
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/CBA65F7C4AB411E887FB7E29C4F9AE02.roa
File: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (raw, json)
Hash identifier: 3tk4QPsr03ML5SuwBLsP7qy8OTNJWI4sJQvwqcILBHA=
Subject key identifier: ED:3C:AD:CA:43:2C:BF:A4:ED:F4:19:9B:55:E1:3B:82:D3:1B:8B:78
Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB
Certificate serial: 15A9
Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/CBA65F7C4AB411E887FB7E29C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:31:06 +0000
ROA not before: Thu 26 Feb 2026 17:14:35 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134790
IP address blocks: 103.109.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl
rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5545 (0x15a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB
Validity
Not Before: Feb 26 17:14:35 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a45bba-0013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:85:1c:47:28:c4:08:1a:c7:5e:9f:ec:dc:
54:2a:08:b2:a8:36:b2:ae:3b:50:b9:f7:75:6f:fb:
9a:41:93:03:29:51:40:3a:2c:7b:6e:49:54:0f:71:
49:11:f1:93:ab:94:da:54:8b:b3:4d:05:b7:7b:df:
87:0e:cf:46:98:21:ad:39:43:08:08:e6:49:dd:84:
8d:5d:4c:36:5c:7f:44:23:58:c5:22:de:8d:08:4b:
f3:58:0c:55:bc:f7:a7:06:9c:c2:5e:2c:98:f8:d3:
fe:b1:06:75:55:2c:4d:d2:9d:14:63:06:27:f0:26:
bb:af:29:b9:87:3d:04:bc:c4:1c:3f:7a:2e:cd:ca:
97:67:fd:be:5b:a0:6d:d2:a7:8b:fc:7d:e8:08:bc:
cb:f0:4e:4a:d4:57:d2:07:70:40:16:14:f1:c5:e7:
da:dc:e9:5f:2c:c8:6c:91:84:3e:b3:f8:9e:56:b2:
27:ef:a3:69:6d:3a:e0:7f:bc:a2:cb:10:57:29:b9:
98:35:cd:80:33:42:40:a0:4d:d2:a4:6f:38:ae:ad:
40:67:91:93:38:d2:65:b8:bd:b1:70:06:d6:7b:6f:
0c:3d:fe:52:08:11:e8:88:cf:f9:5c:07:2d:08:53:
7b:59:dd:dc:78:44:26:51:6e:66:a4:4a:32:c3:0f:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:AD:CA:43:2C:BF:A4:ED:F4:19:9B:55:E1:3B:82:D3:1B:8B:78
X509v3 Authority Key Identifier:
keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/CBA65F7C4AB411E887FB7E29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.52.0/22
Signature Algorithm: sha256WithRSAEncryption
27:42:4b:ec:6d:0a:b1:b9:da:c8:1b:2a:dc:73:58:23:48:e3:
fd:15:f9:2a:10:b6:30:8b:9b:0b:90:18:36:f0:59:de:c4:bc:
d3:b3:8c:82:16:4a:f1:0d:0e:03:2a:be:b3:0c:be:2b:f6:72:
db:b8:3a:6a:3c:3a:55:c1:f3:68:c9:df:41:1a:7e:be:87:e3:
69:97:ea:b4:3c:a8:ab:76:40:5c:79:07:89:18:75:c1:ae:f2:
24:75:18:62:c6:56:b0:5e:1c:52:c0:68:c5:3c:58:8d:88:de:
1f:99:38:b0:30:52:ca:e6:4c:02:00:ae:33:0b:34:a3:a8:1c:
00:fb:a5:74:b4:b5:d9:1e:7b:bf:7f:da:bb:d2:0a:8e:d9:ae:
d7:11:56:44:51:fa:15:af:c9:78:71:44:e4:f4:02:74:61:9c:
43:75:86:e3:7b:3a:3b:d8:1c:77:dd:9a:64:92:de:39:db:b5:
d5:e8:19:bf:ee:71:1e:08:9d:34:35:54:2c:a4:ff:fa:42:a8:
f8:43:dd:21:8d:30:05:42:74:93:2b:23:e3:ad:8b:67:8e:bd:
fd:c9:ac:d7:74:ba:88:c8:b8:21:62:4b:2e:3c:07:e8:b8:98:
9f:01:a9:0b:9f:bf:c6:8d:d5:ca:43:0c:30:0b:b9:f2:96:5f:
7b:58:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:01 2026 by rpki-client