
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
File: 5BD4372457DE11EC88BC6713C4F9AE02.roa (raw, json)
Hash identifier: HfIHCgE3FqwzFZeum4TKPXX/IhXg0j6Cd01v1i5w0B0=
Subject key identifier: EC:41:02:8A:2A:62:D6:C9:62:AE:1A:82:4C:D9:3B:12:C0:64:EA:4F
Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial: 04E2
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:01:53 +0000
ROA not before: Tue 20 Jan 2026 23:19:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149048
IP address blocks: 103.177.118.0/23 maxlen: 24
2001:df0:2140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Validity
Not Before: Jan 20 23:19:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a454e1-5324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:10:84:ea:62:c0:ba:11:0b:b3:d2:c5:af:
86:22:ce:70:0b:3a:27:c6:88:b8:2f:33:a9:97:59:
34:60:5e:46:80:c7:69:63:aa:5f:f0:be:9f:e6:be:
f1:f3:12:6d:19:1a:cc:c0:4e:89:c4:f9:97:69:91:
9f:3e:dc:e2:ca:2d:8f:c8:55:f1:9a:c3:49:4c:37:
3d:dc:f0:5a:45:94:b6:7d:82:51:fa:de:09:3b:25:
b5:4c:59:89:73:1c:aa:1b:8d:b0:38:c4:6a:80:55:
57:51:ff:b0:29:46:3c:e7:81:30:f6:16:04:7f:5d:
de:34:7e:dc:4e:88:60:d4:18:31:c8:54:49:0d:85:
c8:a6:3c:c7:8b:0e:b0:1a:52:19:0d:1a:2a:e7:8e:
52:43:d3:77:f0:e7:03:9e:8d:56:f1:90:f5:ec:65:
23:ac:01:29:32:31:88:c1:41:89:40:83:7e:8d:a6:
a6:9e:a5:f1:d4:de:4f:75:41:16:8d:00:8e:86:00:
d9:e7:bd:c6:5c:0f:44:6d:4f:8c:07:93:79:e4:6a:
db:01:d1:6c:f5:d8:d4:05:0c:8b:21:d4:a2:73:51:
66:cc:8d:45:61:4e:e6:e4:61:0b:8c:75:0e:fd:e7:
79:6c:f9:d9:1b:85:41:15:f8:26:a5:47:bc:0d:c1:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:02:8A:2A:62:D6:C9:62:AE:1A:82:4C:D9:3B:12:C0:64:EA:4F
X509v3 Authority Key Identifier:
keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.118.0/23
IPv6:
2001:df0:2140::/48
Signature Algorithm: sha256WithRSAEncryption
0c:bd:ba:0a:a4:1f:57:48:1d:b6:4c:98:07:bf:35:a9:f2:f7:
7a:e3:1d:b7:ae:4d:8a:63:ee:72:9e:cb:32:4c:70:1b:64:14:
6f:10:19:b3:54:e5:0b:63:67:8b:f7:e3:0b:38:10:b5:83:3a:
09:d7:a4:41:ab:e4:be:e5:ab:7d:49:79:2f:d9:7d:62:0c:5f:
1b:5d:17:ba:46:42:9e:f9:b6:cc:2e:43:44:b8:71:32:f7:44:
1f:f4:4e:a9:2f:56:08:dd:2a:ee:ab:22:74:73:de:66:a4:97:
bd:0c:12:be:2f:9f:0e:aa:d8:b5:d7:96:50:bf:56:9a:55:fa:
e5:79:75:b0:c7:00:f0:80:31:59:1d:b9:58:5a:47:28:d7:b2:
e5:29:b3:d3:45:2c:0d:1c:c8:c3:63:54:d4:27:5c:cd:d6:ec:
c4:32:ea:78:b2:a9:09:91:66:6b:44:6c:c7:eb:c5:8c:70:2f:
18:e2:6e:20:f0:83:76:3f:8b:e1:d1:3c:b8:c2:2f:bf:39:f1:
3e:28:f0:60:3b:21:f8:4c:db:62:e9:b4:26:76:c1:c1:bf:e3:
5a:53:ed:59:05:70:cb:7e:55:4b:80:93:7d:83:6b:93:87:82:
98:af:07:a8:6a:96:22:27:44:b6:96:a1:01:44:04:c0:21:f0:
3d:71:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:48 2026 by rpki-client