
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa
File: 710575A2635611ED90FD8A69C4F9AE02.roa (raw, json)
Hash identifier: ZeycQgDaT/4G0didCD6mx1VtJcPFTXnlPCcp60dPEPg=
Subject key identifier: D0:5A:6B:13:30:B8:54:6D:0D:39:13:ED:54:48:9E:12:FD:14:9D:C8
Certificate issuer: /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
Certificate serial: 0903
Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:59:13 +0000
ROA not before: Wed 02 Jul 2025 16:55:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134116
IP address blocks: 45.114.88.0/22 maxlen: 22
45.114.88.0/23 maxlen: 23
45.114.88.0/24 maxlen: 24
45.114.89.0/24 maxlen: 24
45.114.90.0/23 maxlen: 23
45.114.90.0/24 maxlen: 24
45.114.91.0/24 maxlen: 24
103.54.40.0/22 maxlen: 22
103.54.40.0/23 maxlen: 23
103.54.40.0/24 maxlen: 24
103.54.41.0/24 maxlen: 24
103.54.42.0/23 maxlen: 23
103.54.42.0/24 maxlen: 24
103.54.43.0/24 maxlen: 24
2402:3280::/32 maxlen: 32
2402:3280::/34 maxlen: 40
2402:3280::/128 maxlen: 128
2402:3280:4000::/34 maxlen: 40
2402:3280:8000::/34 maxlen: 40
2402:3280:c000::/34 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl
rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF026, serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445
Validity
Not Before: Jul 2 16:55:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48c81-7f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:13:27:a6:c4:ce:a1:d3:fd:f5:2f:39:6d:
18:d6:45:5f:85:f6:16:8a:54:90:eb:6d:bc:6f:5c:
a1:c4:1b:d3:78:1e:a0:33:73:37:d8:b4:6b:6d:8e:
68:db:00:de:56:29:38:94:f5:db:d0:08:1a:ad:79:
05:2b:ba:30:3d:d0:54:76:54:2a:25:db:62:9b:1f:
d6:c4:b9:3c:97:6d:bc:e5:a1:88:1f:76:f2:78:57:
80:1a:22:76:8d:75:b5:fb:ed:53:14:22:3c:77:d9:
12:c5:07:b6:74:ee:90:0d:7d:6b:0e:de:c7:b4:52:
c4:29:76:9c:40:fb:03:c1:a0:a3:0f:de:04:3b:dc:
5d:20:99:e0:3a:61:77:fb:9c:64:2d:8f:e4:86:96:
bf:5e:89:d7:e4:5d:71:de:ce:88:e6:ab:b7:4a:e3:
b9:ca:10:6a:42:1d:5e:be:e7:53:fc:8c:32:ed:24:
1f:28:dd:84:3a:2d:5e:de:d2:83:31:5e:e9:fb:d9:
76:66:99:b1:47:ca:84:48:74:5c:6a:b6:b0:16:75:
39:cf:d5:58:44:f8:e1:72:69:9c:33:a3:b8:7d:a8:
21:8a:1c:b0:93:36:46:1f:07:1a:ff:ea:91:fd:8e:
67:a5:07:20:d3:5f:f8:8e:ad:1b:93:d8:43:3e:f6:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:6B:13:30:B8:54:6D:0D:39:13:ED:54:48:9E:12:FD:14:9D:C8
X509v3 Authority Key Identifier:
keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.114.88.0/22
103.54.40.0/22
IPv6:
2402:3280::/32
Signature Algorithm: sha256WithRSAEncryption
64:3e:20:78:28:3a:a0:96:50:6a:a2:0d:04:1b:ef:f2:f3:57:
ed:72:24:14:bd:a4:76:32:a5:f0:f4:fd:43:64:7c:dc:7a:ce:
86:a1:34:85:3d:e3:04:2d:ad:d6:76:cd:4e:76:d1:10:57:a0:
d2:b3:fc:93:27:bc:2d:b9:ea:f5:ab:24:4c:a3:64:0f:d5:84:
1e:58:6c:36:83:3b:56:60:38:d1:cc:f6:4a:73:d9:f4:26:91:
d9:4a:36:16:d8:89:ce:76:45:1b:1f:b6:4f:d1:9b:88:6c:d8:
c0:86:aa:60:7a:01:37:0e:63:02:22:e1:3c:33:80:f2:00:a7:
73:fc:ac:a1:7b:b4:aa:09:c8:19:20:ea:2f:09:70:ba:29:a2:
77:8d:c8:bb:95:15:ea:9b:ec:ee:af:f0:1b:2f:69:d8:b4:7f:
b7:e9:42:a5:a8:1b:29:44:49:b3:ff:5d:33:7d:04:49:ed:6c:
85:2b:10:82:6b:2d:b3:f5:ea:24:ca:f4:a4:bd:a0:4b:c0:9b:
b1:5e:f3:4b:b1:9f:1a:1d:31:06:23:d3:7d:8a:2f:c3:37:d4:
f8:4e:53:bf:34:c3:4d:15:1b:e2:86:28:e7:7f:e0:be:be:1b:
1d:9e:2c:50:f7:82:9d:86:3f:06:11:4a:f8:04:31:50:a3:f2:
fd:11:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:59 2026 by rpki-client