
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
File: E52DE77630B611EC981BBF1CC4F9AE02.roa (raw, json)
Hash identifier: NWJk9U1zJ6g6SQr9JT1EUFlzv/4D0aiZyw7C2alM700=
Subject key identifier: 6A:04:9F:12:83:49:46:53:03:A7:41:07:AA:75:91:64:D1:96:16:75
Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial: 053E
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:51:31 +0000
ROA not before: Tue 27 May 2025 00:45:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45753
IP address blocks: 103.89.72.0/24 maxlen: 24
103.133.72.0/23 maxlen: 24
103.133.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Validity
Not Before: May 27 00:45:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fe12-e772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:08:8a:d5:35:80:ab:45:92:94:ea:48:05:
be:06:1b:84:40:4a:34:b6:41:6d:0c:c8:6e:96:b2:
2a:f9:9d:5a:1c:16:79:7f:f2:10:c7:f8:4e:ff:ee:
07:27:b5:59:c4:7c:92:8a:7f:e3:f2:2a:bf:d7:7b:
77:e2:6d:76:6e:f9:86:ce:3f:17:00:fc:80:3a:48:
d3:06:13:5f:91:b0:61:a9:07:8e:91:86:a1:c5:be:
3a:74:65:c7:08:0d:ee:c1:2c:d0:af:17:f8:3a:c8:
b4:ab:81:a7:39:34:a5:d8:76:59:95:d1:9f:0f:d7:
e3:e9:6e:63:29:ed:3e:79:06:1e:1c:98:c5:7f:b9:
12:34:09:3a:9a:5c:26:bc:c3:f5:e1:b1:0b:90:af:
0a:8f:46:5d:a4:4b:ec:0d:87:12:c8:e5:44:9b:5c:
80:97:bd:fa:31:ff:c3:94:4c:b0:de:ee:e6:56:5c:
32:29:ed:f7:00:77:87:74:2a:f7:09:e2:8f:40:2f:
79:99:82:4d:34:68:a8:86:7a:eb:22:48:26:e5:93:
15:08:cf:de:44:34:fa:bf:e0:02:60:47:b6:cb:c2:
67:47:68:63:76:b4:56:ae:04:4f:65:f3:92:4e:87:
7e:bd:e5:5e:45:be:73:ab:41:64:76:13:61:29:29:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:9F:12:83:49:46:53:03:A7:41:07:AA:75:91:64:D1:96:16:75
X509v3 Authority Key Identifier:
keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.72.0/24
103.133.72.0-103.133.74.255
Signature Algorithm: sha256WithRSAEncryption
3a:a2:64:e7:54:5c:18:d6:df:e7:02:5d:2c:47:52:b2:82:2a:
ba:fd:c5:8c:37:be:21:c1:5b:3c:6b:15:b2:6e:93:07:a4:e7:
7a:58:82:42:44:4b:11:c3:67:f0:4e:11:c6:68:ac:44:9f:5a:
97:9e:81:68:fd:85:20:a5:11:46:79:ba:69:8f:c9:bd:91:b5:
46:90:4e:09:f9:49:64:e2:79:b7:10:6a:a0:e7:d9:cc:0b:9b:
1a:ec:60:68:49:06:db:bb:8c:12:e3:ab:37:d7:ae:8a:a8:e5:
da:b1:7d:b9:f1:8e:0a:3a:81:0c:d1:68:44:f5:58:36:80:29:
14:92:3d:99:7f:25:ea:7c:f2:a6:fc:32:1c:1b:a0:81:bb:66:
11:75:f7:97:f8:90:fe:39:2a:c0:4c:ff:49:68:21:c3:3f:3a:
bc:58:1c:30:9b:11:60:0f:62:4d:d3:06:f0:3c:4f:f9:65:90:
d1:2b:b8:df:15:12:f7:b9:30:e0:25:e7:78:55:cc:74:0f:65:
22:10:d8:81:dc:e7:c3:d6:0c:c6:05:88:5f:f8:73:1c:03:33:
67:74:85:77:a2:39:59:9d:78:53:b4:9c:b0:ab:40:fc:b2:7f:
28:eb:16:ab:0b:f5:34:c8:bb:cf:fc:3a:5f:54:fd:3a:2f:92:
85:a2:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:57 2026 by rpki-client