
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/D5D64BB0FB6811EC863B8150C4F9AE02.roa
File: D5D64BB0FB6811EC863B8150C4F9AE02.roa (raw, json)
Hash identifier: Uh7RounuLjLEs7PZV85Xjp+xSucg2VsyDoPk68Nkps8=
Subject key identifier: A1:5D:F0:A4:4B:C3:B9:91:95:99:A0:B1:3B:FC:F6:7E:51:E4:C4:B2
Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Certificate serial: 033B
Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/D5D64BB0FB6811EC863B8150C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:22:41 +0000
ROA not before: Mon 03 Feb 2025 01:35:37 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 133212
IP address blocks: 103.224.104.0/24 maxlen: 24
2001:df0:ed40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Validity
Not Before: Feb 3 01:35:37 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3e941-91e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:ab:34:bf:d4:30:f8:21:62:30:7e:b5:ef:
a0:5a:49:8c:59:7d:04:c4:ff:14:f3:90:1b:7b:a4:
88:bb:41:91:cc:76:fa:d1:74:0b:a1:74:1f:8e:ef:
c3:53:9d:5d:74:a2:dd:17:76:69:8a:b8:fe:71:8f:
85:b2:a5:ce:5d:96:d0:ec:e7:d0:03:5f:3d:52:55:
f1:73:58:25:1b:d4:b7:17:3e:f8:2f:69:59:ba:2a:
05:3b:21:2d:de:7a:71:8b:69:87:15:b8:37:a5:b0:
1d:ab:61:d9:5c:47:c2:48:cb:ec:cb:99:a9:6d:74:
35:e0:2b:11:e9:d1:42:b8:18:78:c5:ee:f4:6a:62:
76:bb:3f:10:b2:a2:4e:e1:e9:74:a7:75:bf:7b:74:
1c:65:46:d3:dc:04:84:30:25:76:f7:18:57:b8:3e:
99:ca:d3:99:43:31:4d:d9:79:6c:b7:ed:c7:7e:e3:
ab:70:b0:d3:78:08:56:aa:67:1c:21:b7:43:87:44:
78:89:f4:00:2d:17:78:de:1b:69:0f:39:21:c9:7a:
57:44:e5:f7:3a:68:5b:41:ca:ce:72:d8:78:f7:4d:
5c:fc:07:2b:1a:73:dd:13:d6:66:06:93:ac:de:81:
f1:1a:a0:8a:4d:1b:bc:b9:c9:82:59:1f:7b:81:b7:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:F0:A4:4B:C3:B9:91:95:99:A0:B1:3B:FC:F6:7E:51:E4:C4:B2
X509v3 Authority Key Identifier:
keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/D5D64BB0FB6811EC863B8150C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.224.104.0/24
IPv6:
2001:df0:ed40::/48
Signature Algorithm: sha256WithRSAEncryption
5a:42:1f:f9:ab:99:35:46:36:db:ec:7d:c8:64:b4:f4:e7:d5:
c4:d5:85:f2:fc:9f:c0:21:a1:09:e2:8d:be:e1:db:4d:bf:ae:
01:43:ec:4d:62:be:25:43:36:4b:0d:da:de:c6:bd:79:64:b6:
06:11:ba:da:49:67:8c:d9:54:11:e0:1f:d0:80:1f:11:5b:60:
e2:c4:73:6d:d2:be:e0:d8:2d:89:66:99:21:d7:0d:0c:5d:91:
ec:55:1d:3c:40:a1:b9:f4:06:e4:08:4c:30:c2:d4:b5:03:6d:
87:d6:76:d6:9d:ff:ef:51:b5:9e:a5:ae:4e:ce:e4:94:14:7b:
29:a6:9d:f4:da:d3:03:8d:59:9e:f9:36:9b:e5:d6:66:8f:ed:
4e:ad:df:68:8a:bb:75:db:d2:15:0a:a6:32:bb:97:b8:2d:cf:
60:bd:d5:36:25:c2:8e:37:60:f8:09:b1:7c:24:0f:8d:7d:8b:
ac:64:26:2f:0c:ed:63:36:c7:02:08:ec:ed:5b:e4:42:17:03:
d3:29:ec:71:25:4f:c8:86:af:47:4c:cc:c1:c8:98:e4:f6:47:
80:22:d2:b3:ce:e6:b0:aa:2b:c5:d3:ca:10:a2:5b:f6:ff:c5:
bf:9e:9a:f6:9f:ee:3f:4b:ff:ba:a1:41:f2:77:7f:ae:74:6f:
af:b0:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:01 2026 by rpki-client