
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa
File: 0FA97166C80411ECBA7BB174C4F9AE02.roa (raw, json)
Hash identifier: RUoDnJNIMj2UN7pcziT628/S7dswqJ9DeJQXSeGTo00=
Subject key identifier: DD:D6:31:61:80:BA:5A:D7:E4:C1:8A:E5:4D:C9:24:6F:B8:33:4A:92
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 0405
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa
Signing time: Tue 05 May 2026 01:31:03 +0000
ROA not before: Tue 05 May 2026 01:31:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36351
IP address blocks: 103.53.196.0/24 maxlen: 24
2402:2f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: May 5 01:31:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f94856-cbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:ea:a1:d4:3c:aa:57:c0:08:30:e9:25:5c:
b1:8b:d5:cf:11:24:5b:87:62:ee:bc:70:af:b7:c1:
22:69:32:91:d7:06:a5:ee:2d:92:9c:ab:1f:50:d9:
b0:ea:c1:b0:a2:72:95:67:c9:73:23:a4:99:1f:44:
a8:83:cc:12:9b:5a:18:6f:6b:7b:f1:2d:66:76:84:
0b:38:3c:7a:c8:7f:dd:3a:d3:58:a5:ae:e6:b6:ec:
fb:42:1d:25:20:a3:4e:8b:5a:db:47:cc:07:06:c7:
20:b6:ff:71:66:24:c6:fa:c6:d0:ff:f6:f9:7a:6c:
72:8f:a1:70:fd:3d:ba:ab:d4:c6:97:98:8f:e6:6f:
22:52:a4:0f:a7:24:84:5b:c4:46:b0:b4:77:3b:65:
08:af:90:c8:8a:1e:6f:37:7d:91:b4:1d:9c:a4:52:
03:d2:fa:45:e4:33:59:f1:52:54:a2:80:99:79:0a:
2d:f9:34:9c:5c:86:63:67:7a:01:7d:c7:a8:84:cc:
e1:66:4a:02:52:93:70:7e:e6:8c:d7:b0:16:36:f9:
06:c3:de:4b:6f:85:dc:08:68:bb:0d:4d:51:89:a2:
3a:2a:67:67:29:6d:b9:ef:d1:3a:83:69:ed:d3:ce:
44:a1:19:ff:74:e1:ee:84:fa:16:4c:d0:3c:d0:42:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D6:31:61:80:BA:5A:D7:E4:C1:8A:E5:4D:C9:24:6F:B8:33:4A:92
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.53.196.0/24
IPv6:
2402:2f80::/48
Signature Algorithm: sha256WithRSAEncryption
5f:da:60:d8:58:f2:47:52:d2:b2:54:94:e5:1f:1f:be:07:f6:
a8:1a:16:f4:95:8c:27:ca:3f:98:65:90:59:62:f9:74:5f:11:
8e:cb:c1:92:e4:9b:b1:09:e5:28:d3:57:ba:ae:50:8d:03:39:
70:64:b9:1c:4b:74:ff:c3:25:6b:bb:f0:16:ba:58:49:5a:e5:
ea:91:10:0c:c9:54:fb:6b:80:6e:b3:97:6e:a6:06:f2:05:76:
ff:19:17:d1:6b:b4:37:02:91:b5:d5:30:c8:7f:7b:0d:91:50:
79:05:2c:3e:12:18:4f:10:a7:f7:ed:3a:64:f3:0a:98:d7:08:
a2:be:9e:90:b1:d0:38:fb:73:21:f3:3b:d0:be:86:92:e1:e9:
c8:e2:7d:19:dd:53:0d:5c:b8:b4:39:fa:d3:29:4f:ea:57:6a:
6a:70:25:93:c2:0b:98:21:bf:7f:9d:29:b2:58:97:ec:41:55:
e1:cb:fa:b6:1a:95:e9:88:a5:e5:e4:7c:f0:2a:de:68:2a:b3:
53:fd:f0:56:f1:b2:83:7b:9b:9f:b5:1d:1e:99:b3:f7:ee:de:
d4:6b:5a:66:e9:10:9a:6f:b3:d7:ff:a3:ed:2e:92:bf:34:f9:
28:53:61:55:35:5e:3c:02:46:51:06:2c:2c:01:42:d6:cc:5f:
7b:56:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:55:54 2026 by rpki-client