
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/5B08B12602C211EF9A1E4567C4F9AE02.roa
File: 5B08B12602C211EF9A1E4567C4F9AE02.roa (raw, json)
Hash identifier: tC7+VJT22TXj7yUL7xjBDLMNT6SajKWeU3nOU11r1Qw=
Subject key identifier: FE:6F:21:34:08:1A:A6:39:06:45:6D:BF:3B:63:71:FE:74:7E:D0:32
Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Certificate serial: 015E
Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/5B08B12602C211EF9A1E4567C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:38:01 +0000
ROA not before: Sat 31 May 2025 06:05:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152716
IP address blocks: 103.43.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Validity
Not Before: May 31 06:05:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a584a9-3ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:cb:e7:37:61:68:38:e1:75:1e:08:d7:30:
c7:88:fa:49:99:e1:6c:f2:c7:b9:54:28:71:93:63:
d2:73:2c:27:e6:95:66:7b:52:7b:f5:8f:8e:3f:74:
66:24:68:5d:57:f1:dc:84:a8:75:92:dd:60:4f:21:
0a:74:7c:be:0f:cc:9b:5a:e7:9d:4e:a7:15:f1:d6:
33:9b:00:84:a6:77:e9:27:cc:80:18:7c:0a:4f:45:
fc:be:c8:30:bc:60:d2:e4:7b:8d:69:90:53:7d:8e:
e2:0d:83:c9:11:38:6c:b4:ea:7a:33:b4:d2:fb:fe:
9c:56:45:af:8c:fb:3f:ad:3d:04:c8:69:3d:42:d1:
bf:78:ad:51:44:51:2e:23:96:01:e6:5a:01:92:e2:
92:e9:30:09:67:e6:78:76:9f:2a:e4:88:df:39:00:
fe:34:fd:f7:45:33:ca:20:41:9c:9e:09:94:b9:5a:
ff:df:48:d9:8d:f4:14:22:7a:8a:e7:6c:a0:ab:77:
97:9c:07:42:7b:36:a7:de:94:1a:4d:2a:32:a0:71:
d0:16:4c:6c:9c:5f:4a:bc:5e:a4:91:76:35:3d:4f:
ef:15:86:c8:7e:be:ee:99:5c:b2:87:b2:21:57:3b:
bc:e9:da:a0:b0:be:64:e0:86:6a:9a:ad:38:c1:50:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:21:34:08:1A:A6:39:06:45:6D:BF:3B:63:71:FE:74:7E:D0:32
X509v3 Authority Key Identifier:
keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/5B08B12602C211EF9A1E4567C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.43.94.0/23
Signature Algorithm: sha256WithRSAEncryption
33:c8:aa:a6:21:2f:42:81:cc:a3:1a:80:2d:4a:3d:98:1e:b4:
61:95:80:72:41:15:15:79:2b:2b:d2:31:62:88:d9:5d:74:f0:
3b:77:5a:4e:7f:0f:c6:f8:52:c2:84:70:ae:14:f3:32:35:24:
16:7a:65:74:19:19:ca:c0:64:18:c0:4d:6c:8a:fc:e9:df:2c:
fb:3a:42:ae:e7:68:cc:61:68:12:bd:b3:de:7b:63:bf:38:8d:
b4:ff:21:2a:0a:e9:c2:9f:cd:cc:3f:0f:74:15:60:a4:67:b0:
9b:f6:a7:fb:f4:39:ec:de:b8:4b:fb:ba:39:98:c1:b8:49:77:
67:33:d5:ee:37:3d:ec:81:1c:aa:a2:1d:97:c5:d2:f7:71:eb:
c8:74:cd:2a:b7:49:4e:4b:ba:f4:db:e0:cf:7b:ca:3e:85:63:
2f:bf:e9:af:01:69:e0:bf:57:9d:00:e6:ef:bc:02:5f:02:75:
0f:14:41:f5:32:7e:c5:40:ef:00:15:ca:01:26:b1:c0:c7:c5:
17:d3:88:c5:ba:96:3c:a3:8c:98:fe:51:5e:8f:d8:ba:d1:4f:
00:b1:72:7b:75:21:3c:c5:1a:c7:30:e5:43:b1:e6:07:59:24:
b4:d5:77:1f:fa:d5:d9:2f:3a:0f:99:96:59:4b:5e:13:15:ec:
74:23:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:14:40 2026 by rpki-client