
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa
File: 517F49AA822611EB8990276EC4F9AE02.roa (raw, json)
Hash identifier: AiOBrVM7jcIowiVFU6dduzLILwALxoJy2D7zLUEvCBQ=
Subject key identifier: 37:D5:22:FA:54:DB:72:1A:07:F9:B5:CE:84:44:4D:24:FC:4C:D1:39
Certificate issuer: /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Certificate serial: 0708
Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa
Signing time: Thu 12 Mar 2026 22:29:21 +0000
ROA not before: Thu 12 Mar 2026 22:29:21 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137967
IP address blocks: 103.163.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A799E, serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Validity
Not Before: Mar 12 22:29:21 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b33e41-e7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:f9:b2:97:36:55:0c:d7:09:b6:53:19:55:
ca:0c:78:a1:df:c7:6f:bb:41:be:78:fd:01:2b:96:
0c:69:25:5d:c2:f3:50:d9:24:dc:40:fd:c2:3c:4c:
ba:97:f0:a9:0a:b6:a3:6d:b2:75:92:c0:2d:27:6b:
26:50:4a:8a:91:c3:48:83:a5:52:d6:ba:9a:1c:8a:
96:a9:dd:a0:6a:ab:19:c9:da:37:04:54:11:04:5b:
db:ea:cc:fa:21:60:75:44:d7:57:8e:21:0f:e6:fd:
c3:8c:87:92:22:32:63:51:7e:ba:8a:3c:a0:e4:c1:
3d:84:d4:e7:04:53:39:20:91:fc:2f:74:10:02:83:
e6:0f:ad:44:fd:6b:5e:de:f1:73:49:a7:3f:6e:04:
11:f0:e3:df:ed:58:df:88:a7:25:8e:bb:a9:8e:26:
0c:0e:3d:35:81:4f:f8:3f:f6:81:45:16:fe:83:1d:
1d:76:3f:0f:c2:fb:2a:8f:47:1a:26:57:87:57:86:
5a:49:ff:1a:6c:14:ae:bb:e9:bf:23:86:98:89:a2:
c8:45:fb:8a:f2:87:3d:6b:3e:69:88:44:06:64:be:
94:0c:36:7b:d7:7e:28:42:b8:dd:39:2f:cb:a7:c7:
14:5f:6a:5a:33:4a:58:49:15:cb:a1:6d:a6:7a:09:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D5:22:FA:54:DB:72:1A:07:F9:B5:CE:84:44:4D:24:FC:4C:D1:39
X509v3 Authority Key Identifier:
keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/517F49AA822611EB8990276EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.171.0/24
Signature Algorithm: sha256WithRSAEncryption
19:86:da:0f:99:ad:43:b7:c6:4b:a4:3e:98:32:7f:58:81:a0:
0a:5c:cb:9b:01:8a:39:c2:71:06:13:12:20:a1:3d:01:4b:c6:
41:33:c9:2f:bb:1b:45:eb:61:99:27:a8:a0:0b:f9:7a:da:75:
c1:c8:d5:5a:15:1f:b4:1b:81:59:b7:e2:c9:0b:45:0e:79:a8:
13:11:01:4c:aa:9a:5c:de:be:ae:8e:73:db:74:4a:47:c5:df:
47:d8:6d:2a:a1:33:d8:7f:ee:b7:a5:68:a4:e1:39:36:b6:62:
52:ec:02:e9:a2:06:cd:28:1d:5f:7b:f4:fd:44:b1:f4:4e:3a:
c9:c3:8c:3b:79:3e:54:55:20:b1:5f:aa:fc:f2:a1:36:de:1d:
6d:23:9a:bf:6d:e4:f3:7b:6b:dd:2f:17:6f:0b:8d:8c:84:1e:
10:20:e0:33:62:fd:c8:f6:8a:84:71:31:6f:30:f0:5d:a2:98:
2c:ba:e7:97:9a:e4:70:e1:a1:43:b2:69:51:25:1c:74:2e:04:
e9:4e:34:d9:e1:6a:fc:01:3a:bd:56:2d:df:79:22:20:a1:97:
1a:e5:4f:6a:0a:4d:33:af:2c:dc:a7:93:17:88:49:25:99:36:
64:f6:b3:4f:33:2c:f4:64:02:e7:92:36:f7:38:62:41:72:c3:
9b:65:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:19 2026 by rpki-client