
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/5BB88D38245A11F18A931CD8C3833773.roa
File: 5BB88D38245A11F18A931CD8C3833773.roa (raw, json)
Hash identifier: dO+a4nQRE+isJxtzRbplPM324KVyASEgu6GREHrp+RM=
Subject key identifier: 7A:80:E1:01:3D:E6:C3:DA:BE:07:E3:20:CF:4A:D1:0E:2C:40:BD:48
Certificate issuer: /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial: 04
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/5BB88D38245A11F18A931CD8C3833773.roa
Signing time: Fri 20 Mar 2026 12:44:56 +0000
ROA not before: Fri 20 Mar 2026 12:44:56 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 133139
IP address blocks: 43.228.196.0/22 maxlen: 24
103.26.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Validity
Not Before: Mar 20 12:44:56 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69bd4147-7200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:7d:8a:5c:39:af:c4:56:6d:a3:09:9a:19:
18:d9:d6:ef:c2:93:56:d5:d9:9b:96:5b:20:c8:4c:
f7:b9:44:46:5b:15:39:9a:ac:92:8f:3f:0f:70:c4:
7c:b1:ab:69:10:dd:02:64:67:b1:8e:99:e8:e4:e9:
27:e1:82:f9:93:23:15:c4:85:fe:fd:7f:cb:c3:83:
99:33:69:7c:fc:3d:b9:54:2d:11:42:5e:93:97:e6:
12:65:b7:25:de:75:92:8f:8a:84:4d:b6:30:25:20:
9f:3e:89:2b:02:11:db:e6:c6:02:92:f9:53:ec:05:
89:9f:de:7b:36:2e:56:a8:12:21:f4:49:4e:01:76:
2a:ce:88:f5:5a:f3:97:e6:88:56:9d:f0:41:55:8b:
58:b6:8b:1f:da:29:2a:94:13:33:da:b5:fe:ec:87:
95:52:b1:3d:09:c9:f3:62:5b:0d:f3:67:af:a0:55:
25:c6:da:e9:aa:8b:4a:15:88:00:86:a0:fe:2f:bc:
2e:18:9d:ec:94:55:a3:cd:97:97:59:dc:60:14:eb:
03:59:dd:93:ed:47:cc:11:f2:67:e3:1d:c6:f5:5c:
63:69:cb:f0:04:a8:f4:9d:76:8b:11:45:db:2a:19:
f8:6b:de:65:42:ad:48:8d:f0:63:15:34:e0:e6:47:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:E1:01:3D:E6:C3:DA:BE:07:E3:20:CF:4A:D1:0E:2C:40:BD:48
X509v3 Authority Key Identifier:
keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/5BB88D38245A11F18A931CD8C3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.228.196.0/22
103.26.180.0/22
Signature Algorithm: sha256WithRSAEncryption
00:23:3f:d3:62:ef:af:3c:78:bb:87:84:28:49:21:26:dc:2b:
5b:42:c6:6a:23:d2:80:1e:c7:5d:a1:8b:46:03:06:b6:62:a6:
ac:47:e6:ab:bf:78:8e:2f:f9:81:c1:10:39:3f:9b:07:76:67:
d5:ae:61:24:1a:ec:20:b7:08:5a:9d:72:91:e4:a8:1e:e4:07:
31:32:fc:ef:c5:1e:09:e0:50:98:20:20:62:e0:15:ba:63:d6:
f4:e1:78:23:74:53:89:39:fc:1e:66:af:46:12:4a:e2:32:43:
73:57:7f:85:92:bb:51:d3:06:09:50:5e:82:88:e6:a8:8d:bc:
01:c0:d1:ca:b4:0c:8b:c6:1a:ba:8a:11:6a:6c:c1:67:95:19:
eb:01:4d:e1:6a:62:1a:77:55:7c:dc:98:00:b8:56:51:0b:d5:
d3:db:f9:44:f0:a8:05:6b:f2:cd:bf:83:6d:c1:98:26:8b:37:
ec:92:ef:8e:43:36:b1:f5:f7:99:f2:85:e9:87:cb:c3:90:75:
4a:8a:d5:71:b7:89:e8:ec:ea:57:36:29:28:58:d3:11:18:c9:
e6:fe:80:a6:df:e1:5c:b9:81:15:ec:69:65:dc:3e:21:0d:da:
8a:66:e1:06:94:e2:39:12:88:ce:9f:f0:1e:82:94:1c:3e:97:
22:34:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:47 2026 by rpki-client