
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5B17230CDE9B11EC9AE23269C4F9AE02.roa
File: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=
Subject key identifier: D4:14:C8:C1:B4:4D:29:FA:8D:51:72:38:EB:59:E1:51:9B:86:69:84
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 04DC
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5B17230CDE9B11EC9AE23269C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:21:32 +0000
ROA not before: Sat 07 Feb 2026 00:20:10 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 3786
IP address blocks: 103.80.133.0/24 maxlen: 24
103.80.134.0/24 maxlen: 24
182.161.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Feb 7 00:20:10 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a483ac-ed7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:3f:9b:91:04:35:f7:0a:e6:b4:a3:9e:dd:
51:47:38:f2:f9:3f:75:ee:cf:e5:0a:06:33:32:b9:
7d:86:ae:26:46:b4:ae:50:a6:de:d8:f0:dc:c7:a8:
d9:84:6b:ad:3c:ad:2f:af:30:e3:a9:c7:9e:42:69:
61:94:69:c1:b0:91:f2:e8:cb:6b:4f:1a:00:56:ee:
3a:56:9a:93:d5:fa:a8:90:3c:47:28:2d:5b:9e:9c:
63:6b:78:4c:0a:fd:08:bf:24:88:fd:99:d0:c7:af:
6b:fd:8b:a8:45:fb:5c:a2:47:26:75:4c:a4:42:e1:
6e:09:d9:0a:70:d1:e9:63:b0:63:23:cd:89:f2:a1:
bc:10:bd:8e:9c:8b:e9:e7:5a:8c:a9:6e:40:35:e4:
ec:07:06:be:d5:f5:58:08:2f:09:8a:d0:44:76:e6:
39:2a:d4:d7:cf:10:97:35:58:ae:03:6f:b0:0d:2c:
25:45:f8:3a:05:a6:18:9e:b3:38:62:e5:cc:66:fa:
7a:b0:91:ed:9b:0c:88:7e:d1:59:ee:bd:f7:dc:88:
e1:ef:21:bf:c3:80:43:ba:d9:04:5a:f8:ae:4d:52:
e0:d9:74:74:fb:d9:04:e7:ce:a3:db:a8:37:49:db:
43:28:54:c8:be:2c:c1:4b:d8:06:d6:9b:12:c6:f4:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:C8:C1:B4:4D:29:FA:8D:51:72:38:EB:59:E1:51:9B:86:69:84
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5B17230CDE9B11EC9AE23269C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.133.0-103.80.134.255
182.161.66.0/24
Signature Algorithm: sha256WithRSAEncryption
10:07:f3:bb:e5:18:69:af:b7:38:e6:6a:b5:0c:a0:6d:b2:85:
0d:24:68:0f:aa:12:e0:4d:35:d4:94:36:f3:c3:67:3f:00:cf:
d3:80:f0:3d:aa:cb:ca:f0:c9:31:8d:c0:9b:00:99:81:26:aa:
fc:4c:9c:4a:24:bc:75:42:6a:0e:dd:77:78:a2:e7:c4:1c:0e:
2a:a6:ef:4d:74:55:8d:0b:ba:58:07:2a:70:56:74:af:0b:a8:
9e:e7:02:62:48:70:95:6c:5c:80:db:28:1b:d8:17:1c:68:8d:
b2:b7:43:f4:26:04:97:98:e5:12:7c:f5:ac:4e:5d:d6:af:d1:
08:b3:71:ea:00:f3:12:b4:8d:74:9d:f0:e7:68:cd:58:1e:67:
0e:47:39:1b:b5:fa:b7:54:46:b2:12:ea:b9:56:9d:b2:2a:71:
27:c1:cb:be:d3:ff:65:a6:36:ad:a3:7d:92:fd:b5:ba:82:18:
31:c8:49:72:2e:eb:f0:ab:61:27:ce:8f:8b:01:b9:bf:f3:47:
7c:d6:ae:f5:29:d4:8d:89:8b:b5:0c:a2:63:c9:b3:8d:60:2a:
1e:45:6b:e5:24:38:c0:b7:72:7f:93:c5:a6:18:9d:0e:66:7f:
4f:80:ea:7a:af:97:6a:31:63:76:ca:fd:28:50:11:4b:e6:c6:
df:a8:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:39 2026 by rpki-client