
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/5E802AC41DB911EB90A5461AC4F9AE02.roa
File: 5E802AC41DB911EB90A5461AC4F9AE02.roa (raw, json)
Hash identifier: EhPr64h4ECRSdpojiWrpts6VSIcONCBO5Iu/1U1rOEU=
Subject key identifier: F3:59:5A:D1:60:D0:4E:94:19:F5:39:5F:B7:70:3A:1D:71:EA:78:BF
Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
Certificate serial: 07F4
Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/5E802AC41DB911EB90A5461AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:39:37 +0000
ROA not before: Wed 26 Feb 2025 22:50:39 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140223
IP address blocks: 103.148.184.0/24 maxlen: 24
103.148.185.0/24 maxlen: 24
2405:d540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl
rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036 (0x7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
Validity
Not Before: Feb 26 22:50:39 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fb48-8e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:d0:36:9c:16:18:99:56:f6:9b:69:5e:a3:
9e:b1:6f:7f:f0:62:74:37:b6:94:30:95:58:89:f4:
25:92:66:f4:22:b9:da:c4:d6:d7:b7:e1:57:86:7b:
6f:6e:b4:78:ca:cc:45:30:4e:ba:74:10:97:30:80:
2b:fd:f1:49:84:67:01:83:1e:22:21:35:61:4c:1e:
10:24:2b:8d:a3:7b:e3:e9:40:ba:e9:b1:04:6c:aa:
ac:ba:86:b4:9a:dd:10:68:db:51:f3:3f:7b:54:b3:
ab:11:69:be:8f:50:71:e6:f0:e6:89:37:a9:7e:e2:
6f:79:9e:99:d5:b4:32:28:de:8a:e4:a2:4d:cc:57:
cd:56:d9:98:e1:14:3f:76:9f:0a:a9:a0:a8:97:e0:
6d:32:d5:60:ed:24:b5:e5:34:79:07:51:30:ed:c5:
53:d8:90:21:ac:cc:cd:54:42:db:45:d2:f6:6c:ea:
98:bf:28:58:3f:3b:07:60:1f:4e:ba:e6:b4:2c:60:
8d:49:12:b6:22:7b:d3:74:5b:1a:95:70:be:7f:e4:
a3:f5:07:2d:04:b2:21:00:ba:25:97:d5:ea:72:55:
a6:c0:21:f9:56:ed:bd:d7:3a:51:48:b2:ea:0c:1b:
9e:c2:92:e5:2c:d1:66:d4:9c:97:35:06:2a:8b:69:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:5A:D1:60:D0:4E:94:19:F5:39:5F:B7:70:3A:1D:71:EA:78:BF
X509v3 Authority Key Identifier:
keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/5E802AC41DB911EB90A5461AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.184.0/23
IPv6:
2405:d540::/32
Signature Algorithm: sha256WithRSAEncryption
80:23:99:c2:ae:58:ba:1f:96:23:c0:29:5b:c2:7d:eb:8b:28:
01:86:2f:97:ab:a2:64:50:76:3e:d0:ab:78:ab:7a:0b:03:2e:
a6:8d:6f:5e:b3:aa:a7:b9:cc:6b:43:6f:72:44:35:8f:ed:2e:
4c:bf:67:5b:58:5f:7b:0d:2e:08:f0:ab:4c:d8:59:e9:fd:87:
e8:9a:5c:d0:18:ef:25:9b:34:4b:5b:71:ca:28:4d:48:68:35:
a2:c3:b5:93:dc:85:2e:e2:f4:67:45:c1:ee:a2:f2:55:6b:55:
7e:ac:92:d7:c3:2c:8c:9f:b2:af:f1:51:4c:4e:64:d4:31:68:
c2:40:69:27:b4:1b:3e:15:77:5d:9c:db:08:d3:81:45:a3:52:
19:2e:22:07:bb:a7:c4:22:92:1e:93:ae:18:8d:e3:bd:f0:b5:
03:4d:d6:e8:cf:9d:27:b6:a6:94:d1:20:14:10:fe:d6:6e:1d:
82:22:1c:5e:4e:b5:36:2a:65:c3:4a:ca:e9:b4:71:d0:f1:f3:
99:74:5c:9f:2f:1e:d6:ee:bf:a0:83:c9:1e:13:98:92:c2:15:
99:a3:2b:26:6c:cd:12:e3:67:4f:2a:64:20:79:bb:1a:2c:85:
ec:77:68:b4:67:7d:6e:03:45:d5:48:ff:32:0b:5d:5a:5b:f3:
94:6c:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:12 2026 by rpki-client