
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa
File: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (raw, json)
Hash identifier: HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=
Subject key identifier: 1B:43:8C:F7:A3:F1:D1:D4:3F:F7:02:51:62:5F:17:1C:D3:B5:03:52
Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial: 0284
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:11:09 +0000
ROA not before: Thu 23 Oct 2025 03:45:43 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150352
IP address blocks: 103.17.176.0/24 maxlen: 24
2400:b5e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Validity
Not Before: Oct 23 03:45:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4651d-1eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2c:5f:1d:c3:6d:a8:73:8f:c9:4b:8c:25:1f:
88:13:94:64:82:5c:b5:aa:d9:3c:a3:64:43:d7:df:
d1:1a:5a:8d:05:07:48:6f:bd:70:11:6d:1e:28:aa:
93:e9:0e:1b:44:23:e4:71:95:cd:de:19:1d:f0:cb:
76:ef:41:d1:cc:f0:c6:aa:8c:03:0f:d2:5d:19:ad:
3f:43:23:bc:8d:82:53:50:c7:fb:03:a0:48:b7:ee:
32:6b:51:68:3b:1d:3f:34:8c:44:15:fa:ea:6f:93:
ba:e9:9c:01:0d:b7:e2:a5:8f:d2:4c:c9:35:7f:0f:
98:14:e3:c2:7a:f3:6b:2c:22:74:96:5c:4d:58:04:
ca:66:92:18:f4:e2:90:34:50:d3:17:e2:ba:6c:65:
01:bf:22:13:d9:b2:5e:58:3f:87:8b:10:35:9e:69:
67:07:27:5f:53:a0:1e:01:02:80:80:71:ad:12:f5:
a3:1a:0d:a3:92:16:2f:9d:2b:f8:b2:ef:0c:47:13:
10:17:6e:da:0f:80:8a:ae:f7:d5:07:94:ee:db:bc:
76:ee:cb:9a:4c:8f:16:30:17:03:5d:f6:fe:f8:ec:
4e:4f:f0:cd:74:eb:de:3f:2e:1a:5d:f9:24:15:c4:
2e:3a:23:04:20:b9:5a:47:e1:32:94:65:31:75:9f:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:8C:F7:A3:F1:D1:D4:3F:F7:02:51:62:5F:17:1C:D3:B5:03:52
X509v3 Authority Key Identifier:
keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.176.0/24
IPv6:
2400:b5e0::/32
Signature Algorithm: sha256WithRSAEncryption
00:57:46:e6:04:b5:b1:ac:72:bc:6d:1f:12:9a:1f:66:33:c3:
b2:72:46:2b:05:e8:d4:31:87:b8:a6:5d:1b:77:c1:94:83:02:
16:d0:6c:30:60:45:ef:45:30:59:b8:bc:b5:fc:22:f7:52:6b:
bb:49:df:3c:e6:8d:8b:b5:0b:61:83:42:bb:b2:60:cb:dd:52:
1f:53:48:f1:03:2d:17:3e:d1:af:77:cc:ce:86:37:06:a0:f4:
e9:94:37:88:9f:a2:62:c8:7a:6b:23:53:95:0a:c3:c6:f2:38:
b5:f5:46:d1:b2:a3:35:56:ab:4b:00:43:2c:b1:18:ac:7d:de:
96:cd:34:45:14:51:4f:6a:92:30:41:02:e5:41:3d:9b:14:35:
aa:5a:ee:48:f3:11:c7:c1:7b:aa:93:61:59:a8:8a:d7:1a:11:
8c:36:a5:7a:b3:8c:0f:28:9b:38:84:97:63:c8:93:4a:21:62:
fe:94:ee:90:d0:82:91:8f:f7:03:41:25:5c:55:df:ee:3d:3e:
51:83:08:da:bf:bd:31:1f:30:b6:92:d6:9e:54:20:9a:30:d0:
fc:53:5f:30:18:f0:d9:be:08:0e:6f:8e:75:6b:76:1b:37:46:
b7:e0:df:4f:3d:f4:96:27:3a:46:1b:b2:c1:d1:55:ce:3a:c9:
e7:44:38:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:25 2026 by rpki-client