
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
File: E56B8AFEAB1411F0B1936926C4F9AE02.roa (raw, json)
Hash identifier: WD0gErJJmyclFhmJaTMcOF1Ei1LTHwTNpBBdF8taqIs=
Subject key identifier: 3B:AB:C2:04:97:6A:1D:D5:48:5C:A3:9E:C8:85:8E:CD:48:0E:D5:4D
Certificate issuer: /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial: 59
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
Signing time: Thu 19 Mar 2026 07:44:59 +0000
ROA not before: Thu 19 Mar 2026 07:44:59 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 55486
IP address blocks: 103.125.204.0/22 maxlen: 22
182.54.224.0/22 maxlen: 22
182.54.224.0/24 maxlen: 24
182.54.225.0/24 maxlen: 24
182.54.226.0/24 maxlen: 24
182.54.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Validity
Not Before: Mar 19 07:44:59 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69bba97b-775f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:3b:bd:c9:75:b3:33:33:76:c3:2e:60:64:
0a:05:72:bb:5a:e7:2d:ef:70:86:55:eb:9f:bf:6e:
ee:47:72:09:89:ff:e1:09:13:08:44:c2:19:53:55:
d3:38:c5:bf:20:10:b8:fd:82:32:6c:e7:6f:22:e9:
38:72:bc:83:6a:9c:b7:f0:ba:84:ca:9d:44:64:64:
ba:9b:e6:70:dc:45:5e:fb:56:4c:34:59:c2:50:34:
90:13:16:2c:eb:1e:7e:ff:3b:bb:92:9b:7b:42:5a:
ca:50:73:4c:bd:b6:8b:4b:0e:1a:4e:b4:cb:25:ea:
ed:d9:33:37:b5:f7:d9:d7:25:97:98:62:40:3e:92:
c7:12:d2:9f:e5:24:2a:79:83:46:1d:f4:11:fe:1e:
a5:7d:dd:36:d4:75:f2:e1:3f:82:28:92:1c:1a:2a:
14:6c:5c:f9:25:21:3d:17:52:b5:9e:ff:fe:64:e1:
d9:48:e3:fb:1f:b0:0b:5b:9c:1c:61:be:4d:98:14:
50:7b:50:61:64:ae:79:9a:90:16:5f:dd:60:99:44:
0d:32:8f:33:50:8d:24:f5:a6:0a:e5:3f:66:dd:35:
09:b1:3a:5a:12:46:71:9a:25:7c:8b:5b:7c:4f:bc:
a0:86:59:aa:9f:66:46:99:86:7b:e4:07:36:45:53:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:C2:04:97:6A:1D:D5:48:5C:A3:9E:C8:85:8E:CD:48:0E:D5:4D
X509v3 Authority Key Identifier:
keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.125.204.0/22
182.54.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:d1:02:90:a6:b1:d1:88:1e:3e:a5:97:bf:6c:d8:4b:b9:70:
c4:66:c6:d4:6e:8c:92:0d:ee:dc:d6:3a:a2:0e:8d:2c:38:e3:
4d:37:da:30:69:f9:14:1c:52:96:c9:1e:64:93:9e:07:9a:ef:
a8:ac:80:2e:7b:e7:c1:ed:26:a4:a6:86:22:21:0a:ff:56:f1:
07:d6:de:c2:0c:9e:8e:4c:d8:ee:d9:74:cd:9a:0f:94:2b:71:
ca:a1:28:2c:84:be:d0:0b:65:ef:ce:db:8b:c6:0d:0c:5c:26:
f0:5b:5f:67:13:d1:78:4b:92:19:bc:78:f6:18:66:1f:c1:b1:
e1:1b:9f:a7:d8:73:0e:3b:4d:d6:57:b9:11:32:a8:a9:bf:26:
02:82:e3:cf:b9:fe:39:44:50:77:4e:00:59:81:43:60:df:97:
92:42:6d:43:b9:64:f5:52:1d:3d:9b:2c:f2:84:0e:b8:91:76:
b6:f3:06:54:b0:b3:a9:dd:4b:d3:3f:89:05:0e:3a:a9:3b:c5:
1c:39:0a:73:6a:08:c5:c0:fd:08:58:78:a7:54:65:d1:91:66:
77:21:ea:76:9b:c9:1a:1b:33:7e:0d:3d:08:d5:88:1a:d7:22:
a6:99:fb:60:9b:d0:83:94:ed:b9:68:fd:e3:ff:42:77:87:4f:
b6:40:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:42 2026 by rpki-client