
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/2998A0E0F99011EF89B2363DC4F9AE02.roa
File: 2998A0E0F99011EF89B2363DC4F9AE02.roa (raw, json)
Hash identifier: jYyc5vfXgnps89Xpg6ne+7eG68kvvn+t/7XtsmJGJwU=
Subject key identifier: 5C:BE:DC:BA:6B:3B:55:C3:14:49:D4:BE:A8:C9:8B:2A:98:AB:7A:A8
Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial: 0429
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/2998A0E0F99011EF89B2363DC4F9AE02.roa
Signing time: Wed 29 Apr 2026 01:33:31 +0000
ROA not before: Wed 29 Apr 2026 01:33:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151636
IP address blocks: 103.184.92.0/24 maxlen: 24
103.184.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Validity
Not Before: Apr 29 01:33:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f15feb-6265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:0c:0f:04:ae:77:54:cc:24:19:97:9b:99:
53:e8:1a:93:69:7d:b2:bf:09:d7:ac:b6:9a:cc:d7:
71:38:90:ec:3c:d2:b6:ab:17:7c:b5:c2:08:3c:a9:
c5:91:08:cb:87:8f:7c:76:76:f3:75:fe:47:bc:e4:
b8:9f:33:4d:f2:dd:fc:d7:0b:89:11:15:1f:88:5b:
e4:2f:d5:5c:fd:0b:fd:44:db:12:d9:b7:46:56:c9:
dc:ca:99:a7:1e:f2:78:e8:ff:8f:aa:e2:64:6c:33:
c1:d5:c3:fa:7b:91:24:3d:f2:d5:9f:03:5e:3d:d2:
c6:59:16:43:11:e6:94:27:e6:00:d4:c8:f5:ee:dd:
ed:58:90:b6:bd:21:59:ad:71:ca:6b:af:a2:62:49:
1f:d0:8d:3d:b2:75:1c:f6:02:fb:0f:b8:af:c3:df:
7d:a4:67:45:17:68:5c:14:61:f8:c2:0a:01:42:16:
7d:54:ee:7a:22:ae:b0:fa:ce:fc:95:3f:c8:1f:c1:
13:67:ae:fc:9d:d3:62:67:1c:63:d2:93:db:25:c4:
1d:e3:6b:a0:bc:55:87:13:9b:90:8b:df:44:29:fb:
b8:eb:62:fa:22:6d:be:b1:39:3b:c8:34:9c:af:4e:
b0:63:8a:5b:10:2b:f1:22:35:63:2f:c6:95:a7:c8:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BE:DC:BA:6B:3B:55:C3:14:49:D4:BE:A8:C9:8B:2A:98:AB:7A:A8
X509v3 Authority Key Identifier:
keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/2998A0E0F99011EF89B2363DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
95:d3:e3:8e:c4:2a:75:60:be:85:13:b2:89:db:a1:1f:ea:da:
9b:d6:17:99:d2:15:f9:dd:ea:0c:51:fb:0a:f4:58:9f:67:dc:
a2:b3:8c:41:7a:26:53:8a:8b:8b:96:07:02:42:fe:cc:10:f9:
6e:ea:98:3e:98:11:91:40:a4:e7:f4:e5:d4:2d:96:18:f8:f7:
e0:0a:ff:e0:cf:fb:53:65:60:65:21:27:43:90:e2:cf:0d:11:
b3:34:69:2c:5a:85:45:6d:ea:a9:0b:20:be:7a:c2:44:66:e7:
16:b7:35:54:e0:dc:fb:27:ec:bb:47:e6:7f:f1:8d:27:a3:64:
12:85:4b:41:9e:02:1a:5f:a2:49:2c:3a:f6:a7:5a:c5:cc:73:
70:81:5f:f0:b4:3f:8e:80:3d:2e:2f:fd:b7:99:87:d2:35:07:
94:c1:ed:23:d4:5f:78:5d:17:ec:51:56:60:a8:05:1d:9b:e5:
18:8d:c3:37:0d:d3:bf:a2:37:64:27:84:84:fc:93:e8:e4:49:
a4:18:a0:58:1a:27:37:90:91:43:e5:78:9b:94:fc:3b:79:26:
9a:7a:3e:98:9b:5a:0c:41:56:e8:e6:3f:76:71:87:a9:b8:b0:
54:a4:56:30:a7:d0:13:83:bd:74:df:fa:f4:39:26:0c:ef:d5:
33:4e:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:09 2026 by rpki-client