
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/5882F272BB4811F193B2717F3911F970.roa
File: 5882F272BB4811F193B2717F3911F970.roa (raw, json)
Hash identifier: KMYT2gyxrjM6g3Aqx+Ka9fdVUGFamxEXqoeCpWkA2iA=
Subject key identifier: D0:2A:55:16:F1:D4:74:30:AA:C3:C2:E4:A4:4E:9D:02:F6:AE:7F:57
Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial: DE
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/5882F272BB4811F193B2717F3911F970.roa
Signing time: Mon 28 Sep 2026 14:24:42 +0000
ROA not before: Mon 28 Sep 2026 14:24:42 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138596
IP address blocks: 103.252.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 07:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Validity
Not Before: Sep 28 14:24:42 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aba78aa-4399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:cb:b6:d2:b9:ed:b3:d8:4a:42:9a:f7:e4:
ec:d5:4a:5e:c9:1f:f5:70:d9:aa:80:99:da:a7:7f:
6e:10:16:04:f1:71:47:1d:53:43:de:5d:92:92:5d:
0f:9b:c0:34:a8:bf:12:ac:55:7a:23:ad:b4:fd:65:
80:f6:44:71:77:43:df:bf:bc:8f:4e:25:2e:b7:f1:
55:16:ce:44:9a:2a:89:6c:1a:8b:22:ca:9c:71:33:
b6:10:76:0d:db:ce:f4:da:9e:7d:0d:62:a3:f4:32:
63:46:11:18:53:82:c4:19:a1:57:d3:3b:82:3b:6a:
49:96:11:e6:87:0d:21:d1:8e:1d:75:bc:d2:06:c3:
46:94:fa:f8:2a:ea:71:6e:35:4d:c4:4e:dc:82:cc:
06:a0:c7:c9:d7:05:3c:6f:12:90:0f:09:44:da:91:
cc:42:6b:ee:8b:61:38:c5:62:a7:2d:20:c7:8b:5d:
dc:60:de:5b:1b:4e:ab:0e:ab:9b:6a:4d:79:6e:86:
7d:45:ce:87:a3:57:56:b5:1b:b6:c0:c3:1e:cb:8f:
34:74:be:2d:18:dc:ad:73:3c:23:7a:67:92:9e:31:
52:10:d3:e1:7c:2e:9f:00:b1:3b:fc:5f:91:a9:3f:
0d:47:6e:b0:db:65:69:68:a4:94:fa:32:d2:75:eb:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:55:16:F1:D4:74:30:AA:C3:C2:E4:A4:4E:9D:02:F6:AE:7F:57
X509v3 Authority Key Identifier:
keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/5882F272BB4811F193B2717F3911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a0:59:75:4f:55:7d:86:21:c6:b2:a1:86:c8:0b:ac:a3:22:
e8:48:b8:2c:53:b7:01:8b:d5:fb:8e:ce:7b:91:75:fd:12:0b:
85:25:66:ec:2d:b9:38:73:9e:80:84:49:af:24:21:f7:1c:70:
f8:cd:a4:8f:55:db:5c:2d:f3:1b:b9:65:89:a7:54:03:32:5c:
0e:0d:ce:4f:43:1d:e1:92:bd:2c:e1:a8:35:76:94:4e:42:2b:
81:0d:02:fc:1e:a9:3d:b5:c6:47:be:f1:61:89:01:b4:c4:4b:
98:08:b5:83:1e:d8:b6:35:5a:04:9d:02:ae:bb:a2:0c:54:1a:
89:57:bb:24:cf:e1:5a:65:44:80:9c:ea:bf:e1:8d:30:ae:07:
c1:48:2d:eb:34:9e:c7:8a:ce:6d:f8:71:fd:58:a7:49:00:9d:
6e:67:80:25:ad:b6:62:c7:37:fc:1f:dc:71:f7:68:33:c2:2f:
e7:8e:f9:dc:7f:78:89:e1:4f:f8:44:af:ad:7b:ed:2e:02:e7:
c6:25:8a:6c:87:ba:bf:62:81:03:ec:40:19:d2:ba:20:55:13:
e2:78:b0:92:31:f4:14:e3:4a:d9:fa:4f:6b:49:91:fe:60:ac:
56:00:35:8e:46:6b:7d:d9:c6:35:6b:e7:0e:11:75:7e:e7:5e:
df:ae:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:31:41 2026 by rpki-client