
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa
File: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (raw, json)
Hash identifier: Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=
Subject key identifier: F2:75:13:6E:3A:5B:F6:E5:03:FB:C3:B9:FB:31:F5:85:FA:7E:A6:45
Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Certificate serial: 0205
Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:15:16 +0000
ROA not before: Fri 31 Oct 2025 03:17:13 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132027
IP address blocks: 103.5.71.0/24 maxlen: 24
202.36.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Validity
Not Before: Oct 31 03:17:13 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a411b4-90a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:c0:2b:60:c5:53:99:ac:15:8b:35:b4:ae:
e3:5b:8d:8e:f6:68:a3:6a:da:a5:fd:87:42:55:92:
85:92:9e:82:7f:da:ba:ab:05:54:4f:75:53:8d:c7:
5e:b7:fb:20:a1:82:f4:c4:90:5f:49:ee:36:c4:39:
0b:2b:c5:69:4d:7b:d2:1e:f1:ff:dd:fe:98:08:f5:
f1:db:dd:9c:46:8a:97:80:a3:7f:a8:6a:59:7b:fa:
be:c2:23:ea:4c:e3:c4:3e:a2:e7:7d:1f:b5:af:28:
f8:6f:29:7d:34:ee:8c:b0:e9:ef:d0:07:98:4f:77:
c5:7d:5e:f1:94:97:29:bc:30:19:1f:f4:03:e4:39:
d5:f6:cb:ec:dc:ac:35:69:31:87:8f:07:f0:f3:ec:
25:57:1d:c8:47:26:d2:03:7f:af:d1:e4:b3:71:53:
67:8b:b0:9d:f4:6d:bc:17:d8:dd:7d:0d:fe:8b:c2:
24:f5:e3:34:39:8d:ce:8b:d4:1e:d8:2b:d2:18:6b:
f1:46:c7:b6:49:5d:ac:8f:9c:d3:a1:65:ba:76:25:
4e:b3:ca:66:df:1e:8a:7c:22:36:0b:b0:1c:fd:12:
53:a8:99:50:df:57:b3:14:6e:dd:58:43:be:3e:6b:
b3:fc:73:85:8f:e5:d3:4f:f6:55:c0:27:c6:fe:00:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:13:6E:3A:5B:F6:E5:03:FB:C3:B9:FB:31:F5:85:FA:7E:A6:45
X509v3 Authority Key Identifier:
keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.71.0/24
202.36.185.0/24
Signature Algorithm: sha256WithRSAEncryption
78:0f:89:23:e1:2a:61:0e:6a:6f:99:f3:81:f0:0c:be:b6:1d:
0e:c1:81:11:90:c8:6c:db:05:45:1b:4d:22:84:06:73:a7:c5:
2e:9f:df:13:c4:32:99:d0:0f:42:9e:0e:56:e9:86:7d:9b:5e:
f0:46:f6:74:82:4b:e0:27:04:1b:07:f6:c5:cb:11:48:af:50:
ae:5e:de:73:7d:35:c4:3d:d4:30:ff:9d:40:48:e5:cd:7c:ec:
9e:85:cf:bc:2c:1f:3a:33:53:e1:9f:3c:5f:05:13:cc:3f:51:
b2:78:0d:af:3d:bc:c2:42:b5:6e:5f:60:fe:94:7e:ee:7c:6f:
6a:fe:37:5a:f9:37:6f:71:dd:97:47:3f:5b:95:75:f9:23:9e:
6c:6a:15:b9:46:37:7c:5d:ec:f4:20:4b:fe:30:37:88:ad:6d:
eb:ee:c1:eb:99:cf:f5:75:49:7f:df:d9:af:e1:b9:21:2c:00:
a3:e9:10:58:b5:c3:41:8c:0a:70:48:7e:e1:f3:56:5a:0d:cd:
18:dd:df:03:52:b3:1a:11:a1:ad:b8:b5:5e:97:df:77:3c:0d:
48:66:ec:33:ad:36:82:3a:21:d3:20:ed:79:86:d1:7d:81:c2:
1e:22:d9:b0:81:ca:93:a1:33:16:bf:62:1d:61:47:cf:2d:46:
e4:66:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:50 2026 by rpki-client