
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
File: 591B98DE548711EB89568B65C4F9AE02.roa (raw, json)
Hash identifier: qR0zYrZcU8j5K8WV7bPn4xhqvhYEokgOOEVOXblOyTg=
Subject key identifier: 34:F5:04:8B:A6:E7:9C:50:54:A7:9C:0E:94:79:4C:50:F7:02:2B:E3
Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial: 0772
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:42:30 +0000
ROA not before: Sat 08 Mar 2025 22:13:23 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 132369
IP address blocks: 103.148.202.0/23 maxlen: 24
2405:d6c0::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Validity
Not Before: Mar 8 22:13:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40a06-21d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:7e:46:f1:77:b8:cc:2b:26:8f:bc:93:91:
71:c9:82:92:ef:71:10:ef:f3:6b:6e:1b:a5:eb:de:
41:03:42:5c:d7:66:b7:55:d4:69:bc:82:83:42:56:
9e:38:01:8e:89:cb:79:3b:cd:be:7c:c4:27:70:29:
ca:1a:68:54:c0:eb:ef:8a:ca:a6:19:42:b3:b4:8c:
5b:74:31:6a:ba:d5:67:a2:e9:33:7c:2e:e7:dd:ad:
b4:7f:ad:15:79:08:3c:9f:78:4e:66:20:b9:8d:17:
b5:d0:f5:8d:4f:80:a7:5f:69:21:6c:d7:55:4c:ba:
ed:c9:98:d8:80:7d:6b:b2:63:80:cd:e2:d1:b4:40:
fc:f2:5f:cf:68:2e:49:6a:49:2c:4b:c3:68:12:55:
3b:8c:9d:39:f1:3f:b0:87:80:de:d3:49:9f:cc:e5:
d2:1e:5b:a0:04:e5:24:2b:58:54:f7:3c:6c:65:4b:
39:55:9d:b0:49:06:e0:2e:a1:19:ab:28:5e:38:59:
2e:1d:ac:ab:99:d9:4a:02:d6:15:57:31:1a:b9:26:
da:30:ff:be:dd:7d:e8:7b:b9:e5:99:1d:84:48:d7:
f4:c8:40:39:48:a1:66:ba:a8:b7:de:82:9f:b6:43:
c3:17:53:e3:25:91:b7:27:d7:c3:77:03:36:5d:23:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F5:04:8B:A6:E7:9C:50:54:A7:9C:0E:94:79:4C:50:F7:02:2B:E3
X509v3 Authority Key Identifier:
keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.202.0/23
IPv6:
2405:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
23:6d:20:02:99:e5:02:01:58:b4:a1:fc:a3:6c:01:4a:42:5e:
69:ca:1c:33:e8:38:4c:a0:e0:d7:d1:73:4c:f3:5a:43:05:17:
7b:73:48:51:ad:f7:3a:b1:69:e1:70:30:f3:d4:43:cf:64:8a:
af:39:e6:22:dc:7d:25:24:73:02:22:94:f9:25:72:9f:cb:15:
15:97:a9:9b:d2:49:dc:b1:a4:68:e2:e0:b3:94:95:13:d9:96:
ef:36:da:07:cd:f6:20:cf:26:e4:b6:1b:e4:74:50:8c:8a:e3:
11:fa:95:c8:1a:e5:79:d4:b1:7b:92:9f:a4:e3:52:fd:04:18:
c3:80:3b:31:67:30:fa:9e:b9:df:ce:7d:e9:76:c8:48:9e:3a:
8b:10:b9:30:62:d2:31:10:7a:71:de:c4:41:a6:1c:cf:c7:07:
2e:86:94:af:7e:40:c9:9c:6e:c0:fd:ab:c4:55:a4:ae:98:f6:
8e:2f:87:a9:3f:8f:fe:d2:e6:e9:e3:97:59:e8:84:47:bf:33:
20:7c:ad:53:74:49:44:01:8f:47:37:f6:f4:44:ca:0e:27:6e:
d8:19:70:4d:d7:6b:d6:70:be:4d:9a:8d:1f:5f:6b:56:77:3d:
75:82:a5:ea:1a:6d:17:a3:56:df:a8:18:e7:0f:c3:3c:7e:49:
e4:f7:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:22 2026 by rpki-client