
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/5EA8A580F82E11F0AE78AF29396F56BC.roa
File: 5EA8A580F82E11F0AE78AF29396F56BC.roa (raw, json)
Hash identifier: +/xBcOwxeRGe9p4TIWRAvYHBvEWmBaB3X+UstJRLVpE=
Subject key identifier: 2C:91:3A:11:90:06:3F:8E:25:A3:C3:61:AE:53:AA:C7:B8:60:D7:1E
Certificate issuer: /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial: 191F
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/5EA8A580F82E11F0AE78AF29396F56BC.roa
Signing time: Sun 01 Mar 2026 16:59:39 +0000
ROA not before: Fri 23 Jan 2026 07:37:29 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.71.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6431 (0x191f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Validity
Not Before: Jan 23 07:37:29 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4707b-05f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:0d:c7:46:15:4d:17:c9:34:35:0c:a3:bf:
5b:0e:b5:0a:db:50:73:14:b6:91:77:c8:11:85:2c:
fb:ed:3b:8b:a3:10:39:5a:1e:50:32:13:e1:71:7e:
54:80:a3:80:54:32:40:15:19:2e:1d:5e:7e:7d:ac:
1e:ad:d0:ea:69:46:3b:87:bf:59:15:ad:91:c0:6b:
0b:a9:de:d7:24:c3:47:ae:79:60:b9:7f:8c:9f:61:
6d:62:2a:05:17:58:44:db:c9:e8:dc:d2:d4:d0:62:
83:73:07:a6:53:37:f2:aa:2e:4b:64:7a:9d:a9:ba:
22:b2:73:67:67:34:af:1b:bd:60:a5:5c:2b:4a:20:
25:01:61:6a:0a:e9:d4:87:a4:13:3d:d3:a6:63:cb:
da:d8:8c:a8:59:07:fa:ed:e6:b3:eb:10:6d:1a:1d:
1d:3c:0e:19:67:a1:17:bf:ef:20:b1:a0:e8:e8:c9:
fd:55:c5:0a:74:0f:77:90:f4:0e:87:81:a5:4a:21:
7c:0b:75:3b:0a:ca:a8:90:7e:ba:11:1e:f9:f2:42:
c2:b3:e0:66:69:51:8f:f1:4a:7a:a6:e5:54:4c:c4:
54:af:a2:a1:4b:09:1b:5a:37:15:6f:f3:0a:32:88:
07:24:8a:d8:08:f9:8f:68:5d:51:92:a5:d3:be:44:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:3A:11:90:06:3F:8E:25:A3:C3:61:AE:53:AA:C7:B8:60:D7:1E
X509v3 Authority Key Identifier:
keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/5EA8A580F82E11F0AE78AF29396F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:85:b1:ae:07:e1:95:41:dc:bc:df:e1:b2:4f:af:af:21:6e:
66:25:2c:3e:a6:21:1d:b4:c6:72:68:c1:bd:3d:5c:cd:33:ce:
e6:8f:bc:3d:64:63:8a:11:14:70:1b:87:e6:ef:f7:ae:5a:1f:
0a:20:e7:1f:85:e0:e0:e8:dc:38:a5:b5:f4:5f:2e:6e:13:4a:
1f:9d:f0:7f:07:a7:c1:0f:eb:a5:4a:52:55:b2:8d:d2:98:b4:
f1:10:2f:89:dc:19:d9:a0:a0:34:9d:b7:27:eb:46:93:93:23:
ee:6e:e9:d3:91:8e:29:fb:14:74:37:57:69:85:32:87:2a:cf:
94:00:af:45:30:25:6a:d4:28:dc:03:78:4e:3a:a0:c6:60:92:
fd:fd:60:bb:67:98:b4:20:e0:67:78:30:70:33:6a:77:14:a6:
fb:dc:1b:7d:2d:17:20:4c:e2:47:40:94:4e:3f:9c:13:41:d0:
ea:21:3e:ca:4d:46:f5:de:83:a7:8c:3d:3a:6c:ea:98:ad:bf:
9f:bb:a9:30:c9:eb:55:18:db:3b:a3:33:92:38:1b:96:8a:b2:
51:6f:a5:60:0f:8c:de:5d:fa:44:18:ff:02:c0:32:b1:26:d2:
ea:10:99:67:b4:04:d0:2b:01:77:61:8f:58:2d:90:58:0e:6f:
e6:51:fd:f3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcxNjkxMTAvBgNVBAUTKDkwMEI4NzBDODBDMEVCM0Y4NDY4RjUzRTc2NzJGQTc0
MTc1MkM1RDUwHhcNMjYwMTIzMDczNzI5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzA3Yi0wNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvsMNx0YVTRfJNDUMo79bDrUK21BzFLaRd8gRhSz77TuLoxA5Wh5QMhPhcX5U
gKOAVDJAFRkuHV5+fawerdDqaUY7h79ZFa2RwGsLqd7XJMNHrnlguX+Mn2FtYioF
F1hE28no3NLU0GKDcwemUzfyqi5LZHqdqboisnNnZzSvG71gpVwrSiAlAWFqCunU
h6QTPdOmY8va2IyoWQf67eaz6xBtGh0dPA4ZZ6EXv+8gsaDo6Mn9VcUKdA93kPQO
h4GlSiF8C3U7CsqokH66ER758kLCs+BmaVGP8Up6puVUTMRUr6KhSwkbWjcVb/MK
MogHJIrYCPmPaF1RkqXTvkTwuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCyROhGQ
Bj+OJaPDYa5Tqse4YNceMB8GA1UdIwQYMBaAFJALhwyAwOs/hGj1PnZy+nQXUsXV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE2OS81MDI2MDhCNEFE
OTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6LUVhUFUtZG5MNmRCZFN4
ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tBdUhESURBNnotRWFQVS1kbkw2ZEJkU3hkVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzcxNjkvNTAyNjA4QjRBRDkwMTFFNzkyNjdGRjBGQzRGOUFFMDIvNUVBOEE1ODBG
ODJFMTFGMEFFNzhBRjI5Mzk2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0eYMA0GCSqGSIb3DQEBCwUAA4IBAQAuhbGuB+GVQdy83+GyT6+v
IW5mJSw+piEdtMZyaMG9PVzNM87mj7w9ZGOKERRwG4fm7/euWh8KIOcfheDg6Nw4
pbX0Xy5uE0ofnfB/B6fBD+ulSlJVso3SmLTxEC+J3BnZoKA0nbcn60aTkyPubunT
kY4p+xR0N1dphTKHKs+UAK9FMCVq1CjcA3hOOqDGYJL9/WC7Z5i0IOBneDBwM2p3
FKb73Bt9LRcgTOJHQJROP5wTQdDqIT7KTUb13oOnjD06bOqYrb+fu6kwyetVGNs7
ozOSOBuWirJRb6VgD4zeXfpEGP8CwDKxJtLqEJlntATQKwF3YY9YLZBYDm/mUf3z
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:59 2026 by rpki-client