
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa
File: 40565FA23C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier: AcOK+or8IBRyx2MYpgbbtYCs/ZUAEOaOnVDcLAu/Hbk=
Subject key identifier: B6:FC:3D:37:9B:84:F8:9E:A9:84:9A:55:7E:03:23:91:55:63:19:EE
Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial: 056D
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa
Signing time: Mon 04 May 2026 23:29:46 +0000
ROA not before: Mon 04 May 2026 23:29:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9744
IP address blocks: 103.212.96.0/22 maxlen: 24
139.5.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Validity
Not Before: May 4 23:29:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f92bea-5d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:62:d4:b2:a6:2a:a5:2e:04:84:93:7b:83:
63:a9:41:b6:20:43:6d:a5:60:94:c0:d6:33:fd:37:
7a:74:c3:14:ee:c8:c5:eb:b7:32:33:ce:67:98:0c:
63:ab:d2:59:f5:07:87:e3:6e:9e:5e:c9:63:fe:bf:
e7:66:02:21:31:17:26:ee:8a:9f:08:f6:ea:1c:8c:
7d:3c:7d:b7:c3:96:10:b4:3a:65:04:4b:62:a8:d7:
ce:c0:a1:f4:c1:f3:1f:02:b5:33:ae:52:30:8b:bb:
34:9e:21:ad:eb:c6:f5:5e:4b:f5:bf:f7:5e:77:7d:
2c:e8:86:f9:d2:71:d5:54:d1:99:dc:74:2c:84:9a:
b6:13:a0:6d:b5:64:46:72:b3:c4:71:d2:67:40:a5:
80:96:e5:dd:42:9c:f9:8f:78:16:c1:34:7f:e8:f0:
7c:a0:a2:3a:28:eb:bb:98:01:b0:90:b2:19:99:79:
69:f1:48:3b:f3:7a:b5:15:00:6f:5a:1d:20:13:80:
d9:eb:e3:c0:c1:73:87:a6:59:73:1a:27:57:df:2c:
68:59:5f:e6:c6:db:47:da:5f:04:57:b3:42:4c:e3:
70:36:13:1f:0e:2d:74:65:04:db:98:cf:6b:21:c0:
35:e4:1e:32:4c:fc:27:28:6e:9d:1f:7f:ce:78:b0:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FC:3D:37:9B:84:F8:9E:A9:84:9A:55:7E:03:23:91:55:63:19:EE
X509v3 Authority Key Identifier:
keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.212.96.0/22
139.5.200.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c7:ee:90:0a:73:3a:65:7f:f1:2d:dc:a6:7b:f4:54:d0:ea:
ab:e0:e6:d5:ab:d8:44:91:cb:8b:2d:c5:d8:72:49:e6:ed:2f:
fa:1f:ba:f4:1e:92:e3:a9:7c:6b:ab:7a:36:b9:b2:ff:7c:da:
40:8d:41:b3:e9:f2:8c:21:78:18:32:2a:04:49:01:49:86:e5:
21:69:86:e3:b2:8d:20:dc:f4:96:ec:2e:c9:fd:14:cc:ab:8f:
21:dd:79:b6:d2:97:9d:a8:88:3b:d0:06:ae:43:b8:a7:90:0c:
ca:84:d2:13:bd:70:e9:d3:28:08:a7:50:b0:d5:1a:08:33:b3:
89:3a:4c:41:76:a9:47:7b:6e:5c:9c:91:dd:70:e5:c4:b0:1b:
e8:e8:7b:f3:6a:2b:57:42:1c:a9:60:f0:ea:2e:6c:2f:5c:12:
9e:d1:14:7f:6a:59:17:33:43:36:fc:c8:fd:3c:24:51:5b:2a:
0f:5c:fe:25:fa:9a:13:22:3e:c1:a2:39:d3:80:e3:18:d2:6e:
9a:65:90:ff:ed:20:80:0b:4d:b1:37:5d:c1:68:96:ce:03:09:
48:fd:7e:1b:fa:ab:cc:cc:15:47:db:5a:03:f3:71:ae:f7:22:
73:91:d3:5b:f5:24:a9:42:a5:47:1a:06:a1:30:b7:8f:3b:a2:
02:05:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:10 2026 by rpki-client