
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
File: 583C1F6854F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier: lwr9nC4UsLO+CstnxF9nceFQvC7Cn2zpuf42Kf45VK4=
Subject key identifier: 69:A9:8C:F9:E8:DF:4D:75:50:D7:AC:DE:DE:49:BC:A6:D1:FB:C2:D5
Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Certificate serial: 30F8
Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:40:34 +0000
ROA not before: Thu 18 Sep 2025 15:52:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 187
IP address blocks: 203.119.88.0/23 maxlen: 24
2001:dd8:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12536 (0x30f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Validity
Not Before: Sep 18 15:52:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47a12-e3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:76:7f:14:0c:0f:98:b6:80:d4:63:f3:a5:
56:7f:4f:db:6c:62:ea:94:38:4a:df:f5:75:56:98:
f5:a2:ab:d4:55:4f:1c:d3:c3:1f:13:90:d8:d0:4b:
22:b7:28:5b:0f:6f:e9:a7:3c:60:f0:65:48:cd:9d:
c6:b8:4a:ba:18:a0:b6:2b:ed:17:e4:2b:c7:d8:e7:
fa:4d:ef:70:46:c7:09:85:5e:af:5b:47:82:cb:82:
36:20:14:7a:10:a2:1d:36:5b:a6:17:c2:d4:d4:4c:
8f:da:38:5a:fb:fe:bd:16:9d:f4:3e:25:f9:a1:45:
24:fb:96:0c:89:35:59:04:49:8b:8c:33:24:3b:a5:
49:f3:90:33:fe:f1:75:44:41:b8:6b:dc:58:8b:ba:
9c:96:32:4a:09:7b:a7:bb:cb:0e:0c:c2:da:f9:fe:
54:cf:76:11:f2:00:49:b5:0d:ae:66:eb:46:32:26:
55:81:32:e9:39:57:7d:e6:38:30:02:61:26:82:5f:
8c:93:f3:7d:f4:40:dc:3e:8a:a6:04:08:1d:ff:09:
97:ce:21:0e:9a:a4:96:8e:77:d8:e1:3d:a3:8f:79:
ab:d0:3f:74:93:82:8e:87:3c:af:c5:bb:91:94:d2:
85:67:a0:91:76:4b:a3:40:88:fb:4d:2e:17:97:0e:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:8C:F9:E8:DF:4D:75:50:D7:AC:DE:DE:49:BC:A6:D1:FB:C2:D5
X509v3 Authority Key Identifier:
keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.119.88.0/23
IPv6:
2001:dd8:7::/48
Signature Algorithm: sha256WithRSAEncryption
1b:44:40:a4:24:d5:64:0e:2a:ce:ff:21:4e:11:ea:fe:dd:bf:
55:fd:d5:99:5f:ba:81:a8:a3:82:e6:6e:e8:4a:39:07:b4:36:
28:13:d2:ae:95:86:92:e5:4a:1a:de:61:e7:d3:d8:4b:8f:7b:
56:56:fe:11:66:92:4b:b8:54:a1:61:7a:3b:33:14:7e:93:44:
df:5f:69:db:4a:0e:c9:19:b1:2e:e5:10:64:65:0b:46:e9:21:
b7:5c:d5:39:50:c0:2f:e1:ff:57:2f:6c:ed:5c:34:0e:3a:20:
11:67:12:57:b7:63:82:6c:43:62:1e:62:ab:8c:cd:8f:5f:13:
d1:97:35:de:61:a6:f7:5b:32:6d:75:bd:20:81:9e:b9:72:9b:
ed:f5:5a:ca:04:e4:4a:d5:36:a6:c8:10:9b:7a:0c:a3:56:17:
3a:8a:e1:66:3f:fd:07:34:27:9d:92:a6:93:bc:53:c1:cc:fa:
7d:9d:b9:01:06:55:c1:3d:b0:bc:f1:d1:be:1b:bc:4d:fa:eb:
ea:8b:ad:c2:9d:c2:76:4a:e9:ef:91:fc:fa:69:ee:2b:36:22:
0d:d3:c0:fd:33:0e:c9:6e:4f:ef:94:0f:31:74:49:ee:69:77:
7e:ed:e5:75:98:30:ad:c0:bc:dd:2f:78:23:fa:a8:22:3a:52:
ca:15:b6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:50 2026 by rpki-client