
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa
File: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (raw, json)
Hash identifier: VgbuCbt2B5V4RwKAtDeC1bN0tj3w9fLDaipQp5XINf8=
Subject key identifier: 59:E3:52:8A:1F:9F:46:D1:8E:D0:AA:6E:12:7D:BC:F4:1D:42:4C:43
Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Certificate serial: 0402
Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:02:52 +0000
ROA not before: Tue 05 Aug 2025 01:38:19 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136553
IP address blocks: 103.92.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026 (0x402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Validity
Not Before: Aug 5 01:38:19 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a40ecc-7feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:eb:2a:34:d2:60:ad:83:1e:da:4b:d8:42:
eb:f2:d5:15:97:68:55:74:e9:3a:e8:28:64:dd:6a:
39:e9:74:ed:11:9d:13:63:6e:29:e6:2d:0d:f8:ab:
03:b6:ac:3c:c7:79:08:a4:08:2d:b0:c3:1b:f3:0d:
c5:20:9c:71:8e:2b:f6:d6:b1:5c:01:e8:33:ae:15:
82:ef:51:be:ac:f2:61:ff:cc:b3:62:ef:92:5f:ab:
f6:f5:3a:e9:43:94:cd:c3:42:fc:d3:48:70:fd:ab:
08:fa:c9:42:48:2c:0f:8a:59:d9:29:d9:32:47:c0:
5b:72:d1:13:85:2d:6f:34:f5:a4:a7:a0:0b:2d:b7:
09:ad:46:6c:7c:03:49:5e:b6:88:6f:f7:25:7f:1b:
9a:44:23:9f:32:7f:d8:45:ba:8c:78:37:98:bd:19:
c8:0a:92:11:51:a9:08:41:38:47:13:0b:5b:80:1c:
46:5e:25:34:51:83:bd:c3:bd:b6:13:45:f7:2e:3d:
a0:76:fd:95:fb:0e:8f:aa:73:c5:21:7b:ea:1e:b1:
69:b2:19:58:60:a9:bb:dc:5a:90:9b:0a:eb:03:76:
fb:94:94:62:25:48:8c:a6:04:60:ca:5f:fd:03:7c:
69:e0:f9:19:29:bf:7a:67:c0:0e:99:1a:fc:2a:4d:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:52:8A:1F:9F:46:D1:8E:D0:AA:6E:12:7D:BC:F4:1D:42:4C:43
X509v3 Authority Key Identifier:
keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.92.196.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d7:fc:ee:4f:65:fb:3b:06:b9:13:c3:0a:4a:f3:55:9f:a8:
8a:4f:31:d4:34:be:8a:4f:f5:d0:05:d6:2a:5b:34:1c:1a:72:
97:32:8a:bb:16:b9:64:06:35:de:7b:78:81:64:e3:0f:f5:47:
77:da:71:fa:33:08:c9:80:f0:58:b9:f2:13:3d:fe:3a:86:69:
3c:57:70:4b:73:8b:0c:b5:8e:b0:3f:6a:37:e5:5b:ac:1c:3a:
67:0d:38:f0:b5:2c:dd:fe:06:f6:a3:fe:c2:0a:8c:21:bf:26:
70:1e:ed:16:e6:48:0a:d0:74:cc:64:ca:0b:26:45:2d:2d:de:
0d:9c:16:b8:1b:45:03:6a:ff:1d:c2:d1:c1:0f:aa:e4:43:03:
df:cf:2a:46:1f:92:72:99:99:e8:40:03:52:0b:e7:df:ed:0a:
73:b1:d8:4f:e8:c7:1a:19:13:ed:12:81:4f:e8:44:65:9d:29:
7e:8d:b5:ba:3f:b4:6d:58:d8:42:ca:7c:8a:13:52:a7:e7:0f:
5a:ab:b8:b4:d8:fe:a9:21:3b:b1:27:a1:45:44:68:bb:23:1e:
ce:f8:ed:48:a9:e1:fe:30:a4:f8:ab:5a:82:27:28:2e:99:09:
5f:45:cc:a5:57:61:18:94:b2:7e:3e:6d:40:8e:77:2a:ea:e3:
fd:55:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:49 2026 by rpki-client