
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/05E355AEA03811EDBC101B49C4F9AE02.roa
File: 05E355AEA03811EDBC101B49C4F9AE02.roa (raw, json)
Hash identifier: dGQ2Shga7JyItz/gX367HOAIx3zB2wdadpgo2oiYCAE=
Subject key identifier: 4C:33:18:78:C0:0E:E4:78:FD:BC:EE:E4:BF:B0:C1:B9:C2:48:25:5F
Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial: 084D
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/05E355AEA03811EDBC101B49C4F9AE02.roa
Signing time: Thu 10 Sep 2026 21:42:18 +0000
ROA not before: Thu 10 Sep 2026 21:42:17 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7594
IP address blocks: 103.138.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Validity
Not Before: Sep 10 21:42:17 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6aa32439-6792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:3b:9e:f9:1a:5c:4c:0e:fc:c5:83:97:1b:
d1:37:78:b8:2a:20:83:e7:df:d5:b4:4e:7b:28:e6:
69:cb:04:1f:aa:55:31:cc:34:eb:56:43:53:7a:c4:
1d:25:57:41:7c:2a:ce:1b:c2:48:16:01:53:0e:c5:
a1:96:df:94:26:cf:52:76:67:9a:7e:a1:1b:cf:49:
d4:e2:cb:03:ca:48:a9:34:49:ba:d6:6f:89:e5:e2:
21:a7:fe:7d:4f:67:2c:fc:7e:ce:e7:75:75:7e:b8:
4d:4b:19:4d:92:69:96:c8:33:df:2f:30:af:e8:12:
e6:c5:58:02:5a:f1:71:3c:bf:49:af:db:7b:82:0c:
93:09:be:cf:34:b7:96:d0:1b:6f:f5:08:46:b4:87:
94:ef:73:95:4d:ed:47:f8:7c:a9:86:d2:66:3b:d3:
30:cd:65:fa:dd:53:e1:2d:7e:cb:81:01:79:07:b2:
2b:57:a0:83:a6:ff:5c:13:5f:8b:b1:07:6e:a0:59:
6d:c8:66:59:70:ab:f6:01:7b:2e:9b:6b:0f:9a:84:
86:d6:ec:39:a0:80:70:31:12:92:d5:25:da:61:91:
ff:3a:6b:ce:fe:70:3a:44:e4:63:c5:96:09:c2:69:
e2:d8:60:07:60:3f:03:8f:31:be:ca:df:f7:03:f6:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:18:78:C0:0E:E4:78:FD:BC:EE:E4:BF:B0:C1:B9:C2:48:25:5F
X509v3 Authority Key Identifier:
keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/05E355AEA03811EDBC101B49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.35.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7a:1a:6d:99:ce:16:67:b6:5b:56:11:c9:36:16:2b:12:c2:
11:06:3f:c6:11:6b:db:39:f6:7d:37:0c:f3:6d:83:e8:2c:1a:
4f:89:4c:4f:51:54:7e:06:10:e4:0e:31:90:84:a5:8b:ce:86:
46:41:e5:a5:a8:80:b3:83:d7:8c:0d:86:f4:34:9a:a8:0f:2b:
ac:0f:11:32:b5:b3:1d:8c:b9:bb:74:6d:a3:bd:d2:a9:6c:63:
dc:0a:da:43:9b:d7:5f:a6:aa:05:49:81:1d:12:cf:57:8a:ab:
0c:2b:fc:c3:19:f6:0f:34:2f:68:35:55:54:de:42:9b:2c:f2:
35:d0:74:ec:27:09:01:d3:7c:ab:fc:ab:a1:1c:2d:27:b6:93:
c7:ae:f0:e4:41:d4:f1:cb:3c:84:a3:fa:01:88:45:9f:76:87:
85:d2:09:de:5b:86:ba:ce:31:fd:ed:0f:4d:b4:f5:d0:05:ae:
66:21:61:56:0a:d1:48:9d:b6:49:4f:9e:a1:00:58:c3:af:27:
88:15:91:51:ba:f7:09:63:d7:0a:16:c3:ce:fd:8b:9d:88:c3:
d8:53:7b:97:5a:97:a6:65:54:6b:38:4a:f3:76:a3:bd:59:8e:
a8:29:2f:09:12:bd:72:3c:a1:ce:ff:24:e7:44:30:2a:5d:18:
29:f5:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:00:23 2026 by rpki-client