
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa
File: B5D3426854F111ED85A7AC66C4F9AE02.roa (raw, json)
Hash identifier: 0K49JUVggZQBAcAO+Y+/H/c+5b8Yh2fQoxbFcro2PYM=
Subject key identifier: 77:65:79:33:54:A4:E3:B9:53:1C:09:DF:02:A9:F3:94:EE:28:BA:DA
Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial: 0B94
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa
Signing time: Tue 28 Apr 2026 20:25:10 +0000
ROA not before: Tue 28 Apr 2026 20:25:10 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 140216
IP address blocks: 103.148.178.0/24 maxlen: 24
2001:df2:e180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Validity
Not Before: Apr 28 20:25:10 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f117a6-c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:37:f9:97:d4:a4:a9:f1:7e:b7:d3:15:b9:
64:41:bb:a8:40:92:a2:e5:75:f5:bc:3b:08:5c:03:
4c:f0:c2:91:53:d2:a4:c6:28:0b:b3:2c:cb:af:9a:
84:1a:f0:98:6f:0f:82:4b:65:e7:ea:0e:7f:3f:b7:
ab:b1:7b:23:7c:e4:26:18:4a:0e:df:1c:60:95:4f:
73:cd:c0:b4:c7:99:f4:02:21:a5:db:18:45:20:3c:
8b:3b:ca:6c:c8:26:5e:b7:e5:15:57:91:ee:7b:f4:
78:dc:1f:2d:ed:55:86:66:d4:ce:2b:cf:ea:42:32:
8a:e8:c8:7e:4b:ab:ae:71:ec:7f:77:34:d0:50:58:
22:50:22:05:d7:3f:05:df:bf:8f:6a:dc:0f:37:48:
6b:df:5b:1e:98:55:9c:06:24:a4:d5:64:f1:eb:90:
58:20:cd:d6:87:11:5d:19:8c:0a:6e:b9:37:d6:72:
10:3e:81:07:0d:ee:98:23:d2:e0:75:13:53:a7:73:
a2:9f:1e:9e:e3:31:0b:65:eb:9d:10:a0:a8:57:09:
d5:95:ff:67:42:4f:50:6b:ca:6d:24:43:b3:12:c7:
a2:5a:ea:13:d0:97:aa:2e:04:48:30:6a:0d:66:45:
6e:52:6d:1d:aa:55:8c:fb:f8:73:ac:15:0c:03:f1:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:79:33:54:A4:E3:B9:53:1C:09:DF:02:A9:F3:94:EE:28:BA:DA
X509v3 Authority Key Identifier:
keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.178.0/24
IPv6:
2001:df2:e180::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a5:eb:1b:29:58:e9:c6:89:8f:38:d9:8b:1e:d1:4c:17:11:
80:fa:39:b3:2b:d7:70:13:38:2f:61:24:2b:61:6e:7e:e4:1a:
97:28:62:b2:ea:83:1c:90:2e:ca:8e:45:5f:69:51:33:05:34:
09:93:dd:66:f4:12:2f:4a:37:ec:1c:f7:56:73:25:21:dc:89:
ff:d1:07:52:07:93:77:88:65:26:0a:26:f0:14:5f:81:91:6f:
91:0e:f5:8a:6f:92:ed:02:27:cf:df:f1:38:f7:67:79:af:c4:
8a:2b:83:38:29:43:39:b7:d4:b2:c3:c1:4b:a2:be:f0:42:9f:
fd:ec:49:c6:64:23:72:a7:34:5b:8d:55:f7:21:78:f4:9c:a0:
09:5c:29:a1:f0:50:20:5b:45:7b:c8:b4:f7:45:3e:e0:2c:19:
8e:50:63:71:2b:7f:e9:0b:cb:62:94:83:b1:a7:82:45:d1:0d:
a7:2b:20:0c:2a:d0:63:f3:26:97:d1:22:0f:64:74:9d:32:aa:
bd:06:66:9c:77:40:20:20:08:5e:e0:72:47:86:df:77:8b:3e:
c6:7e:c5:d4:e9:3b:61:04:4d:62:c1:a0:b4:dc:a6:32:98:f8:
a8:d5:a5:3c:5b:a0:d1:29:08:1c:9d:c0:fd:e9:00:42:e0:ad:
f5:d6:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:57 2026 by rpki-client