
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa
File: AECDA1B0448F11EDACC30815C4F9AE02.roa (raw, json)
Hash identifier: Vv+ic3tuHHAEO62okYNeBPpK0SKMbTv6XBExdyT6xHM=
Subject key identifier: E9:75:D3:12:8F:AF:A1:5E:B8:17:82:55:C9:44:92:EC:CD:36:8E:8E
Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Certificate serial: 0EE6
Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa
Signing time: Thu 26 Mar 2026 18:22:16 +0000
ROA not before: Thu 26 Mar 2026 18:22:16 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 35280
IP address blocks: 103.135.56.0/22 maxlen: 24
2404:75c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl
rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3814 (0xee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Validity
Not Before: Mar 26 18:22:16 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c57957-ed75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:72:d9:ee:92:40:20:b9:2b:65:b4:5a:4a:
29:2b:38:1b:f6:bc:3e:89:1f:46:03:71:a3:b2:cf:
9b:b9:f9:e3:d2:99:07:c2:05:7b:63:18:b7:6e:06:
92:4d:d6:d0:f8:18:ee:45:e6:7d:38:05:7f:ec:48:
71:09:d4:fc:76:ed:13:c0:60:04:83:b8:52:73:8e:
85:51:dc:3c:8a:08:31:a5:9f:cc:1f:23:8a:18:cb:
4b:2c:dd:9d:10:4b:91:ee:f5:48:7f:93:41:20:d0:
ef:f5:e4:40:c2:a0:14:3a:19:ff:5d:c9:4a:5d:65:
38:da:58:0c:0c:84:c1:3d:ca:f9:25:11:02:35:1a:
2e:de:ac:9c:1e:c1:6d:ae:4a:0f:d8:04:6f:72:13:
3f:e8:a6:ed:81:0a:c3:97:d6:75:32:55:ad:77:92:
5c:a4:4b:0f:b9:6e:a5:69:4b:e5:a6:e5:6d:4d:4c:
fb:ca:39:c5:e9:0b:33:3c:fd:82:79:33:e9:e0:f9:
19:da:5e:bf:9b:35:12:9e:42:3d:10:25:82:8b:d0:
c4:8a:75:b2:57:e4:84:1e:6f:fe:87:08:30:f2:73:
e7:73:29:ef:04:2d:eb:c2:4b:43:6d:0f:02:99:21:
32:23:33:01:dd:51:69:6b:fa:20:dd:77:7c:2a:e7:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:75:D3:12:8F:AF:A1:5E:B8:17:82:55:C9:44:92:EC:CD:36:8E:8E
X509v3 Authority Key Identifier:
keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.56.0/22
IPv6:
2404:75c0::/32
Signature Algorithm: sha256WithRSAEncryption
49:0c:38:ce:95:1c:75:57:11:d2:96:83:e1:78:51:c6:b3:50:
30:9d:bd:5f:9b:e5:5a:c9:08:83:57:f9:d9:c0:a1:0e:79:eb:
be:e7:84:4a:04:5e:db:2f:58:e7:ab:a2:c9:38:3b:a2:35:74:
94:17:8b:75:6d:fa:3b:08:e2:01:36:ad:6b:79:60:64:44:f8:
bb:f4:eb:7b:05:e5:22:00:c5:ea:60:85:a6:ac:94:50:a7:76:
4c:99:a4:39:44:38:9f:12:5c:c6:51:55:a1:8d:7f:be:06:21:
38:ad:9e:fd:1d:56:a8:da:4d:fe:d9:2b:91:90:e9:86:c0:df:
88:85:ae:57:26:8a:65:42:05:29:eb:56:8d:40:fa:ca:33:8f:
65:cf:6c:be:32:bc:92:c2:d3:be:c2:7e:77:f5:8f:85:53:7c:
14:13:6e:7f:48:07:98:fd:dd:fe:2e:93:f6:d3:eb:3b:12:69:
d1:76:48:dd:bb:60:3e:2d:df:d7:ff:3d:6d:bd:bd:3c:6b:ab:
e2:fd:85:e5:21:c2:11:22:9b:a3:70:95:68:fd:69:70:47:34:
a8:4d:7c:ae:e2:32:11:62:1f:a0:cd:45:42:b3:b6:9a:a7:52:
12:0c:b4:ae:b5:3a:2d:8a:65:e7:00:8a:f7:78:07:9c:78:ea:
79:b2:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:08 2026 by rpki-client