f9:b3:74:70:2a:bc:9c:
a7:dd:c8:bb:dc:33:82:18:eb:22:0c:97:b8:ae:43:
e4:7b:76:8f:2c:d7:b6:8f:cd:49:4f:45:5e:5b:dc:
87:be:a2:be:e4:eb:56:1f:72:b8:e7:c3:5a:06:46:
d3:41:1b:86:a7:46:5b:0f:d3:53:a0:64:81:9c:cc:
1a:b7:56:37:3d:db:a2:7b:cb:40:65:d0:6e:6b:65:
48:af:71:32:49:69:be:02:6d:22:79:0c:8c:ff:42:
36:30:7f:ae:f1:f1:4c:b9:c3:35:70:44:28:32:18:
de:cd:86:7b:e4:98:bb:59:9a:ac:b8:e8:82:92:aa:
8b:bf:7a:15:3f:86:a7:c5:bc:03:9f:7f:ad:7c:7e:
ec:49:f3:1b:a2:44:5f:43:a2:aa:82:2d:23:2a:94:
bd:75:c2:1c:df:0f:b6:3d:fc:e7:9a:eb:87:b9:62:
c9:83:d8:dc:e1:8a:1f:50:da:4c:9a:32:d1:e8:d4:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6B:3F:48:D2:7F:C9:13:62:13:A7:C3:E1:97:94:43:48:46:14:7D
X509v3 Authority Key Identifier:
keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.34.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9a:4d:c0:a8:bd:2c:a7:6e:9a:a6:e8:72:2e:56:b2:39:e3:
dc:6a:e7:87:82:3c:ee:45:56:69:d7:b5:a3:af:0a:d6:32:71:
33:04:8a:5a:4f:c7:1c:71:0d:eb:d1:0f:7c:72:49:b1:43:6e:
49:43:2a:ad:25:7c:32:6a:6b:8c:96:41:cb:da:7e:f7:7b:95:
d3:ec:4f:90:4b:69:90:9d:54:ca:4f:05:d8:02:15:f3:1a:d8:
95:c0:0d:b7:be:2f:3a:03:1e:27:e4:5a:83:9f:a3:01:90:7e:
35:1b:a1:13:95:6d:0b:b3:9f:a4:49:eb:6f:4d:15:5b:cc:2b:
84:91:51:44:7a:45:02:bb:71:0f:a2:87:22:8b:50:60:b6:e5:
bf:cf:53:ce:4d:fb:fe:a4:4c:c0:8c:67:16:17:77:e1:35:7c:
5a:e0:ac:3f:a9:3c:65:68:d5:67:74:4e:28:f3:0d:1a:e5:64:
9b:76:87:f8:c3:fb:15:ea:bf:9c:4b:9a:0a:81:80:13:16:e0:
f1:a3:c9:f7:a7:50:5d:a8:d3:85:71:b2:d0:23:c8:68:bf:aa:
92:60:61:49:a6:a9:e6:56:c2:ad:9b:0d:3c:ff:c1:24:3d:bb:
aa:9f:c6:1a:46:b7:4d:86:ba:5e:e2:9d:7e:52:97:8b:a9:ce:
3e:50:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:54 2026 by rpki-client