
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa
File: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (raw, json)
Hash identifier: 4agi+QhWWtUPKmH1/dW+seJgI+qk+4RdSuU9ar5oRKQ=
Subject key identifier: DF:14:CB:37:80:BB:08:C6:35:01:65:0E:68:8F:6A:B4:52:21:76:FC
Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial: 10EC
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:41:53 +0000
ROA not before: Thu 04 Sep 2025 17:57:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58433
IP address blocks: 103.5.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4332 (0x10ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Validity
Not Before: Sep 4 17:57:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a58591-6da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:b4:6e:91:bd:5b:7a:14:df:a9:41:3d:70:
91:09:6b:b0:14:56:55:92:cd:93:0e:d7:78:0e:09:
16:06:90:73:4e:c7:dd:a2:5e:6e:06:c1:aa:fe:8f:
51:17:e8:b8:5a:be:66:89:80:be:1d:c5:f5:37:01:
96:7d:04:b5:14:b3:17:5d:76:1a:16:7f:fd:fb:04:
f9:6e:0f:c8:37:eb:d3:d3:07:5d:55:6a:05:9a:8c:
70:87:5c:3c:2c:73:77:a7:2f:75:6f:9b:9d:fb:b8:
6e:fd:2c:cb:3b:51:6b:40:62:da:9d:18:42:99:0f:
54:b5:66:31:38:fd:6d:e1:94:7a:9b:35:63:24:51:
f2:f0:f9:4c:63:09:dc:9a:71:fe:83:55:4e:b2:93:
63:71:96:7f:bb:8f:e6:f6:07:f8:6d:04:25:c1:4a:
15:be:46:96:e0:2b:60:52:3e:1f:f2:97:c1:ec:20:
96:c1:8a:9c:c6:1e:6f:d6:42:af:ac:02:d6:f4:43:
aa:0d:32:1f:e4:7c:25:ca:da:a8:a1:5d:9c:b2:38:
41:da:36:15:32:9a:71:bf:25:ba:81:05:d4:46:d7:
ea:a8:c8:79:b6:03:9a:79:4c:43:f3:91:aa:cd:28:
7d:ae:3e:f8:f8:f0:65:c7:54:3c:62:27:93:96:36:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:CB:37:80:BB:08:C6:35:01:65:0E:68:8F:6A:B4:52:21:76:FC
X509v3 Authority Key Identifier:
keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.228.0/23
Signature Algorithm: sha256WithRSAEncryption
77:0f:2a:f2:13:87:f8:ab:d5:ef:a9:60:6a:f2:fa:d2:72:17:
ec:0d:04:09:db:a8:45:52:f8:9c:2d:14:11:7d:85:b6:ed:5e:
1b:03:17:ec:d6:04:80:ba:82:ba:dd:a0:d0:c2:06:15:ef:83:
9c:bb:f4:3a:fb:a5:47:a4:6c:6b:87:3a:9f:e5:e9:2f:bb:14:
dd:9f:e3:db:04:14:21:bf:48:dc:40:f6:2f:47:7f:13:97:3d:
4d:38:4c:79:ef:4d:b6:9f:69:d4:03:43:d4:b9:95:8e:1b:8b:
48:ef:2d:af:54:a7:a8:bd:00:71:b1:82:a6:17:9d:ff:6e:a3:
09:5b:d5:12:d1:ec:c1:0c:5a:0f:70:39:ce:2e:78:85:63:60:
dd:0e:b9:6c:1c:cb:4a:a1:b8:63:38:59:81:22:4b:23:45:5d:
4f:42:e2:64:8a:f8:4b:e9:5a:e5:8d:a5:5a:87:fb:42:5f:88:
8b:a3:8c:5a:6a:99:b7:a3:87:c6:c7:92:5a:82:f8:4f:02:f2:
ca:9c:c8:9d:4b:65:25:e3:88:5c:1e:8d:5e:71:76:44:4d:bd:
84:26:28:d5:e6:3b:57:0f:69:42:0a:64:72:14:c8:0e:e8:bf:
fa:ca:43:d7:06:c3:1d:1e:1d:f1:6c:31:77:e5:47:3d:e0:6e:
aa:86:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:06 2026 by rpki-client