
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa
File: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (raw, json)
Hash identifier: +st27elALIXiojhiC9FHNHsNEPCBH2UpM0yqSGe64g4=
Subject key identifier: 9C:36:4C:1A:EA:F6:6C:46:FA:04:CA:CA:96:4E:D2:61:EB:7D:6B:5D
Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
Certificate serial: 0B43
Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:27:29 +0000
ROA not before: Thu 10 Apr 2025 19:58:48 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136267
IP address blocks: 103.85.196.0/22 maxlen: 24
2400:afc0::/32 maxlen: 32
2400:afc0:196::/48 maxlen: 48
2400:afc0:197::/48 maxlen: 48
2400:afc0:198::/48 maxlen: 48
2400:afc0:199::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl
rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2883 (0xb43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
Validity
Not Before: Apr 10 19:58:48 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40681-1983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:2f:18:a6:88:d6:4f:11:01:f4:1e:67:96:
9b:d9:b5:94:37:8c:96:cd:34:6f:9e:e9:80:41:98:
fd:f9:18:44:35:33:6f:88:71:a0:5d:10:84:c7:bb:
32:3a:bd:cd:44:64:6a:0e:09:7b:04:63:fb:b1:ce:
be:82:fc:49:9b:b9:af:01:ab:9b:0a:03:39:03:a4:
82:20:1d:79:16:8a:df:bf:3c:8b:9b:c1:af:35:d0:
df:04:ee:70:e8:54:69:69:59:6b:a3:9d:13:43:ef:
96:ef:d9:d0:0a:cd:d7:45:4d:1a:47:10:d1:a7:54:
94:c0:f8:f0:32:d3:54:4c:8d:02:3b:7a:e1:08:25:
e7:f2:04:a5:50:55:c3:f8:de:84:8b:5b:9e:06:cf:
6a:11:c6:56:a8:ef:bc:98:38:9c:18:8d:38:07:23:
a1:ee:10:a2:05:1c:c8:f9:f8:ac:32:1f:5e:2a:ff:
ce:11:11:e6:89:52:ac:e3:e9:86:26:d9:43:ea:ce:
b7:59:07:a0:a9:12:fa:56:67:74:e8:bb:64:ba:25:
8e:28:23:a3:5e:28:ea:c3:dd:39:02:7b:bf:10:e3:
8f:34:1b:ce:35:76:57:b9:3d:63:4b:f8:40:30:99:
7b:a6:c3:a5:33:94:e7:8a:50:ef:19:b5:f7:d5:91:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:4C:1A:EA:F6:6C:46:FA:04:CA:CA:96:4E:D2:61:EB:7D:6B:5D
X509v3 Authority Key Identifier:
keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.196.0/22
IPv6:
2400:afc0::/32
Signature Algorithm: sha256WithRSAEncryption
51:b3:7e:67:96:ba:ba:2e:c6:9c:7b:6c:82:09:62:8b:6c:ab:
f5:d4:7b:37:d5:a4:e8:4f:3f:05:d5:2c:39:da:b4:14:c6:b0:
55:5c:e2:e7:c5:51:fd:1d:77:79:ea:01:f7:be:8c:cc:0c:fd:
7a:a2:86:a0:d5:6d:1d:16:e0:98:e0:c5:f1:b7:a5:c7:71:3c:
e2:1a:db:8e:3c:f8:ea:5b:95:5e:2c:9a:4e:66:09:26:ff:55:
00:7c:18:87:e0:42:15:c6:a0:78:0d:31:1b:b3:74:d9:35:0c:
3a:e7:54:fd:98:3d:9e:5c:f7:12:53:b3:7b:cf:55:96:18:07:
b4:1b:63:4f:de:25:85:8f:34:e1:71:96:d6:7f:8c:b0:5e:59:
eb:ca:f8:a9:b8:95:ae:e2:56:52:21:ab:43:a4:1e:24:3f:0d:
44:b5:b0:fc:71:33:70:da:ce:ae:3f:6a:67:ec:38:04:ed:2a:
5f:54:8a:03:b2:4c:01:ca:37:ab:f0:31:c5:88:f3:01:4e:bc:
9b:7c:ba:07:e8:85:96:42:69:41:d2:58:69:30:6c:43:94:5c:
fd:dc:6f:4f:2c:a3:98:f7:03:77:7e:c8:9e:50:c9:12:83:3a:
39:97:c8:14:6f:0f:77:37:b5:2d:82:ce:b5:1c:8e:5d:c3:71:
7e:19:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:31 2026 by rpki-client