
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/53E7583E3D0511EF99169B21C4F9AE02.roa
File: 53E7583E3D0511EF99169B21C4F9AE02.roa (raw, json)
Hash identifier: B5b4pHn3Q7lWdfVk+2VqlqlxqURQjUTmZj9KZGH2lHg=
Subject key identifier: 70:AE:3C:CC:90:16:9A:AA:D0:72:98:F5:93:3D:A0:57:98:84:E3:7B
Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
Certificate serial: 06B3
Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/53E7583E3D0511EF99169B21C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:34:57 +0000
ROA not before: Tue 16 Dec 2025 22:18:55 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134740
IP address blocks: 103.198.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl
rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715 (0x6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
Validity
Not Before: Dec 16 22:18:55 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43271-4b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:c4:59:4e:61:d3:c8:6a:0a:b7:92:6b:99:
ab:58:4c:0e:99:84:6b:d2:c7:4b:2d:81:94:8b:ca:
8c:57:5b:f9:6d:ac:1a:84:cb:d8:63:ee:d9:ce:d2:
b6:28:c4:00:76:ec:88:b7:96:6a:c8:54:05:ec:c1:
ec:96:96:aa:26:25:e6:f1:28:f4:2d:33:49:fa:8b:
40:a0:6a:b4:e7:9d:b0:87:19:45:27:88:62:6c:1d:
81:2c:ba:4d:25:1b:97:c4:30:7b:39:18:05:cf:b1:
a0:4d:28:9c:13:63:fa:26:99:5e:44:5e:f4:cd:30:
2f:7d:b2:71:c2:66:d0:27:82:b8:e9:a7:cb:cb:8c:
40:f0:5d:fa:07:d9:f8:86:32:22:bf:b2:cc:f3:bc:
82:09:f4:a1:2f:58:83:a8:a0:12:ab:ce:2b:ea:48:
7c:70:b0:f3:8f:d7:93:67:9f:5d:7b:03:a6:67:8c:
71:d2:a7:1c:4e:a4:fa:70:c5:db:54:b8:e0:bc:30:
31:65:1d:6c:7e:56:3b:31:44:88:f1:ef:a8:08:83:
7d:bf:0d:db:b6:0a:58:1b:17:53:b9:ad:e4:cc:1d:
bf:b2:d4:de:72:db:08:be:6f:fd:a5:a0:11:27:73:
eb:40:b0:90:ce:da:6d:78:8a:1f:3d:5e:10:01:52:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AE:3C:CC:90:16:9A:AA:D0:72:98:F5:93:3D:A0:57:98:84:E3:7B
X509v3 Authority Key Identifier:
keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/53E7583E3D0511EF99169B21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.252.0/23
Signature Algorithm: sha256WithRSAEncryption
01:75:d1:40:eb:e2:fd:35:87:a9:0e:b3:74:af:9e:d2:a0:b4:
75:47:bc:17:86:73:d7:f2:b1:49:68:16:fd:2c:93:31:3e:f4:
18:aa:3d:2e:bb:24:c8:69:21:f6:ec:a1:cd:bb:7c:85:9e:13:
7b:38:6a:d3:67:be:59:e7:e0:3a:45:bb:dc:c6:4b:cd:1f:d6:
b1:45:28:4e:da:c8:2d:3f:37:58:8e:f5:27:2e:42:1f:ea:05:
e3:b2:51:a4:b8:84:f0:f9:9e:ae:06:57:61:63:ec:85:cb:fe:
3d:d0:33:9c:ac:2a:43:f9:0c:94:27:8f:61:2d:d8:91:3f:4a:
56:7d:60:b9:97:ff:c4:02:34:c6:b4:ae:6f:3e:30:da:47:45:
63:b7:2a:4a:a1:b0:2a:8e:71:03:cf:11:ba:f2:08:6b:82:53:
8f:7b:78:b6:e6:2e:1f:7a:11:fb:08:56:97:85:c7:9f:00:74:
ab:47:35:50:e6:59:9f:bd:30:f6:ee:b5:0c:ee:b1:71:4a:34:
53:0a:4a:86:36:24:f1:05:9a:1e:e4:ab:16:80:67:4f:4f:64:
04:29:98:7b:c7:62:2a:19:8f:10:fc:79:5f:46:27:f0:90:f8:
65:e5:4f:1e:b3:42:98:6a:90:64:49:70:75:a6:bc:19:fd:34:
05:d4:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:28 2026 by rpki-client