
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/80F32E7C2C5511EF83ECC535C4F9AE02.roa
File: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (raw, json)
Hash identifier: jwNqpqTZXno1DyXY2sIyAh2YiWEDOdSFaYY50G2wOTA=
Subject key identifier: 19:BA:F0:D4:E9:0B:FD:0A:DD:3F:35:8E:D6:45:8D:0F:28:49:F9:45
Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial: 014A
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/80F32E7C2C5511EF83ECC535C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:11:49 +0000
ROA not before: Mon 03 Nov 2025 05:20:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136980
IP address blocks: 103.101.42.0/24 maxlen: 24
2001:df2:8f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Validity
Not Before: Nov 3 05:20:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59aa5-4b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:02:4d:69:58:56:54:7e:a5:0f:b7:d7:e4:
d6:50:53:44:b4:08:d7:fe:eb:a8:60:72:5e:47:18:
f0:99:e9:94:92:87:34:b2:5f:0b:70:94:02:6a:ec:
73:df:35:90:ae:16:79:96:76:57:9d:05:df:f9:23:
6b:45:6d:b4:43:d5:73:fe:f0:38:9a:8b:69:bb:f1:
77:c3:cf:a9:e3:37:3d:93:dd:c7:cd:03:ca:80:8a:
b2:18:dc:0c:8a:ac:8b:a0:15:15:ac:5f:7c:23:0e:
b9:39:79:7d:b4:94:c2:ab:19:05:80:5a:e0:6f:a8:
81:95:8c:72:fc:5c:c0:ab:25:25:c9:37:20:e2:8a:
14:a4:6f:e2:20:14:4b:d1:2d:87:79:f3:87:05:d4:
74:60:9b:da:6d:04:6d:f9:fd:1e:bd:e4:c5:ce:7d:
3d:84:24:11:3b:c9:6d:b2:37:6f:e3:b2:ac:a9:2f:
9f:e2:73:34:22:dd:cd:fa:65:74:3e:aa:d1:9e:e6:
c6:58:4a:1f:df:d8:52:41:80:2b:80:41:45:80:ea:
7f:db:ce:df:38:fe:40:12:d5:57:d6:18:ca:c3:3e:
1c:b5:6e:15:b5:3f:99:61:b9:16:80:38:91:9e:0e:
19:ea:ee:86:e7:9b:8f:24:23:8c:18:94:11:0f:cb:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BA:F0:D4:E9:0B:FD:0A:DD:3F:35:8E:D6:45:8D:0F:28:49:F9:45
X509v3 Authority Key Identifier:
keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/80F32E7C2C5511EF83ECC535C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.42.0/24
IPv6:
2001:df2:8f00::/48
Signature Algorithm: sha256WithRSAEncryption
4a:ac:92:0a:37:9e:aa:9c:e6:d4:f4:57:58:f1:8a:9e:a1:cd:
81:49:4d:f7:08:a2:2e:64:e4:fe:ca:2a:e4:75:1f:d0:0d:7f:
a7:77:b1:62:55:3b:32:d7:61:5f:72:05:25:2d:46:a6:b1:50:
74:52:50:08:df:b5:5c:1f:8a:d2:26:09:ef:64:4b:06:82:a7:
63:09:72:5c:67:5a:bc:75:c8:b1:e7:1d:22:de:c8:9d:cd:ec:
15:f1:a8:83:f4:0d:f3:83:dd:63:71:e3:7e:ca:38:9f:48:c8:
b9:f6:e7:58:69:35:15:4b:42:59:27:01:03:2a:c0:ab:27:2d:
a5:a6:c6:75:ca:5b:44:45:67:b2:40:a6:ac:e2:5c:a0:da:bd:
85:c3:c8:22:3d:03:e7:67:f7:48:c6:05:59:67:9d:d7:f2:71:
ff:a1:d8:2c:77:73:8e:df:d1:34:d7:56:e3:ba:44:6b:fb:a4:
df:39:5e:8d:02:44:d0:50:55:17:e3:8c:4c:bc:c7:ae:9e:e0:
eb:34:ab:e8:37:cc:02:9e:f0:da:2c:d7:7e:24:c3:f4:2f:a0:
5b:c1:f7:bf:2c:08:c1:de:73:a7:e2:b9:76:bd:68:be:0a:f9:
30:b0:7d:00:5a:73:33:74:36:97:a0:a9:37:92:09:94:c3:a5:
26:4d:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:05 2026 by rpki-client