
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/1054539CC80411ECBA7BB174C4F9AE02.roa
File: 1054539CC80411ECBA7BB174C4F9AE02.roa (raw, json)
Hash identifier: Eg7teVZrjALhyUE+/tmu/BSGY7V3ujckbX31yCH+Acc=
Subject key identifier: 37:1E:EA:75:D5:6F:6C:C6:78:B2:17:E5:FA:94:25:D2:36:02:43:CA
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 0406
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/1054539CC80411ECBA7BB174C4F9AE02.roa
Signing time: Tue 05 May 2026 01:31:05 +0000
ROA not before: Tue 05 May 2026 01:31:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38001
IP address blocks: 45.114.117.0/24 maxlen: 24
103.53.197.0/24 maxlen: 24
103.53.198.0/24 maxlen: 24
103.53.199.0/24 maxlen: 24
2402:2f80:1::/48 maxlen: 48
2402:2f80:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: May 5 01:31:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f94859-19c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:26:e4:aa:10:65:fe:6a:da:fb:a5:cb:4e:
42:de:4d:f9:2e:a4:86:b3:0a:2d:af:32:a0:00:fe:
71:1b:1f:66:ee:45:28:b5:d0:79:ae:4a:34:f8:ff:
57:48:51:94:11:77:c6:1a:96:f8:d4:93:0e:a6:cb:
ea:67:6d:f3:95:cd:31:aa:a8:55:33:65:e5:ae:d1:
71:88:3c:5c:60:71:59:ef:f7:97:46:ee:6e:24:5b:
7c:f3:cb:b1:e2:a4:57:e3:9c:ba:82:17:e8:23:1a:
68:29:76:4f:ab:45:e4:ec:2c:58:40:4c:ce:a6:ac:
8c:3b:64:39:46:52:60:56:ea:e5:a0:fe:ab:b6:a2:
a3:a2:e6:65:5f:30:93:c1:04:00:07:f4:8c:99:3c:
11:3d:2d:0c:75:b7:31:74:0f:f8:c6:49:d1:0e:44:
a5:48:84:6f:d7:28:87:b0:44:17:0c:5a:4b:60:23:
a5:0b:d4:0e:6f:45:42:57:98:0b:98:23:eb:32:63:
69:dd:7f:41:ef:0d:1b:5e:41:1c:fd:d5:02:68:23:
25:03:80:24:15:66:35:bd:93:60:cb:ac:14:bb:68:
c7:74:19:c1:a9:13:c9:ef:be:28:23:7b:9b:55:39:
76:35:6f:17:2d:80:4b:18:d0:ec:f1:05:78:0c:94:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:EA:75:D5:6F:6C:C6:78:B2:17:E5:FA:94:25:D2:36:02:43:CA
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/1054539CC80411ECBA7BB174C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.114.117.0/24
103.53.197.0-103.53.199.255
IPv6:
2402:2f80:1::/48
2402:2f80:8::/48
Signature Algorithm: sha256WithRSAEncryption
31:ed:8f:0a:1c:74:68:8f:fb:58:4a:42:5f:09:b4:6e:3d:3a:
fe:d2:c9:c6:40:6e:45:63:b3:a0:26:fa:ab:d9:3a:83:2c:bc:
d1:e1:a7:a0:f1:15:e0:bd:2e:8d:be:a3:0c:c9:96:5f:58:9a:
8c:98:29:01:8f:34:cb:47:56:32:0b:4c:f4:b8:f2:6f:8e:9b:
0e:d2:3a:2b:17:17:fd:df:5c:9b:a3:ac:d8:c2:c5:58:04:27:
27:3b:c1:e8:59:b0:d1:7a:bb:1b:82:ef:1c:02:2e:ce:5f:23:
54:21:d1:e5:29:3d:2d:3b:bc:d7:2a:f8:fb:c2:8c:42:3d:82:
31:45:30:f2:8d:c4:5f:db:8e:eb:24:44:e1:28:6b:22:20:32:
dc:19:bc:51:c4:ea:3e:96:68:9b:7d:89:eb:7e:8a:30:0e:b8:
e9:3f:8a:2b:9a:22:15:56:97:e9:81:1e:59:d0:ea:34:2a:94:
e8:7a:74:20:29:c9:6a:f0:bc:79:f0:ed:2a:b8:45:f1:fc:91:
35:17:b4:ef:e6:b5:5e:29:42:3a:9d:0e:ac:4a:bb:03:18:31:
a5:f9:28:80:43:4a:f2:f0:c5:d6:55:ff:77:36:21:76:81:99:
99:fc:ec:81:02:1c:14:bb:a6:03:4f:04:cb:bb:a7:c9:db:c7:
00:32:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:00 2026 by rpki-client