
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa
File: 59BC86E0548711EB89568B65C4F9AE02.roa (raw, json)
Hash identifier: Pp0Q2Rt/MPS3CBGeHmja8TJHMrNs3vbhSj9LYTXUoPs=
Subject key identifier: 2C:0F:C2:D3:70:E1:5E:AF:C0:A9:5D:29:8D:64:09:DF:2B:6C:ED:96
Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial: 0773
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:42:31 +0000
ROA not before: Sat 08 Mar 2025 22:13:23 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 31972
IP address blocks: 103.148.202.0/23 maxlen: 24
2405:d6c0::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1907 (0x773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Validity
Not Before: Mar 8 22:13:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40a07-8a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:6d:08:53:f8:13:7f:6a:68:f8:6c:6e:31:
9c:08:7d:b4:7a:17:4a:16:3a:cc:fb:b5:e5:dd:5d:
6b:d4:94:76:35:d5:75:13:d3:c5:8a:dc:4d:f0:8d:
f3:52:bd:ec:39:34:d4:05:02:09:64:23:8d:45:49:
36:7c:cc:f0:2b:19:15:91:39:16:fa:79:7c:a6:05:
09:46:a8:7b:fc:b1:7f:46:22:31:ce:32:5a:75:3b:
cd:65:c0:5e:39:fc:13:d1:4b:12:d8:2e:89:4f:34:
d9:fd:c2:89:d1:be:2d:73:43:55:16:94:9a:c9:2a:
9e:58:cd:f0:9c:be:1d:b0:06:04:4b:d5:60:cc:d3:
d8:52:f9:dd:7f:b6:ec:81:6c:85:fb:32:dc:91:30:
0c:3d:11:44:3f:66:27:0f:f9:e4:df:e3:bf:f4:94:
42:8f:cf:cf:2b:11:71:e8:68:65:77:74:2a:3f:6b:
09:e0:f5:2a:a3:e9:c6:2a:2d:e1:e6:4f:d0:47:d4:
a8:a6:a6:5a:b1:4e:eb:f7:21:1b:d2:d4:72:5c:0a:
04:d6:52:3b:ee:e9:3f:31:55:6e:2d:78:71:92:e1:
4d:67:9e:18:1c:7f:06:d2:04:d3:56:1a:56:4b:c2:
f9:cd:b2:7d:85:06:19:21:2b:8e:da:06:ee:af:57:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:C2:D3:70:E1:5E:AF:C0:A9:5D:29:8D:64:09:DF:2B:6C:ED:96
X509v3 Authority Key Identifier:
keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.202.0/23
IPv6:
2405:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
23:74:e7:98:3e:4a:bd:31:d3:fd:e1:1f:ad:b2:bc:7a:d8:6f:
8b:37:64:16:65:ea:a3:7f:3e:b1:51:ac:0b:ed:b6:4b:05:35:
35:ad:9b:92:2d:ea:9e:92:8a:68:26:de:61:21:46:57:97:9d:
5e:3d:46:be:f4:68:5e:60:3d:88:68:de:ab:c1:2d:cb:fb:36:
b5:d5:fa:dd:d0:fe:62:8a:2e:b1:0b:34:6c:c3:9b:bd:b8:71:
21:d1:3b:fc:98:db:af:29:54:67:71:17:a6:53:83:15:e7:91:
a3:11:d1:4b:38:a7:f4:83:ba:db:ed:af:98:f1:ba:79:8d:9d:
fd:93:30:d0:b0:ec:68:2b:bc:ec:51:9a:73:9b:11:47:e3:b1:
fb:33:bf:30:c8:aa:a0:75:10:6b:36:27:c4:35:9e:fe:ac:c7:
a6:d2:75:b3:66:d1:1e:67:af:75:75:a9:5d:08:ca:ff:a9:ba:
28:60:b5:fc:c5:c3:31:6d:b5:c7:ef:bb:81:fe:13:bf:2c:de:
36:1d:39:93:6b:03:6a:90:00:24:9f:4a:27:56:5a:7e:4b:fd:
37:90:3f:38:cb:37:90:59:d2:70:f1:6d:14:8c:1c:d3:a2:5f:
c5:ff:b3:48:ba:53:6b:a2:d4:6f:a4:d5:c5:1b:d5:e6:38:5b:
1b:fe:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:01 2026 by rpki-client