
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
File: 8C5D4FF4766511EF8820F844C4F9AE02.roa (raw, json)
Hash identifier: R1p0DVRofqdeH6QxATqgcU+e98QOUDyy8PCaiyWmtec=
Subject key identifier: 85:94:B0:03:28:D9:10:58:38:3F:41:70:55:83:64:B2:FB:FE:51:E4
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0424
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:00:05 +0000
ROA not before: Sat 05 Apr 2025 01:06:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45250
IP address blocks: 103.183.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Apr 5 01:06:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42a45-15c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:58:97:8a:79:a0:49:39:99:e4:99:52:dd:ed:
58:56:5a:42:15:36:14:6e:41:f5:d2:da:fc:6f:99:
d6:ed:72:a1:09:6a:c0:8e:30:a7:93:61:d9:29:71:
ab:9d:c0:ea:dd:15:c0:4e:b3:0a:54:5d:a9:af:b7:
4a:6f:15:67:8c:7e:a8:1e:fd:c1:10:ae:55:c5:40:
cd:1a:fb:25:6c:04:aa:a4:d1:db:c3:3b:b7:db:b0:
54:07:86:ab:17:6c:da:39:09:bc:c4:5b:0c:f3:de:
80:71:4b:f0:5b:2a:a9:01:b0:95:b5:58:f1:41:36:
e2:33:83:0f:6e:99:b5:b1:0c:8c:cc:d8:e0:2d:fd:
86:44:ed:85:29:c3:12:f2:2f:b0:1d:5a:2d:22:7d:
1f:8e:4e:7f:27:e6:df:b0:c2:20:32:f0:65:33:c5:
ec:a8:84:e1:7f:57:45:f4:78:7b:a2:c7:7e:2c:fa:
71:42:03:88:8a:63:7d:70:0e:9f:c9:6d:73:12:f4:
48:e1:81:50:79:2a:a4:a5:a3:51:91:af:72:62:bf:
92:80:19:a3:8b:e6:22:a4:97:76:01:9e:29:0b:ec:
7f:ca:d0:78:0f:eb:87:c8:1e:3e:c7:44:62:6e:61:
ad:73:2f:51:d8:ac:34:21:b3:0d:3d:5a:fd:e1:de:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:B0:03:28:D9:10:58:38:3F:41:70:55:83:64:B2:FB:FE:51:E4
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3c:ad:05:ad:2e:c9:9c:0a:34:c5:7a:ea:58:6e:0b:66:93:
6f:af:48:85:4a:f6:31:a8:20:4b:dd:28:5e:81:42:1a:54:2a:
a8:15:04:a0:52:a4:c5:bf:b9:e0:42:ab:e6:0a:0a:e2:24:9a:
46:a0:21:c8:84:a0:83:82:1a:a4:32:3f:47:97:98:18:e8:4a:
01:0e:d1:c8:5a:09:d1:16:76:f7:35:db:ee:ff:f5:19:22:16:
24:75:d3:33:9f:7e:f6:42:ab:cf:b0:71:45:54:de:be:3a:48:
ee:3a:7a:fe:2a:d6:0c:e2:81:40:f5:f8:d7:a6:c6:5a:7b:5b:
af:84:55:7f:65:42:fd:84:5c:d1:3c:80:0a:a3:ae:56:e4:3c:
8e:49:d0:fa:aa:b0:f1:ed:73:79:7f:71:ab:4a:2a:7a:48:fd:
0e:49:01:32:39:e1:f5:fc:c5:93:7a:df:d3:bd:90:d5:34:b8:
c4:7e:03:20:a6:4d:65:cb:25:0f:0b:af:ff:64:ea:b9:46:13:
92:8d:d0:aa:af:44:6f:b2:ff:77:69:97:5c:d7:25:ff:4e:2f:
6a:a8:d8:da:f9:a5:c8:37:dd:25:9a:b8:f5:b2:77:fa:eb:1d:
5d:91:51:30:94:50:a8:14:3f:66:19:5e:8e:8a:2b:0e:6c:74:
84:be:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:25 2026 by rpki-client