
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa
File: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (raw, json)
Hash identifier: LtWESLVsvI4cNUF6OZCvjLFJt5pmDgMGBGDr6mSpX1o=
Subject key identifier: 74:30:D8:AC:F8:5A:A7:25:A6:55:45:8F:EC:99:7A:2C:16:BB:D7:CB
Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Certificate serial: 0141
Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa
Signing time: Mon 13 Jul 2026 06:32:34 +0000
ROA not before: Mon 13 Jul 2026 06:32:34 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 7155
IP address blocks: 103.217.100.0/24 maxlen: 24
103.217.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Validity
Not Before: Jul 13 06:32:34 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a548682-437b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:f2:5f:16:43:34:9d:2d:a7:fd:d6:99:ea:
c7:04:0e:37:83:dd:7c:f6:8f:3c:34:82:36:a0:2e:
b5:22:64:24:4e:f2:08:a7:96:87:f0:04:78:3f:ef:
18:c4:0f:9b:5f:92:8e:f9:9f:92:41:a5:23:27:4a:
c3:c8:ed:68:5a:22:7c:0a:a4:e0:ed:9a:9e:c9:2a:
09:84:73:9b:39:45:de:ad:4b:1d:1c:71:33:24:b1:
83:d8:bf:93:a6:91:9a:f2:ea:96:c6:a2:8d:66:3c:
cf:61:03:97:ac:19:4e:cf:f3:17:ac:c9:49:0f:a0:
b5:11:f2:ed:54:54:4c:fc:7e:be:88:67:01:e4:3f:
23:70:7f:44:c6:9f:1a:54:06:65:14:00:2a:e7:1d:
56:6a:47:12:9f:f4:0b:d3:5a:19:1e:01:82:b3:f2:
a4:34:79:47:55:89:27:ae:de:a7:41:d4:99:23:d0:
cf:a6:c9:65:2f:52:bf:ea:94:52:0d:74:69:e5:8c:
2c:c9:05:0b:f9:2e:ac:22:64:ea:28:85:2f:67:03:
92:c1:78:c0:0e:cf:56:16:a8:a3:1a:1e:79:ad:c7:
e1:4a:3d:c2:f6:50:82:8b:a1:90:ec:40:43:ce:e3:
1c:7f:d4:82:31:ea:67:a9:36:77:7a:81:63:fe:cf:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:30:D8:AC:F8:5A:A7:25:A6:55:45:8F:EC:99:7A:2C:16:BB:D7:CB
X509v3 Authority Key Identifier:
keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.217.100.0/24
103.217.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:89:c2:93:ee:33:dd:44:75:5e:5b:8b:71:db:77:e0:9c:ab:
b2:30:91:49:7f:86:86:25:50:07:9d:cb:9f:58:8a:c9:7b:79:
b2:25:0a:d0:ef:7a:a9:68:79:24:c2:74:15:fe:eb:e9:5d:63:
b6:0e:e2:e2:e2:9d:20:62:a4:0e:8b:34:eb:99:d6:25:68:7f:
71:81:d3:9f:4e:73:3a:80:37:f6:70:75:38:d9:ed:25:a8:35:
5b:e8:f1:1e:5d:39:79:15:89:8f:be:b7:c1:ad:f4:c6:d0:86:
e9:eb:ac:5d:10:bb:9c:0f:0a:85:55:6f:31:50:73:56:a6:01:
b6:89:05:0d:e1:1a:d2:1e:d7:ec:61:1d:08:f5:1b:9b:09:b8:
dd:22:71:9f:57:e8:b3:39:8c:87:42:e6:aa:1d:bf:fc:49:cf:
65:16:57:2c:b4:24:22:fd:8f:d0:10:34:7b:ce:90:38:a8:49:
6b:4f:dd:7a:8c:56:a1:cd:69:d8:83:de:ac:df:a0:eb:2b:a0:
35:34:8d:5f:25:67:eb:2f:37:96:db:b4:f3:91:32:9b:c8:71:
81:d0:d8:4c:bb:da:ac:06:26:01:47:42:8f:24:22:4b:70:21:
80:cf:59:ac:be:b1:ea:a4:a3:96:00:3c:ca:a6:77:29:d0:7b:
07:bd:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:26 2026 by rpki-client