
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/C56E767CA89811F08959A364C4F9AE02.roa
File: C56E767CA89811F08959A364C4F9AE02.roa (raw, json)
Hash identifier: Akun0VFo7F1fPWkAL3LgJ5v2gNUwXl+vp0cTFffFZKg=
Subject key identifier: D7:2A:1B:53:DD:54:46:12:DE:B8:24:D3:33:70:38:6B:79:EF:9D:FC
Certificate issuer: /CN=A91AA5F1/serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Certificate serial: 4A
Authority key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/C56E767CA89811F08959A364C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:48:33 +0000
ROA not before: Tue 14 Oct 2025 00:57:35 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139222
IP address blocks: 103.139.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl
rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Validity
Not Before: Oct 14 00:57:35 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a341-ad50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:7e:8c:73:6a:a3:62:96:4c:cd:3a:70:76:
a4:d0:f2:23:56:9a:c5:e8:f5:e7:0a:d7:5e:07:5f:
db:79:c7:11:26:ed:ae:27:c4:f0:d3:28:ad:68:ff:
ee:c2:cd:6b:24:04:84:28:4e:94:37:c3:2a:3a:e0:
3b:fa:d5:b8:3c:d3:f2:86:17:a2:7b:7f:21:08:ab:
cd:24:ff:45:54:68:94:a6:be:e6:5a:fd:c5:63:97:
78:e9:e4:07:5d:55:b0:6e:18:4f:cf:90:1c:f5:13:
03:8b:28:bb:f7:83:e0:9e:95:90:4a:11:76:40:b7:
2b:b9:3d:8d:f5:0d:97:79:8b:c3:59:b3:c4:fe:3c:
24:20:41:9c:00:c9:18:08:32:1b:2b:a8:16:aa:01:
2a:96:25:b2:c0:c7:e1:8c:93:67:54:64:4a:79:60:
de:7a:5b:e3:08:82:9f:96:46:34:1c:46:c2:67:06:
2d:65:cd:53:16:e7:2a:cb:eb:36:be:62:25:8f:46:
f2:01:cc:a5:54:5b:54:ee:82:68:28:15:f2:40:66:
9f:48:df:99:07:69:17:ce:04:1f:3f:29:40:a6:63:
6a:50:66:b7:04:12:fc:81:02:30:7d:16:63:68:51:
21:59:3a:2a:db:e0:18:39:16:76:90:1b:e8:49:7c:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2A:1B:53:DD:54:46:12:DE:B8:24:D3:33:70:38:6B:79:EF:9D:FC
X509v3 Authority Key Identifier:
keyid:CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/C56E767CA89811F08959A364C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.252.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8d:62:29:ea:bd:c1:c4:c7:d5:4c:60:9d:32:b7:63:e7:5d:
85:99:90:73:6a:e1:f9:bf:75:a1:8d:22:ee:e8:21:d8:92:87:
99:39:3c:79:5a:a7:83:3e:29:f4:84:cd:df:e1:e5:8a:ec:f0:
0a:0b:f7:33:f6:4d:a5:ae:df:0c:38:26:69:bb:4e:c2:8e:0b:
73:b0:39:33:b4:c5:62:c6:cc:91:05:77:0c:2f:8b:49:c2:2e:
fc:4f:5b:91:be:e5:ba:8c:d1:31:25:5b:09:ab:c5:0d:67:31:
78:ea:d7:e9:a5:71:8c:f3:0c:49:85:55:37:a0:94:de:39:81:
08:7b:68:d7:66:26:fd:1b:e7:5f:81:b1:3a:4e:36:ae:1d:7c:
35:fe:ea:84:34:c7:a6:4e:7b:9f:9c:ed:b9:9f:73:cc:0e:d9:
a1:79:69:90:15:a7:bd:00:a9:05:0d:cb:6e:d8:d1:86:d6:cb:
11:3e:b1:54:77:13:68:8c:3f:bb:56:73:b2:2b:d7:f3:df:eb:
61:95:50:d2:77:75:b8:fc:fa:a8:d4:53:95:08:65:a4:28:67:
58:55:76:ff:77:3a:0a:80:69:e2:d3:7a:96:bc:f3:44:07:1a:
e6:9f:d3:e2:9a:d3:f8:03:68:0b:a3:91:0c:8d:8c:65:77:43:
dc:fe:da:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:03 2026 by rpki-client