
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5B1534BE29E011EB80A2FF13C4F9AE02.roa
File: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (raw, json)
Hash identifier: BRsqV4LD/aFLzJrZAhTNVw5XIt5HwVhvuFWv19p68J0=
Subject key identifier: BE:57:6E:29:CA:97:C3:53:57:7E:D6:B6:70:0F:46:BD:41:89:AA:96
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 08BA
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5B1534BE29E011EB80A2FF13C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:11:16 +0000
ROA not before: Fri 19 Dec 2025 16:52:26 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140980
IP address blocks: 103.154.16.0/24 maxlen: 24
103.154.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Dec 19 16:52:26 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a47334-f0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:f0:5c:a3:d9:9f:c5:f3:ee:e9:d2:6c:2a:
4d:ea:bd:ee:e6:66:15:92:ae:a3:2c:9b:9a:ac:4e:
3e:f5:59:f5:0c:1b:22:00:dc:bf:60:79:cb:11:bd:
8e:e1:d8:dd:a0:fa:21:54:ca:29:4a:40:33:2e:7a:
5d:9a:ba:ab:20:51:8b:24:fe:23:bb:c8:1d:67:16:
a1:7c:5f:ed:f1:9a:4a:75:c3:b6:d9:a0:0b:5a:e0:
b0:ba:ce:4d:68:fe:75:a6:81:aa:e5:53:80:c6:4c:
9e:4a:f6:b6:88:18:92:7b:75:12:dd:7a:cc:39:86:
8f:b7:68:ca:eb:ec:18:6d:20:27:07:78:6e:ed:cf:
81:b9:b2:1f:bc:81:d7:09:43:15:c4:de:20:a3:cf:
1b:3e:99:ee:58:a5:3e:c4:8c:8d:32:38:95:60:29:
b4:83:b1:4e:3e:33:9d:f6:ea:b5:95:76:33:f0:21:
4b:1c:84:a4:4a:88:48:ca:20:38:9e:b1:a7:74:92:
6d:85:91:ab:e7:b2:07:5e:e2:ad:10:d9:30:a5:12:
8a:1c:59:5f:26:75:4c:1b:ff:7d:d2:3b:66:96:8b:
3c:b9:c8:59:1a:7f:fd:a6:7c:67:16:2f:44:2a:28:
c6:51:77:20:a4:5e:ac:3b:12:1e:9a:94:b9:ce:ce:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:6E:29:CA:97:C3:53:57:7E:D6:B6:70:0F:46:BD:41:89:AA:96
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5B1534BE29E011EB80A2FF13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.16.0/23
Signature Algorithm: sha256WithRSAEncryption
55:7e:02:95:6e:9e:c5:08:92:61:0f:dc:46:d8:26:50:47:44:
9a:22:4d:00:a4:07:e8:04:e2:f7:b1:69:05:83:b2:93:11:db:
42:36:78:86:3b:37:72:5a:c6:79:d9:86:50:ba:24:c7:d0:f2:
27:0e:d2:87:65:ca:98:c3:cf:fd:39:30:ce:85:7b:69:e0:4f:
38:96:f6:0d:21:5f:56:bd:f7:0d:53:1e:85:5e:02:9a:2e:67:
55:d6:ab:99:29:b0:d0:ac:7a:f6:86:b9:01:f4:a0:2b:48:f0:
2d:8b:fa:14:ed:1d:dc:1b:e5:e8:7d:1a:23:d1:53:6c:03:41:
8e:5d:50:e9:84:6c:2c:29:a2:b9:fe:5d:78:b4:76:69:1b:f9:
c4:f2:39:7b:f3:ae:ba:2f:43:1b:e1:a5:50:9f:5f:1f:2e:d3:
8b:cb:d5:9b:7a:57:62:71:f7:a8:c6:b2:eb:40:96:06:b0:27:
7f:6f:34:d0:74:11:35:be:01:a0:ba:d9:85:14:a7:89:21:26:
21:12:d4:a4:6f:11:30:74:06:71:37:76:36:ae:d5:45:de:6c:
7e:10:a9:61:7f:9b:ef:d8:97:4a:8e:32:47:4f:a6:04:d9:f0:
b8:d8:3e:8c:40:02:ad:55:5c:52:14:5e:e8:b9:ee:11:51:15:
de:ac:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:49 2026 by rpki-client