
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
File: 594ECE96804011EA9B73BC62C4F9AE02.roa (raw, json)
Hash identifier: v9TfSSP+kunYxdHfUTr2uNgEHVv2unfZ/Ty+fgBrmzc=
Subject key identifier: B4:D4:AE:57:D4:57:52:BB:5D:9D:F3:2D:66:E3:B1:EF:34:99:F8:90
Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial: 0A5C
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:30:32 +0000
ROA not before: Tue 04 Mar 2025 20:58:31 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 63950
IP address blocks: 103.49.16.0/23 maxlen: 24
2001:df2:3c00::/45 maxlen: 46
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2652 (0xa5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Validity
Not Before: Mar 4 20:58:31 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40738-3778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:cb:7d:a2:1a:15:fd:2a:99:d1:f4:3a:ab:
99:e7:a7:fe:ce:f5:bd:e2:f6:3c:11:f3:cf:73:e6:
a1:b4:0c:21:a3:32:1a:7f:fb:6a:a2:b0:5b:1f:19:
3c:26:32:8a:5b:76:08:78:c4:f7:3e:32:98:76:39:
47:c9:64:fc:bd:ec:2d:3f:b4:e9:53:81:da:7e:fd:
4f:cf:c2:3d:b7:11:03:91:6f:2d:c6:bf:6d:87:a5:
c6:7f:77:6a:3e:dd:d7:2f:82:f7:db:a4:76:90:da:
21:e3:1b:15:93:06:84:ed:e0:ce:7b:e1:ae:06:ce:
e5:fb:83:8f:9a:c4:54:60:75:65:a0:ac:cc:b6:2d:
8c:14:83:88:17:a7:c8:f2:df:bd:b8:1d:15:c6:00:
75:c2:a1:ea:29:33:c5:5b:23:76:a4:9b:88:8b:37:
c2:0d:14:82:60:ea:d9:f8:b7:54:a1:d1:7f:8f:a0:
5d:35:de:23:6a:f6:65:02:42:06:3a:6b:ba:28:f0:
2f:97:54:12:84:a8:0d:9b:00:8b:a3:4d:a8:0e:22:
40:5e:16:0e:f6:d6:97:70:9b:d3:03:9f:f3:95:4c:
a3:b6:67:2f:4d:c9:f1:b5:c0:44:7b:bc:5c:50:51:
6f:d5:b0:19:14:55:a0:58:52:20:dc:6f:1f:54:1a:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:AE:57:D4:57:52:BB:5D:9D:F3:2D:66:E3:B1:EF:34:99:F8:90
X509v3 Authority Key Identifier:
keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.16.0/23
IPv6:
2001:df2:3c00::/45
Signature Algorithm: sha256WithRSAEncryption
d3:ef:a6:d1:72:62:f5:b5:7c:20:4f:3b:2a:cd:ff:86:fe:1c:
16:28:fc:da:36:2d:d0:60:3e:4b:81:e2:81:3e:69:3f:ad:a1:
e4:2f:f7:e4:a4:47:cc:c4:0c:7f:1f:39:e1:a7:49:82:64:37:
94:82:5b:4a:8d:a3:bf:4c:42:3a:2e:9c:e8:9c:74:e6:e1:e9:
e7:d7:ca:d2:d8:0f:e3:7f:10:15:f0:ec:7e:d5:63:c8:f1:25:
ef:04:46:e5:58:d5:e1:39:b6:80:98:92:8c:77:01:0a:2e:5e:
9e:12:88:d5:e3:b4:43:23:96:1d:24:9d:71:9a:83:9e:5e:9b:
c9:a2:a6:40:49:3c:f3:8e:f9:4c:9b:ac:9d:e9:74:f4:b8:f5:
7f:2c:e3:ed:92:d0:7f:43:43:03:ae:9c:30:eb:70:94:82:89:
e4:ee:b0:cc:1b:92:fb:36:fe:ec:f1:62:a0:ec:eb:f6:76:bd:
97:9d:53:2d:2e:1b:01:28:14:eb:ac:9f:7e:d5:c9:24:14:56:
0e:8f:23:3d:ab:bf:26:fa:bf:7e:60:ae:60:d4:b5:e1:07:4f:
c3:ba:fd:c9:13:7d:a1:c4:3a:8e:cc:d5:82:9a:9a:73:00:85:
5d:04:df:e3:e3:56:82:86:9c:31:93:7e:bb:b3:de:14:a3:d1:
f4:40:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:27 2026 by rpki-client