
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa
File: 5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa (raw, json)
Hash identifier: krsw6Fa1qgGJutUutzyS3Jt3HU2ieijRofRxs6ui7eo=
Subject key identifier: 72:6F:04:69:6E:1E:45:D1:94:A8:FC:6E:11:AD:C8:61:ED:12:09:DE
Certificate issuer: /CN=A91C13E1/serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3
Certificate serial: 015F
Authority key identifier: 07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:40:00 +0000
ROA not before: Sat 31 May 2025 06:06:08 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152718
IP address blocks: 103.51.128.0/23 maxlen: 24
2001:df3:bcc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl
rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C13E1, serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3
Validity
Not Before: May 31 06:06:08 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5932f-f84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:72:8b:f1:12:ad:41:1c:ff:02:f5:67:b6:
66:fb:8d:29:dd:7c:d1:74:20:02:d0:fc:af:63:d6:
f1:d6:ad:21:ad:35:1c:e4:69:02:fc:02:84:93:b5:
29:10:12:f3:c0:0b:cb:c6:f1:3e:46:fb:85:49:95:
7c:2d:fd:65:eb:3d:8f:22:52:8c:16:c5:39:88:c0:
76:6b:bd:6a:bc:c4:8a:04:b5:cf:a3:e4:1f:d1:2c:
91:0a:ed:55:02:a0:16:bb:c2:7e:6b:3f:c8:8a:ee:
51:b4:58:42:25:9f:45:b9:9b:24:89:65:2b:b4:aa:
e1:c1:81:79:1b:29:f4:72:ad:0b:a5:21:33:72:05:
f1:fa:92:18:db:ed:fb:aa:7f:d2:df:67:4d:f9:fa:
46:32:a5:2e:d4:c5:8f:eb:a3:8e:e6:06:38:43:32:
fa:78:9b:c7:a2:e9:6c:24:77:4b:bf:96:eb:80:75:
4b:1c:0a:11:78:66:fd:d4:16:72:df:2f:e3:61:58:
cf:3c:ba:38:51:eb:04:49:b7:42:d2:65:21:52:52:
67:c1:4c:d8:db:b0:ba:0e:2b:26:a8:93:d4:a5:52:
3f:0c:1f:b6:d9:f2:6e:27:65:0c:ad:9e:0d:1e:97:
da:d8:7a:72:2f:43:fc:ba:ea:3f:f6:00:79:8b:f3:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:04:69:6E:1E:45:D1:94:A8:FC:6E:11:AD:C8:61:ED:12:09:DE
X509v3 Authority Key Identifier:
keyid:07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.51.128.0/23
IPv6:
2001:df3:bcc0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:fe:1b:74:1a:35:d6:c9:eb:c0:32:11:e3:8d:e3:d9:e6:6b:
34:c5:18:32:72:5e:a1:81:93:99:70:8c:74:b8:47:ad:e3:37:
fe:54:dc:34:51:a6:9b:1a:2e:c6:75:79:07:8c:57:d2:2d:a7:
2f:8d:1f:6a:c7:1c:4d:8e:43:ba:56:ab:66:ff:b7:46:19:01:
56:5f:ce:9f:26:01:f9:e3:2b:c5:c4:fe:29:d5:3c:c6:32:4b:
77:99:1a:4e:c7:fe:0f:d5:e5:e1:ec:1d:1e:5e:26:6b:70:0d:
1d:89:18:11:c0:b1:f2:f2:a2:26:da:f3:05:10:fd:68:dd:f5:
53:e8:34:0a:ab:04:9c:0e:12:16:06:29:91:bc:b5:9e:d7:ed:
a3:bb:ca:5d:c2:e9:63:3b:7a:bd:82:c5:66:83:00:3e:a4:3e:
95:41:ab:5c:7b:27:2e:c2:65:5f:15:4a:f3:b1:a9:6d:2b:57:
13:c8:8c:79:d5:d3:3a:c8:c5:b3:fd:7e:47:cb:65:07:49:f1:
4c:89:2d:c7:9d:e0:59:36:23:9f:79:a4:f1:1b:b1:1f:fd:a8:
ce:de:f2:88:e3:70:53:df:db:e7:4f:8a:f5:48:69:de:fa:84:
bd:ee:0d:f5:62:2e:a6:79:45:ff:25:45:03:23:be:34:67:e1:
df:29:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:51:00 2026 by rpki-client