
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/53B6E5D212CF11EBA8D2C037C4F9AE02.roa
File: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (raw, json)
Hash identifier: xQ5Osl/g5IBEyHi+z/+JpV9FYOt4yj/DoqbHsRmNM28=
Subject key identifier: 4F:29:11:CA:E7:A1:A6:B0:89:13:89:AB:CE:9D:14:AC:2F:7C:84:B9
Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
Certificate serial: 0833
Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/53B6E5D212CF11EBA8D2C037C4F9AE02.roa
Signing time: Thu 16 Apr 2026 21:26:37 +0000
ROA not before: Thu 16 Apr 2026 21:26:37 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132269
IP address blocks: 103.148.234.0/24 maxlen: 24
103.149.217.0/24 maxlen: 24
2001:df2:f680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl
rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2099 (0x833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
Validity
Not Before: Apr 16 21:26:37 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e1540d-c51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:92:f9:d1:51:fe:20:29:7e:e9:d8:de:47:
b7:8d:9a:bd:73:a6:e9:29:12:5c:d8:a9:ed:45:03:
66:eb:fe:2f:9b:db:68:46:aa:ab:48:33:96:9e:3c:
e2:8f:df:b6:9f:92:dd:b1:ec:d7:60:f4:3f:ec:3d:
ef:81:e4:b4:44:12:ab:c8:83:0a:db:c2:63:30:87:
21:6e:a2:88:a9:5f:7b:4e:28:bd:c7:9e:d4:b5:ce:
21:b7:d3:a5:4a:7e:86:aa:84:41:ae:0e:bc:ee:60:
77:11:6d:9c:a0:99:69:68:be:9a:e8:d4:c6:80:27:
4c:d1:7c:89:40:e1:8f:4b:63:fa:85:4a:77:36:c5:
a8:32:17:33:21:a0:2f:6f:fb:1a:1a:22:99:e4:97:
96:61:cd:cf:c5:61:ad:9a:d5:31:ed:79:1c:81:32:
c4:ef:3a:44:97:e2:85:c4:02:77:d7:3b:20:43:5c:
a0:22:ad:36:3e:77:e1:5d:3c:16:7b:2d:bf:73:09:
75:72:9f:f9:65:eb:cc:bf:cb:5d:61:db:45:b5:c0:
df:21:c9:36:4f:ba:04:ef:57:9a:69:d4:f8:6c:56:
cc:ad:51:56:6c:7c:57:90:b1:ba:76:8b:11:d2:ac:
08:21:fa:48:01:fc:f3:d2:ca:3d:8a:71:3f:ae:35:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:11:CA:E7:A1:A6:B0:89:13:89:AB:CE:9D:14:AC:2F:7C:84:B9
X509v3 Authority Key Identifier:
keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/53B6E5D212CF11EBA8D2C037C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.234.0/24
103.149.217.0/24
IPv6:
2001:df2:f680::/48
Signature Algorithm: sha256WithRSAEncryption
64:66:59:1d:e3:4c:fe:fd:d6:c4:3a:a8:3f:00:06:2c:50:b6:
c3:22:5d:5a:0d:e1:d8:f9:bb:8e:ad:9e:a7:ef:5a:8a:be:29:
13:02:47:f2:d1:d3:62:4e:a6:e0:15:35:ec:13:7a:d0:05:6f:
96:80:9d:6c:a5:00:a1:ca:d8:4d:9e:a0:85:ac:2b:6e:18:2f:
1c:8a:e5:ec:7e:fd:54:30:43:66:9b:37:44:89:5d:05:33:87:
77:cc:f9:b5:8d:44:eb:15:1c:a5:7c:91:3e:3b:14:3d:9b:7b:
80:40:dc:a5:06:2b:c8:51:a1:2c:24:61:70:3e:21:2c:a1:07:
32:0d:35:ac:14:6d:d3:c7:1a:be:8a:bc:cf:da:0c:73:7a:16:
69:97:c3:7c:a7:cd:a9:24:f0:df:36:d6:4c:ec:4b:6f:f6:a3:
b5:fe:a4:29:25:99:68:fd:8e:17:93:6b:02:24:54:5f:fd:7f:
70:f3:28:94:b1:dc:bd:88:37:af:be:e9:d6:52:ca:69:cd:fc:
15:92:b8:f1:85:1b:0f:30:2b:6e:06:5b:cc:99:01:fd:61:2a:
6f:81:70:2a:03:a7:b9:2c:c0:f7:e0:f1:b6:6a:bf:d1:c3:1d:
08:9a:87:8d:76:36:4d:4a:ec:9a:ef:cd:79:0a:43:5a:f9:20:
04:a8:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:02 2026 by rpki-client