
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa
File: A5D573E4305A11EB921D6332C4F9AE02.roa (raw, json)
Hash identifier: EXIodqZO0EV9Q7D8N2AnvfLDO9Fid8uBbsf7/azJXeA=
Subject key identifier: BE:CB:45:1C:C5:02:E9:EF:0F:8A:1C:E5:14:8F:A3:1C:28:77:94:AE
Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Certificate serial: 07CC
Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa
Signing time: Wed 04 Mar 2026 21:28:34 +0000
ROA not before: Wed 04 Mar 2026 21:28:34 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136388
IP address blocks: 103.86.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Validity
Not Before: Mar 4 21:28:34 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a8a402-1290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:f2:3a:54:a1:31:4e:1b:40:c4:ff:2c:62:
b4:f1:c2:ba:ba:1f:0c:79:fc:b4:bb:bf:4c:ad:49:
83:b5:c3:42:32:47:74:36:e2:ea:8c:1f:f3:96:a7:
4f:a3:5b:46:d9:b8:31:98:62:89:34:ea:a0:31:d9:
fe:da:3b:f3:db:17:5b:83:5e:66:c1:b0:4b:f6:25:
d1:8e:70:c3:f1:7c:8f:3e:3d:b0:cf:32:fd:32:45:
b6:4d:76:09:6a:80:e1:4b:60:48:99:c4:6c:fd:8a:
af:e0:28:bf:5e:b3:c2:53:a9:49:de:48:8b:79:e5:
7f:79:06:bd:7d:99:8f:70:dc:03:28:c3:3a:86:be:
17:e9:9d:e2:83:b3:1f:7b:04:e8:0a:83:0c:56:e3:
b7:7f:8a:6e:d0:27:71:e8:79:6a:a6:7c:4e:2e:9e:
66:eb:4d:73:84:f4:37:70:24:05:b1:60:db:a0:2c:
ed:a8:d1:9b:47:f9:0b:9b:bf:f6:45:ae:03:4d:ae:
5d:09:76:37:7d:c9:ce:14:1c:b1:95:ac:4c:dd:d5:
8e:19:9c:8a:64:5f:a6:df:52:52:cc:a7:6a:e8:91:
ca:eb:d7:20:cd:2e:88:b2:3e:92:fa:ec:f8:4a:64:
c4:e5:10:d6:f4:13:f6:a1:bc:cd:d4:a6:93:6f:9d:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CB:45:1C:C5:02:E9:EF:0F:8A:1C:E5:14:8F:A3:1C:28:77:94:AE
X509v3 Authority Key Identifier:
keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.92.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d1:cc:6f:45:c3:af:79:52:75:33:3e:be:32:f1:d5:91:ac:
ea:c9:3e:f0:9b:ab:a3:09:b3:9a:ec:88:ac:63:59:80:1c:b2:
f9:d7:36:5f:55:af:98:cd:65:bb:df:54:28:87:55:1f:59:78:
8b:e2:4d:17:e0:d7:43:ce:bf:4b:6a:72:cd:0d:05:b7:67:66:
ee:91:88:3d:e7:21:0b:47:a4:bf:12:9d:97:95:f5:73:e6:59:
63:64:1e:35:a4:b9:13:e2:3b:7f:65:10:88:b9:ed:b5:69:77:
43:c3:cb:71:df:5b:99:ef:64:6c:f4:9a:95:2c:a2:84:b3:93:
69:0a:40:1e:5d:00:1a:4c:e0:89:91:77:62:b8:56:f2:65:c0:
c9:c5:3c:ba:0a:54:ca:1c:dd:3d:40:99:52:23:99:a1:3b:a0:
d9:92:8a:a5:89:c5:59:1c:9d:e5:ea:6f:89:55:ef:61:e8:ba:
81:3f:b3:48:e7:b2:cc:57:d0:03:f3:57:a6:85:d0:a1:40:36:
77:e2:9e:09:eb:b3:1b:7e:49:fd:a9:5c:47:b1:7e:35:cf:b7:
0f:c4:4e:2c:6c:9b:72:fa:e0:03:34:7f:a1:bf:0b:cf:c8:62:
03:cc:eb:fe:89:79:18:18:c8:cb:25:a9:73:de:23:62:18:26:
71:fc:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:41 2026 by rpki-client