
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/DFC9BF30F14E11ED992E1316C4F9AE02.roa
File: DFC9BF30F14E11ED992E1316C4F9AE02.roa (raw, json)
Hash identifier: Hs4DOU39hQ6t/mPSzo1xZTfcgJt7cqi66Cgde0oW6F8=
Subject key identifier: D0:A2:62:E9:72:34:64:02:22:C9:51:05:85:96:B1:B4:12:EB:51:CF
Certificate issuer: /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial: 0234
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/DFC9BF30F14E11ED992E1316C4F9AE02.roa
Signing time: Tue 05 May 2026 03:33:32 +0000
ROA not before: Tue 05 May 2026 03:33:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 138493
IP address blocks: 103.69.58.0/23 maxlen: 24
2001:df2:5440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A57AA, serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Validity
Not Before: May 5 03:33:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f9650b-8d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:de:99:6a:22:d4:f0:09:01:b5:f7:31:3f:
00:10:cc:95:1f:a3:a1:04:eb:2c:cf:d6:41:ae:e4:
76:93:fa:01:9a:d0:d9:86:91:8b:1e:cf:fd:0c:47:
2b:db:25:f3:49:8b:ce:27:27:47:e8:10:df:8e:c0:
31:4a:85:2f:d1:be:29:ea:cc:69:31:4c:99:4b:92:
55:ed:60:8f:e7:0f:76:77:de:8f:ac:38:39:8d:25:
10:8f:a5:97:d2:dd:cd:20:fd:77:75:4f:17:e9:65:
9f:7f:d2:db:e4:94:34:fc:11:61:2f:cc:63:dc:9e:
07:56:16:87:1f:ff:42:c5:38:4c:a7:66:83:a0:5f:
e5:0e:1e:1c:00:e1:9a:75:cb:18:3b:c0:35:87:4a:
ce:38:14:a6:ce:64:8b:f9:29:f5:ec:97:0e:7c:dc:
d6:35:b2:10:fa:7a:f9:6f:a5:dc:aa:19:ac:d7:77:
39:d6:5e:2f:e8:0a:47:f2:83:75:17:6b:7c:54:1d:
e1:60:55:74:2e:7d:bc:19:b2:7b:38:db:4e:40:9a:
88:45:fd:63:c7:da:49:a1:dc:a1:b0:28:b6:78:74:
3a:42:be:1b:cf:dd:8f:e5:bc:42:15:76:05:07:eb:
52:40:3d:a2:6e:58:4e:34:27:06:a8:1c:20:2f:c1:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:62:E9:72:34:64:02:22:C9:51:05:85:96:B1:B4:12:EB:51:CF
X509v3 Authority Key Identifier:
keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/DFC9BF30F14E11ED992E1316C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.58.0/23
IPv6:
2001:df2:5440::/48
Signature Algorithm: sha256WithRSAEncryption
95:84:b3:e7:5b:cf:0d:03:f6:de:b9:b3:79:f4:cb:e9:87:56:
83:24:ea:95:64:db:20:7a:e4:9b:31:4d:b1:41:ce:e9:73:e8:
62:75:60:83:b6:96:b8:27:15:82:9c:84:00:58:bc:99:56:a2:
1b:3e:be:fa:e3:b4:50:dd:d2:f3:2b:65:77:a8:52:13:fa:01:
a1:e7:46:c6:f4:c9:97:56:64:7a:21:75:7a:da:75:cb:78:9b:
bf:ea:44:db:d4:d2:2e:55:62:8e:e0:4d:83:bc:c0:1a:50:cc:
72:da:ce:b7:81:d7:4c:c7:9b:cb:7a:9a:c2:9b:4c:ed:93:63:
5b:12:15:81:67:32:ba:34:f8:ed:75:67:99:51:33:45:4c:cb:
26:fc:2d:54:5e:33:a7:93:25:70:67:82:8e:0c:97:ce:b0:c8:
45:cb:4a:70:ec:8d:90:85:4d:4a:98:11:fb:bd:b1:3a:26:a9:
bf:ff:fb:a3:06:45:cd:b9:b7:cd:01:49:3e:e1:fa:25:4e:40:
b1:1b:50:e4:80:51:92:6f:8e:0e:84:81:3b:72:a8:3f:93:86:
0f:86:fb:68:f6:2b:da:e9:10:9f:9f:5b:93:90:a6:34:fd:1f:
9c:89:b5:fa:2b:08:02:6b:dc:25:dc:01:72:82:12:02:9f:42:
d5:26:77:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:57 2026 by rpki-client