
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa
File: 573BE4DE3D0811EF84157B26C4F9AE02.roa (raw, json)
Hash identifier: 8qsCKXW1PnkeYNlCGo4/GnAMha9Fa7HghDmajg38QjM=
Subject key identifier: 0D:93:88:23:D1:F9:C8:F4:3F:58:F5:F7:38:5C:A5:53:46:E5:7A:2A
Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial: 0142
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:06:54 +0000
ROA not before: Wed 11 Jun 2025 05:45:25 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 27385
IP address blocks: 103.75.172.0/23 maxlen: 23
103.75.172.0/24 maxlen: 24
103.75.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Validity
Not Before: Jun 11 05:45:25 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5997d-f4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:0f:e2:c7:9b:c4:19:bb:a1:4b:f2:6a:95:
04:5b:23:75:38:ac:0e:59:ec:7e:39:1f:1d:e3:f3:
e8:69:5c:eb:2c:13:6f:24:61:5f:9c:11:2f:41:d0:
3a:25:e1:a8:ef:83:e4:2c:78:a9:bb:be:02:43:9f:
4a:16:27:89:bf:56:ca:b1:7c:65:af:5d:bf:ad:c2:
91:cb:7c:90:a9:32:25:6d:e3:27:6b:3c:21:e4:57:
5d:ac:55:f0:f3:96:ce:b4:8b:b3:a6:66:90:37:f0:
4e:06:0b:8f:ae:88:cc:12:0d:50:6d:4e:03:39:48:
ec:e4:6a:a9:44:12:86:d0:da:8c:5e:7d:b1:83:4e:
51:89:0f:80:32:87:28:26:65:6c:3d:56:28:21:1c:
87:f8:66:85:59:7c:ba:40:dc:65:a4:88:30:b5:0e:
9e:5d:8f:bd:37:eb:62:75:00:8f:12:0e:09:d4:f3:
e9:6f:f2:c3:03:7a:29:73:32:6d:21:9b:e1:50:ea:
d3:cc:11:04:9e:9f:76:1a:f7:dd:50:fa:c8:63:9c:
8b:7a:f8:1e:93:0f:e3:5a:f5:4d:c3:db:fb:3c:e0:
db:df:d7:6f:eb:4f:c5:af:f9:99:ad:f1:f8:34:d2:
7a:c7:12:b6:c0:61:fb:dc:4a:16:48:6b:75:10:60:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:93:88:23:D1:F9:C8:F4:3F:58:F5:F7:38:5C:A5:53:46:E5:7A:2A
X509v3 Authority Key Identifier:
keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.172.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:28:22:ef:93:c8:2e:3a:78:e1:15:e6:ea:f9:a6:6f:37:b6:
54:f1:6b:bf:61:af:fa:db:fc:cd:c9:96:b8:a1:dc:84:a4:a6:
0b:c5:8f:b5:b4:2d:f4:8a:07:74:da:d9:1b:86:af:be:43:25:
ab:d4:04:cd:ea:3c:06:70:50:a6:f7:57:a7:d1:20:51:2e:b1:
7a:c3:c4:e1:41:63:ff:7f:e3:98:d3:73:07:46:0e:e4:4c:cf:
35:5f:7b:09:81:97:d0:e5:f5:08:c6:1a:de:6b:46:fb:91:8a:
75:99:43:53:60:4f:da:a9:97:d3:fd:fd:87:2c:a9:42:f0:f5:
51:1d:d1:f8:33:85:b2:c9:a0:ae:c4:40:f1:1d:79:67:82:dd:
eb:a5:e4:de:07:f8:25:47:9a:90:82:13:7c:93:48:ec:93:a7:
9b:c9:2e:30:a4:e6:c0:c7:73:19:ba:32:c8:00:c0:70:02:12:
ca:95:34:86:81:fd:1c:be:47:1f:14:15:ba:ab:e8:52:f3:5b:
91:2a:e8:f3:c3:b0:38:16:5f:75:51:52:03:06:08:d7:8e:1e:
66:70:56:47:6d:16:22:77:df:ec:ee:19:34:53:3b:21:43:3d:
f8:b4:bc:11:93:2e:4c:e9:fb:8f:9a:01:f7:29:dc:77:f7:c1:
75:1a:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:23 2026 by rpki-client