
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa
File: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (raw, json)
Hash identifier: jvV2Z+fiyEhetDjklhcAMgGtL3vvbGgKgdynXMsgt90=
Subject key identifier: AE:BA:ED:CE:CC:F3:33:B2:46:E0:6A:B8:D5:58:F3:B8:45:76:A4:18
Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial: 0229
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:33:06 +0000
ROA not before: Thu 03 Apr 2025 03:30:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139692
IP address blocks: 103.110.182.0/23 maxlen: 24
2001:df2:1a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Validity
Not Before: Apr 3 03:30:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3dda2-651b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:8c:9e:f0:7b:0f:13:94:8d:47:7b:76:df:
5e:51:19:d3:52:65:07:84:87:da:f8:fb:29:b9:bd:
49:24:13:df:e3:f6:ef:5f:05:77:d8:cd:c0:0b:81:
d1:5c:b1:08:33:ea:d2:3d:88:48:60:bf:7a:4e:a8:
6b:a7:1f:e6:31:48:dc:11:31:70:a3:41:d0:7a:f6:
b1:3d:16:e7:b0:ee:01:b7:a5:e0:e4:b8:74:23:2f:
8d:3c:46:1c:85:b8:d8:99:99:db:83:37:84:19:45:
ff:05:23:6c:eb:bc:3a:1c:b2:a0:99:44:1f:ec:f1:
eb:c7:9c:5a:ac:09:23:93:62:c8:36:72:c4:ac:c8:
73:6b:54:df:ec:36:0b:e3:90:32:2d:a3:0d:3f:30:
8e:c7:b2:09:05:16:77:75:70:12:79:89:74:e0:21:
38:d9:58:70:6f:a3:dc:ba:b7:28:d1:66:38:ab:45:
36:2b:e1:19:d2:33:e1:b9:76:44:f7:77:05:0c:b3:
1c:c5:8e:0c:cc:77:95:f8:67:1a:72:08:f5:41:22:
42:db:9e:68:1e:bb:31:b9:6e:f8:10:a0:fa:3b:a8:
6d:2a:ce:c6:aa:d7:10:b5:eb:bc:d8:0e:f1:53:89:
3e:c4:7e:62:41:f9:6d:fa:68:6d:e8:bf:12:8b:e9:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:ED:CE:CC:F3:33:B2:46:E0:6A:B8:D5:58:F3:B8:45:76:A4:18
X509v3 Authority Key Identifier:
keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/5DCF3814CA0E11ED9251861DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.182.0/23
IPv6:
2001:df2:1a40::/48
Signature Algorithm: sha256WithRSAEncryption
7f:b2:af:b9:0b:4c:78:41:62:1f:f5:9b:53:f7:6a:b7:c6:0f:
fb:31:04:8a:c6:7f:c6:4e:43:da:ef:fc:2a:58:37:90:7a:e4:
ac:aa:f0:bc:c3:a0:d2:72:36:18:a9:77:82:eb:d8:fc:33:67:
a3:5a:b7:07:33:a6:b5:1c:42:99:ec:85:4d:ef:2b:47:a3:02:
00:b4:ae:44:4d:be:20:20:7b:37:86:44:d1:6a:a8:8c:1a:29:
2d:f9:22:52:ba:fe:b1:77:36:ce:68:40:ca:c7:a8:8f:f3:56:
85:f1:68:3d:a2:6e:c9:ea:2a:02:f9:2e:f8:3a:fe:ca:b6:f2:
de:ce:ac:d6:dc:9e:de:e1:0b:29:45:b4:10:b6:03:6d:2f:e5:
0b:13:2d:e9:10:fb:31:2d:64:a6:7a:84:66:63:b1:2c:fa:4d:
f6:f3:34:6d:17:56:c6:5d:50:6a:e6:3c:30:1b:6b:33:dd:2f:
84:a8:1c:37:af:7b:67:7a:ce:55:53:6a:9e:eb:15:e8:71:9a:
e3:06:af:42:f1:0b:3a:80:c5:66:2c:52:15:b6:90:2d:4a:4f:
ff:94:c5:8b:4f:67:0c:cf:e5:f7:44:ed:27:99:40:40:c0:30:
8f:be:17:96:1d:39:70:c4:3d:02:08:a4:3f:8c:ba:51:2f:14:
93:17:1b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:59 2026 by rpki-client