
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
File: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (raw, json)
Hash identifier: w+dWahSYH/nwFg8ywBlpCH/uzBzau9TppkYVuitg46M=
Subject key identifier: D3:A7:AB:44:82:F1:1C:2C:F6:3B:4B:A3:F7:FC:10:97:A1:2D:60:04
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 378B
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:28:36 +0000
ROA not before: Sat 22 Mar 2025 15:00:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134489
IP address blocks: 59.103.36.0/24 maxlen: 24
59.103.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14219 (0x378b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Mar 22 15:00:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48554-8048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:cb:91:77:18:8d:ba:c9:9b:de:f1:ba:6b:
37:93:f1:3c:ea:5a:f8:dd:60:91:8c:bb:a4:ba:9d:
b9:68:62:08:bd:e2:3a:42:d8:0c:2a:ed:8b:fa:46:
6f:d0:51:37:c6:c4:0e:bb:be:57:78:27:61:78:e9:
a8:28:35:29:4a:f7:a9:73:1a:49:fa:6f:54:e6:c6:
ac:56:27:49:e8:fe:6b:51:15:bd:ef:1c:c0:90:4b:
f5:08:86:14:6f:82:e7:73:96:65:b2:c9:5d:14:af:
e8:77:a0:52:08:fc:95:0f:a1:04:ce:28:35:f3:46:
61:fe:61:e7:1d:4c:53:70:a1:52:a0:3a:6a:1f:5c:
64:c8:ab:ea:4c:13:09:3e:e4:c6:80:91:b6:90:4e:
e4:81:aa:f1:3b:74:52:23:59:09:61:b8:37:7c:3f:
ee:38:1f:92:9a:09:b2:48:ab:d1:89:e7:8f:fc:37:
d2:40:a1:bc:a2:05:a3:f2:46:88:8b:88:c8:0c:f7:
c0:f4:e4:dc:bb:1c:b9:4a:63:44:f6:da:30:0d:8a:
9e:bf:14:89:45:b8:fc:68:7f:39:61:ba:f8:39:4b:
4f:b3:0f:58:2d:aa:62:7f:db:91:47:87:0a:05:32:
7e:4e:b4:cc:87:65:6a:85:b7:e4:28:64:bf:1d:73:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:AB:44:82:F1:1C:2C:F6:3B:4B:A3:F7:FC:10:97:A1:2D:60:04
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.103.36.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:1b:22:87:f7:7a:93:89:03:a7:c5:7f:42:5a:ca:dd:2b:74:
50:fe:f8:49:6c:9f:6a:83:82:a9:20:86:d1:5d:0a:c9:6c:34:
0f:b0:1e:d9:0f:c9:1b:70:48:ae:10:62:9f:4f:d5:ea:cf:e9:
64:93:ca:f5:7a:94:89:44:eb:c5:ec:d0:bd:a0:c1:d2:1e:d5:
6f:1a:54:85:ed:b1:a3:95:f0:b6:8d:08:99:22:39:e5:4f:72:
03:ed:a1:6e:99:63:e4:dc:02:2d:05:0a:6a:3b:e0:61:30:2f:
5f:b4:be:31:e9:4e:82:3d:e8:30:c1:b9:a0:4c:90:15:81:32:
7e:db:84:96:3b:bb:8b:7c:f6:3b:f8:e3:d6:6c:e4:cc:1e:cf:
d4:7d:10:63:0f:26:5a:ce:66:e6:1d:5d:11:d0:9c:51:de:74:
74:75:31:56:c1:88:d0:35:03:1d:c7:f4:18:32:61:76:68:94:
d8:34:c6:37:d8:d1:80:71:a9:a6:fb:40:5d:2d:26:45:06:10:
17:65:03:3a:c5:c8:1d:ba:d0:7c:0e:45:7c:20:54:d6:a0:05:
6d:44:d8:9a:17:07:5f:f6:7a:2c:0a:4e:94:e4:3e:85:24:15:
c8:23:a1:33:03:b7:3e:8a:03:c4:27:fa:65:80:8c:af:4d:f2:
af:5b:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:15 2026 by rpki-client