
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa
File: 026537E8861E11F0BC465F85C4F9AE02.roa (raw, json)
Hash identifier: jND/P0to+up6kdOpyJDFygxyQBhs5JfYLpar96q+qQI=
Subject key identifier: 02:54:05:3D:40:74:D3:06:22:33:C9:40:09:42:72:73:DB:5E:F6:AF
Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial: 028D
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:10:26 +0000
ROA not before: Mon 03 Nov 2025 02:17:21 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 149296
IP address blocks: 103.96.1.0/24 maxlen: 24
113.212.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Validity
Not Before: Nov 3 02:17:21 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48112-69c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:54:9a:fe:9c:d8:25:6e:31:00:19:61:0c:
61:85:59:79:f2:e7:b1:00:34:ca:d0:06:61:2b:dd:
1f:69:5d:36:a6:c5:47:43:2b:9f:b1:d7:72:27:90:
5e:8e:ab:ee:8d:bb:9c:14:ca:9c:fe:0e:e3:28:e7:
14:7a:f5:bd:df:06:2f:d5:e8:29:49:72:a2:dd:57:
85:8b:7e:5e:2c:da:a0:27:63:91:f3:08:d5:c3:2b:
7b:ce:0c:73:19:7d:d6:dd:eb:28:a5:8a:e7:13:54:
a7:7f:21:0a:27:39:32:e6:f4:28:10:72:0e:ac:6e:
ae:b9:e3:5e:88:d9:3d:b1:bf:67:0e:ad:cf:66:64:
2b:06:88:22:8e:b9:f7:1f:c0:04:e2:e2:23:d5:bb:
15:b8:6f:fe:c1:43:7c:1b:b1:77:f4:b1:3b:25:c7:
0e:c2:3e:2b:9f:48:ce:ad:d5:61:03:48:6b:57:32:
26:42:3c:ee:dd:7f:1a:be:d0:e6:3d:5a:b0:09:48:
59:79:6c:90:98:fa:30:47:ab:1d:6e:f1:33:e2:29:
3d:3d:4a:44:78:a2:8d:c5:3b:67:d8:b9:22:49:e2:
4a:30:ef:54:71:4f:3f:13:04:ed:fe:c5:b2:d1:2f:
d3:ed:c1:d8:31:b3:3b:4f:e8:fe:7f:50:70:8b:ec:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:05:3D:40:74:D3:06:22:33:C9:40:09:42:72:73:DB:5E:F6:AF
X509v3 Authority Key Identifier:
keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/026537E8861E11F0BC465F85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.1.0/24
113.212.88.0/24
Signature Algorithm: sha256WithRSAEncryption
61:22:9e:28:cc:2e:b5:70:e0:71:d7:17:36:97:9c:1c:ac:96:
52:66:73:97:eb:23:b9:52:f6:61:7b:43:47:85:cd:41:e9:58:
b8:9b:49:d7:09:30:9f:f1:80:cd:3b:c7:b8:d7:57:3f:25:29:
b0:6c:5d:bf:52:0f:d7:bb:55:12:56:de:08:7c:13:e7:cc:40:
1d:1f:b3:e2:09:bb:64:a5:01:76:dc:06:2b:1a:aa:72:8a:eb:
6e:8f:de:3c:63:87:07:10:69:b1:73:4e:ef:5e:8f:79:90:1e:
36:cd:d4:ab:8b:28:52:23:0f:1a:c1:cd:f0:f2:a4:b8:77:18:
85:c9:65:57:ec:2c:8b:1f:ee:cc:2e:b2:cd:e3:4d:c0:94:61:
66:c1:47:49:1b:6b:bf:50:06:41:d9:dd:0d:d2:86:30:07:c2:
6b:ad:94:ff:5e:bc:1b:5e:11:9a:0d:d4:3a:ff:b4:a8:46:13:
a8:30:b2:f9:0c:ef:72:7a:31:a6:ee:36:34:21:22:5e:15:57:
4c:f5:97:bb:50:cb:f6:0d:05:4a:18:4c:0f:be:5b:87:cb:1d:
25:ef:77:d3:1a:31:30:51:1d:2f:8e:eb:1a:02:28:93:a0:2f:
36:cd:1d:7e:a8:bb:e4:3e:e8:cb:31:6c:4e:98:01:e1:8f:30:
94:f3:7f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:20 2026 by rpki-client