
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa
File: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (raw, json)
Hash identifier: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=
Subject key identifier: 0F:97:FB:DC:B0:AC:F3:6A:10:6B:6B:B6:6F:FC:C3:09:76:A2:56:F2
Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial: 065D
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa
Signing time: Mon 30 Mar 2026 23:29:16 +0000
ROA not before: Mon 30 Mar 2026 23:29:16 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 55293
IP address blocks: 45.120.148.0/22 maxlen: 24
103.227.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1629 (0x65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Validity
Not Before: Mar 30 23:29:16 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cb074c-5849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:71:44:1a:d9:3d:31:44:2f:42:1c:f8:39:
eb:77:36:36:10:82:ac:a9:45:92:4e:9d:98:dc:99:
39:f1:7d:32:6f:c3:01:50:74:7d:f8:3c:61:4a:4f:
66:36:f0:63:cd:c1:b7:8a:26:b4:32:1c:18:fc:97:
2d:94:9f:ed:b2:26:83:a2:05:c2:11:cb:34:51:bf:
2d:da:99:06:2d:af:74:0b:12:56:05:d4:a5:7e:ce:
65:f4:4a:18:3d:9a:c3:29:00:f9:05:a7:40:c6:25:
c1:d3:6d:c4:62:b5:36:3e:10:53:ba:23:ba:71:95:
97:2c:8c:d4:f6:8c:22:18:4f:22:9a:ee:c3:56:03:
48:91:45:09:a4:27:29:bf:56:c8:ce:34:96:61:c5:
5c:c9:9b:58:e1:7a:78:1b:40:dd:12:43:21:2f:63:
94:08:8c:72:e0:5f:e9:27:f1:4d:a0:09:0c:03:33:
3e:60:a3:8c:e0:43:da:b6:5f:60:a9:e9:07:48:cb:
29:3a:7f:75:54:24:87:b6:ac:18:f2:5e:f7:f3:fc:
74:e1:88:4e:1a:ca:1b:6e:86:b1:ee:d3:47:a4:3d:
6e:c8:cd:92:c1:bf:5d:1d:47:09:68:6e:e2:aa:18:
7c:be:e9:9c:94:e3:68:60:ca:34:d0:f8:01:ac:37:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:FB:DC:B0:AC:F3:6A:10:6B:6B:B6:6F:FC:C3:09:76:A2:56:F2
X509v3 Authority Key Identifier:
keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.120.148.0/22
103.227.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:4f:0f:34:ff:b9:5e:6c:07:c5:80:dd:46:6b:5f:30:03:d4:
75:ee:a3:37:c5:33:d7:a1:77:33:0a:21:39:b2:8d:53:ac:fe:
f5:0b:9d:9c:7c:d7:68:bb:13:06:ef:ab:c5:4c:75:21:17:d3:
f9:72:44:9f:a8:b1:82:16:fe:47:30:0e:4b:84:b5:5e:68:c2:
5b:8c:75:11:c0:2c:4f:a5:09:18:2f:30:04:38:04:e3:ef:d0:
a2:fb:b8:f4:ec:29:7a:44:28:1e:60:4a:ac:37:c2:a7:49:b3:
7d:b8:8a:81:d0:0e:b0:b8:a4:51:9c:a5:7d:cc:2f:b3:08:21:
61:2a:ae:5d:4b:14:72:dc:b0:6e:96:1d:85:a9:e6:a2:96:68:
67:b3:5a:59:72:5a:74:8d:f5:62:cf:42:36:eb:12:e9:ea:5a:
71:55:7b:68:5f:85:32:7c:43:6f:05:5d:cb:9f:56:60:3c:bc:
af:0a:b9:5c:68:28:bc:b0:ac:0e:12:48:ba:1f:9f:e1:1f:3a:
45:39:f3:49:c7:77:c7:25:96:e0:8e:2f:3f:5b:25:36:12:98:
dd:00:61:c0:30:61:50:c3:30:8f:41:9b:7c:6c:49:04:1b:4c:
93:31:00:b2:52:f6:49:27:60:81:ab:d3:2b:22:85:3e:29:ac:
5f:83:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:49:48 2026 by rpki-client