
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa
File: C584C646CA5111EAB9696B0AC4F9AE02.roa (raw, json)
Hash identifier: fPAkeNQdJZe5HT86HVD6ytSe29buDB2xdAiPtGBOOrU=
Subject key identifier: DB:FD:1E:94:4F:27:B9:A7:B3:B4:6A:45:3D:AA:B1:00:68:0B:48:C5
Certificate issuer: /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial: 095B
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa
Signing time: Mon 04 May 2026 20:25:30 +0000
ROA not before: Mon 04 May 2026 20:25:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23647
IP address blocks: 103.90.84.0/22 maxlen: 22
103.90.84.0/23 maxlen: 23
103.90.85.0/24 maxlen: 24
103.90.86.0/23 maxlen: 23
103.90.86.0/24 maxlen: 24
103.90.87.0/24 maxlen: 24
202.51.74.0/23 maxlen: 23
202.51.74.0/24 maxlen: 24
202.51.75.0/24 maxlen: 24
202.51.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395 (0x95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Validity
Not Before: May 4 20:25:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f900ba-e74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:47:41:23:38:7f:d2:b9:3b:e1:bd:ee:4c:
85:6e:7c:ff:7e:14:65:67:ef:95:ff:96:2d:60:1d:
59:77:16:bc:ee:7f:02:87:6b:00:1a:dc:52:b6:b9:
3d:2c:08:a3:54:2b:aa:9c:bc:ed:5e:5c:f1:07:ed:
3b:db:07:0f:d9:5b:7a:d4:29:5f:5a:0a:d8:28:b4:
cf:bb:87:9a:86:f5:92:76:c0:8c:a8:a6:89:05:b0:
9f:52:13:06:3e:36:58:69:f2:31:ee:88:cb:f6:92:
8b:ab:c1:ae:3c:88:73:eb:66:95:bb:47:b3:e8:80:
e7:53:a1:c5:e1:1e:04:ea:10:61:a9:5a:33:b7:09:
be:27:b2:60:63:d4:4b:98:0a:5a:6c:ce:44:db:91:
28:70:dc:a2:e4:c7:83:fd:e6:4d:76:ea:6b:4b:e1:
ae:f9:28:e1:29:02:a7:0b:65:8f:00:64:16:71:ab:
f7:f8:42:34:4c:5e:cc:44:13:09:5a:ce:de:1c:c8:
01:8e:ce:c6:f1:5a:82:ee:d4:74:1e:aa:8c:7e:42:
20:3c:8c:28:fe:89:4b:5a:a2:91:26:51:b9:99:ff:
6b:2b:87:32:a2:c3:b0:e8:f3:23:02:c5:53:85:3a:
7a:54:34:ff:ac:c6:bf:c4:82:b0:2a:7b:61:d5:ee:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FD:1E:94:4F:27:B9:A7:B3:B4:6A:45:3D:AA:B1:00:68:0B:48:C5
X509v3 Authority Key Identifier:
keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C584C646CA5111EAB9696B0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.90.84.0/22
202.51.74.0/23
202.51.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7d:4e:5d:45:d3:d2:bd:a9:a3:ec:da:d3:c5:aa:61:60:4c:
8c:4e:2f:41:cc:d6:e8:33:f0:1b:82:15:d6:a8:84:2a:75:c1:
33:b2:b3:ea:31:39:04:7e:82:fb:a2:43:53:43:7e:e7:62:de:
05:98:48:8c:43:d1:30:3c:85:37:12:6e:ba:69:bf:16:0b:ec:
f3:5b:2e:b0:17:c3:a4:94:b3:98:1a:74:2f:98:46:f3:43:6e:
37:a4:e2:25:d6:85:2f:b8:85:a2:06:06:e9:63:c9:bb:bb:15:
c1:58:81:7c:14:bf:7d:52:25:b2:ff:a5:12:b2:86:4c:65:3d:
27:1b:98:b8:94:95:f4:0b:7c:22:9d:cd:98:a8:da:42:e1:7a:
24:6b:de:cd:6b:87:7d:90:d1:b6:3e:4e:e5:f1:3c:2e:8e:a7:
94:9d:76:df:0d:a1:f6:f4:79:fa:e0:29:22:df:20:8a:4b:ba:
77:74:bc:88:be:31:1f:06:c3:69:45:41:b0:8a:47:31:22:39:
f2:ed:49:e4:a4:48:d2:da:e1:74:d0:70:4e:24:b7:93:f4:84:
20:fe:78:83:c8:50:1d:b0:c1:a4:1e:a1:1e:9d:f3:f1:9a:0f:
32:1f:00:38:a9:e3:a1:81:a6:10:71:96:f5:1b:89:88:3b:41:
37:a3:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:23 2026 by rpki-client