
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
File: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=
Subject key identifier: E2:A3:B6:92:6A:42:4D:96:C3:8A:F6:21:8C:FC:3A:3E:5A:37:F8:49
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 04D8
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:21:29 +0000
ROA not before: Sat 07 Feb 2026 00:20:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136526
IP address blocks: 103.80.132.0/22 maxlen: 22
103.80.132.0/24 maxlen: 24
103.80.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Feb 7 00:20:06 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a483a9-7d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:ac:be:75:94:e2:85:75:15:db:11:6d:fa:
f2:88:00:b5:d4:fd:57:cd:bc:d4:4e:76:e3:8d:d2:
04:3c:3b:7a:c1:29:2e:86:b7:cf:81:e6:12:9d:20:
b8:01:a7:39:c0:43:17:e2:0a:da:13:70:8e:11:e4:
f5:62:b8:38:d4:cb:e5:d8:37:6e:f3:b5:39:59:82:
93:93:ed:23:b9:2f:34:ef:9a:dc:76:a0:69:d9:82:
fb:5d:c7:c9:53:3f:a4:0d:58:62:17:ef:c6:8e:45:
69:29:b9:48:23:b3:e3:24:fa:1a:d1:b7:66:63:71:
62:e6:56:40:74:1e:29:1e:f4:7d:35:e7:86:8f:02:
e3:3a:2b:09:40:f9:56:17:57:7d:7e:4d:a6:77:92:
54:f1:27:a2:0c:5c:73:ae:5a:8e:28:87:93:d8:93:
41:e8:af:20:8f:3e:e4:b2:18:1f:50:0e:40:89:54:
a1:db:e8:63:af:1d:54:89:75:f2:2a:0a:6d:eb:bc:
82:cf:81:ce:13:46:e0:4c:78:01:8c:44:28:91:e2:
fd:67:93:cd:e7:c0:79:ec:5d:8d:08:1d:be:e7:b4:
0c:23:6c:8c:99:3a:07:91:cd:53:80:54:e9:c4:d0:
de:6e:b8:fa:9e:04:5e:1f:4e:f4:33:f5:d2:73:49:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:B6:92:6A:42:4D:96:C3:8A:F6:21:8C:FC:3A:3E:5A:37:F8:49
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:8c:79:b5:6c:35:be:66:3e:e7:9d:e5:93:45:d4:3f:90:39:
1a:5b:0c:47:ad:31:d1:c7:cd:24:9e:de:35:89:0a:98:e8:ba:
04:21:f8:fd:13:7a:e4:7e:67:54:6d:fb:e8:fb:56:97:53:db:
c4:6c:57:51:8c:da:a3:92:52:5f:05:7b:32:e2:6d:73:47:82:
65:c4:04:33:85:c5:ec:d0:43:63:e3:63:83:a4:3e:2b:12:cb:
92:23:75:45:1e:7b:92:19:3f:ca:75:1f:8d:ed:be:0a:27:f3:
b2:c8:13:a4:71:99:5f:19:bf:6b:1e:54:d4:d2:7f:ae:2a:1b:
c1:b1:da:5e:e6:d5:59:8c:f1:9f:8d:25:52:af:21:fe:79:34:
f3:3c:59:ed:81:a1:e8:31:90:0a:b4:79:cd:99:b5:bf:d1:b9:
ef:50:bb:86:39:f3:db:2e:db:74:ab:46:5e:71:6d:f8:2e:78:
f1:ee:d2:a3:9e:14:a6:e4:56:d5:49:ab:ba:9e:3a:dc:56:54:
ed:1a:d1:01:f7:42:22:a8:88:44:d0:47:7f:08:00:f8:b1:bc:
ea:b9:9e:06:43:e5:c9:59:de:e8:cd:03:e0:dc:73:b3:44:af:
2d:b6:45:c3:82:10:17:ff:9e:3f:39:51:e1:99:e4:a5:4d:93:
4c:5a:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:24 2026 by rpki-client