
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/D5FC2548F12211F0893A96874F6F56BC.roa
File: D5FC2548F12211F0893A96874F6F56BC.roa (raw, json)
Hash identifier: hiCv6pQDsLM27UxQqNoBRWWzV6cQZPkdjEvW4VbBbJ0=
Subject key identifier: 1B:D2:AD:2A:D1:64:65:DA:00:D9:18:BB:10:97:D7:7E:94:BB:BF:35
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0D64
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/D5FC2548F12211F0893A96874F6F56BC.roa
Signing time: Sun 01 Mar 2026 17:21:43 +0000
ROA not before: Wed 14 Jan 2026 08:27:17 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 134599
IP address blocks: 103.135.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3428 (0xd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Jan 14 08:27:17 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a475a7-9508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:8a:d3:43:43:89:40:da:ee:7d:07:14:c1:
e8:97:c7:fe:3c:dd:f6:8b:57:ea:50:59:7e:97:68:
52:ea:98:3d:95:da:5c:62:67:14:65:ad:79:2c:e0:
f7:54:82:c1:74:9e:b3:de:1d:2e:c1:0f:4c:c8:97:
51:a2:17:7d:ea:71:dd:76:a5:c7:f8:e6:6a:d6:8f:
0a:8f:d5:3a:e7:06:54:94:36:85:72:a6:3b:23:8a:
58:b7:a4:0a:2a:58:e6:a4:5d:6f:14:92:68:21:94:
02:ae:3f:70:e2:c9:a1:1f:9d:ed:8c:26:f3:21:ff:
1d:22:db:6d:c5:e9:cb:7d:75:c8:4b:11:cd:26:a1:
64:39:40:dc:31:bb:40:1c:d8:b5:85:74:17:45:06:
59:be:9c:f8:c7:d0:e9:f8:93:45:67:7f:39:62:72:
5a:59:09:5b:b7:e8:fa:46:fe:30:21:21:b4:da:54:
0e:ed:a4:b8:78:bb:f6:22:7c:45:9e:af:66:ab:70:
03:9e:e5:06:bc:b9:a0:47:39:58:90:68:87:6b:d0:
56:88:58:e0:46:3c:9f:61:79:1b:b9:c3:0a:07:ff:
6b:a0:c9:83:d3:ff:ea:40:f8:70:d3:20:03:d2:4f:
f0:43:37:af:65:e7:2c:78:4e:80:50:9b:84:4c:1a:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:AD:2A:D1:64:65:DA:00:D9:18:BB:10:97:D7:7E:94:BB:BF:35
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/D5FC2548F12211F0893A96874F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.91.0/24
Signature Algorithm: sha256WithRSAEncryption
58:86:95:dc:96:8a:d3:cb:d7:ad:be:4b:b3:e5:6e:00:35:7b:
fd:21:3a:16:04:30:52:f5:b6:55:36:56:53:7c:e8:b9:ef:f1:
e6:a8:32:93:f9:57:c6:74:5e:87:86:fe:af:f6:7d:2f:74:54:
16:0e:b9:fd:a3:ad:e7:72:03:38:0c:9b:25:d4:b7:85:11:ba:
33:8c:65:9e:74:aa:92:7a:f8:c3:9a:a2:3a:52:05:51:5c:bf:
6d:59:d9:64:29:6f:fe:17:27:3c:93:df:f8:5a:91:37:19:08:
8b:06:36:8f:6d:5a:43:3c:96:df:83:0e:38:64:9a:59:06:4c:
21:2d:c5:13:93:3d:fb:38:37:fd:e0:28:3d:ff:86:eb:22:ce:
ff:3a:4d:d4:78:0d:8b:1d:39:52:24:b3:5c:23:08:b7:0a:18:
3d:7e:55:b9:ad:63:92:d1:08:b5:82:f7:e3:97:b1:18:53:fb:
8e:06:f7:48:79:04:86:3b:a0:17:3e:ed:e5:3a:a7:5c:cd:b0:
90:13:8f:bb:c9:90:dd:ae:f5:c4:cd:77:65:8e:23:03:75:01:
26:8e:db:83:6a:03:75:57:65:f4:22:3f:48:0a:3b:34:e6:6b:
0b:7c:c1:60:2f:fa:1d:ba:db:3e:28:5e:05:f1:cc:04:4d:36:
5c:3b:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:17 2026 by rpki-client