
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
File: 5283F92CF54511EF9907BE10C4F9AE02.roa (raw, json)
Hash identifier: gfj1R11Mpbbs83ejkJtVj4rQi5q0YUJRvMfHzMv20uM=
Subject key identifier: 10:60:7E:4D:08:43:8C:7A:03:58:EB:6C:38:01:EC:67:39:89:90:5B
Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Certificate serial: C3
Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:05:15 +0000
ROA not before: Mon 31 Mar 2025 07:02:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.227.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Validity
Not Before: Mar 31 07:02:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3f33b-a9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:30:1d:ba:aa:c6:1b:ca:87:82:57:52:ec:
b5:9c:72:ca:10:e4:ee:4c:0f:0a:2f:2c:59:14:d1:
4e:72:2b:a5:55:94:2e:4a:6b:79:6c:f6:b5:38:af:
d4:c7:7f:f0:8b:c3:09:bf:88:e4:73:9a:04:44:d0:
10:b6:f9:d5:46:bf:0c:f8:d4:b1:29:a9:57:69:4b:
8b:86:4c:ad:0c:29:60:d6:2c:ea:26:1a:58:a1:76:
11:41:39:32:27:c3:37:4c:05:a1:fc:b4:5a:c0:78:
24:68:8c:2b:09:bf:ed:ae:3d:5f:aa:1e:e6:3d:47:
a0:d0:40:55:da:ae:17:e1:c9:92:f5:73:9b:69:db:
91:6b:4a:8b:61:29:20:ba:9f:bf:3c:d0:48:df:b5:
e2:10:a5:2d:ca:da:5b:89:5a:b2:0a:a1:06:53:f8:
c2:54:34:60:6e:07:1f:95:87:cc:ef:2a:9f:23:57:
41:53:4f:c8:db:db:71:62:02:82:51:0e:57:e2:5c:
3f:db:f1:9f:42:04:dd:0d:4c:30:b9:b6:8e:5b:73:
0c:1c:98:6c:12:af:06:be:ee:99:53:d3:32:20:f1:
a6:9a:83:a5:d5:d8:67:62:f1:9c:e0:5c:02:6e:5b:
66:31:97:1a:fe:0d:f7:b5:f8:ec:06:89:96:c3:7e:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:7E:4D:08:43:8C:7A:03:58:EB:6C:38:01:EC:67:39:89:90:5B
X509v3 Authority Key Identifier:
keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.227.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:31:de:75:03:70:56:af:e9:e3:14:61:2d:df:3a:f5:e3:ba:
d5:59:95:e9:4f:b0:08:9b:ed:f2:9d:2e:b2:6c:69:41:44:71:
ba:c6:bf:db:6e:f5:ac:b7:9c:55:55:74:4a:81:4a:a8:bb:e4:
09:27:a6:5c:c9:cb:db:a2:49:b7:ba:6d:0b:9d:da:91:ee:67:
e3:14:0c:e3:4f:d1:3b:f4:99:ce:0c:e8:e1:55:bf:ad:58:4a:
1d:e7:3f:50:29:a9:f5:84:f7:6e:69:53:33:99:ed:e5:67:1f:
3d:d7:3f:49:db:2b:32:16:74:d2:ef:36:ac:9d:d7:11:c7:01:
83:64:ce:1f:78:f6:02:92:1d:d1:ef:5f:4e:f7:36:2c:9b:65:
16:f0:63:8d:77:b7:dc:e2:8f:13:05:cb:ff:1d:bc:38:67:f9:
49:f4:a1:5d:bc:f7:64:89:37:3b:e0:50:f8:3c:ae:38:a8:fc:
c8:bb:8e:fa:72:b0:51:68:2d:60:69:ce:e4:ac:f1:5a:90:cd:
cc:0b:d9:67:ce:f5:bd:fd:18:1f:c2:7f:cd:ed:20:51:26:33:
2a:ca:57:29:b0:6a:8a:81:01:8c:fc:da:92:41:74:71:f2:63:
e8:90:49:fc:6a:5d:7f:32:80:d7:b1:76:0b:46:28:2a:5d:56:
67:0f:20:28
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMzQUExMTAvBgNVBAUTKDBCNDJBODQ0MEYxQThFNjdGREU1NUU0MzY1QzdFM0ZC
OUM2Q0ZFQzMwHhcNMjUwMzMxMDcwMjUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjMzYi1hOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm+UwHbqqxhvKh4JXUuy1nHLKEOTuTA8KLyxZFNFOciulVZQuSmt5bPa1OK/U
x3/wi8MJv4jkc5oERNAQtvnVRr8M+NSxKalXaUuLhkytDClg1izqJhpYoXYRQTky
J8M3TAWh/LRawHgkaIwrCb/trj1fqh7mPUeg0EBV2q4X4cmS9XObaduRa0qLYSkg
up+/PNBI37XiEKUtytpbiVqyCqEGU/jCVDRgbgcflYfM7yqfI1dBU0/I29txYgKC
UQ5X4lw/2/GfQgTdDUwwubaOW3MMHJhsEq8Gvu6ZU9MyIPGmmoOl1dhnYvGc4FwC
bltmMZca/g33tfjsBomWw37eZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBBgfk0I
Q4x6A1jrbDgB7Gc5iZBbMB8GA1UdIwQYMBaAFAtCqEQPGo5n/eVeQ2XH4/ucbP7D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzNBQS9EQzBGM0VEMkY1
NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWptZjk1VjVEWmNmai01eHNf
c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19zTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTMzQUEvREMwRjNFRDJGNTQ0MTFFRjk3QTQwNDEwQzRGOUFFMDIvNTI4M0Y5MkNG
NTQ1MTFFRjk5MDdCRTEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+MPMA0GCSqGSIb3DQEBCwUAA4IBAQBaMd51A3BWr+njFGEt3zr1
47rVWZXpT7AIm+3ynS6ybGlBRHG6xr/bbvWst5xVVXRKgUqou+QJJ6Zcycvbokm3
um0LndqR7mfjFAzjT9E79JnODOjhVb+tWEod5z9QKan1hPduaVMzme3lZx891z9J
2ysyFnTS7zasndcRxwGDZM4fePYCkh3R719O9zYsm2UW8GONd7fc4o8TBcv/Hbw4
Z/lJ9KFdvPdkiTc74FD4PK44qPzIu476crBRaC1gac7krPFakM3MC9lnzvW9/Rgf
wn/N7SBRJjMqylcpsGqKgQGM/NqSQXRx8mPokEn8al1/MoDXsXYLRigqXVZnDyAo
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:13:48 2026 by rpki-client