
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa
File: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (raw, json)
Hash identifier: hEapceNdpD29oYtj8D5vFPRo3w56yQR+tNzjULP+xIU=
Subject key identifier: EF:47:16:59:F2:88:96:F0:B0:31:54:4F:05:B5:4C:C5:3C:01:B8:0C
Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial: 012C
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:24:56 +0000
ROA not before: Sun 01 Mar 2026 07:24:56 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 26658
IP address blocks: 103.207.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Validity
Not Before: Mar 1 07:24:56 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3e9c8-689c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:4b:3e:b1:b8:21:41:44:5c:87:c6:77:0a:
8c:b8:35:4f:9c:70:ed:5b:c5:3d:f5:60:e7:ae:f0:
2f:1f:be:4e:f6:a3:f7:aa:7f:67:df:9b:e2:da:c9:
fd:22:38:c9:ca:db:2c:63:f7:5a:d6:ad:73:8d:d5:
b8:75:e2:bf:ae:15:cc:68:22:94:5d:7c:17:44:3f:
cc:67:73:8f:67:0b:e9:85:91:f6:a0:a2:23:4f:50:
a7:91:0d:99:36:15:3c:5f:31:a2:20:33:63:ba:f3:
8d:60:f9:51:05:67:b4:30:e2:70:cc:67:5e:10:87:
ff:b2:ea:86:9f:0c:34:38:82:e1:d5:03:33:60:e5:
5e:a9:36:12:98:2c:8f:d3:2a:56:6b:43:f9:34:3f:
55:e9:2a:8f:67:7e:a0:60:f4:c3:84:18:7b:b5:71:
32:fa:b0:62:e1:2f:ff:7f:b2:28:36:ec:34:2b:21:
e5:c9:70:6b:aa:30:16:3d:3e:33:c1:ed:8d:eb:51:
03:0b:a6:76:e8:bc:83:66:3b:7f:4d:4c:51:4e:d7:
e2:c6:72:ee:b6:e9:e7:96:69:11:c9:9e:7c:42:2a:
fe:49:20:82:88:5c:9a:5e:f7:64:61:d8:ee:84:09:
96:95:40:af:25:69:d3:fd:c0:f9:00:25:af:80:07:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:16:59:F2:88:96:F0:B0:31:54:4F:05:B5:4C:C5:3C:01:B8:0C
X509v3 Authority Key Identifier:
keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.116.0/22
Signature Algorithm: sha256WithRSAEncryption
15:0c:dd:5e:fc:cd:3a:2d:bc:53:9f:ad:59:42:26:c1:3c:f8:
59:ef:74:08:f0:6a:8a:83:41:88:3f:99:26:1f:77:bd:78:15:
fa:58:75:f9:cb:d9:fe:af:3c:f3:af:9a:d7:da:65:44:8a:21:
5a:5a:2f:a6:8a:f0:84:e5:5f:6a:00:d2:f2:85:d9:8b:71:71:
5e:63:63:7b:8f:58:30:cd:b3:a8:f7:a5:87:0e:a8:ce:41:57:
16:e6:53:1c:86:97:a0:d1:c4:14:d5:40:09:74:c4:45:bd:0d:
5c:22:64:2c:8e:6a:5e:73:b0:be:64:a9:3b:20:70:9a:2e:f1:
6c:dc:ed:1e:f9:40:7a:3f:04:22:6c:1c:03:bc:d4:39:88:e9:
6c:93:d0:92:30:3c:8a:7f:f5:72:79:b0:95:2b:3e:30:2d:fa:
76:99:2b:3a:16:da:93:94:7d:8b:7f:a2:6b:bf:bb:88:56:10:
5d:7b:4f:11:4a:9f:dd:b2:ed:51:52:4c:ed:f4:3e:6e:a8:2e:
ae:54:51:f5:4e:aa:59:19:57:59:f6:fa:7c:54:e7:76:10:91:
19:d4:b0:8c:e2:27:17:94:b8:53:48:fe:9f:5d:9e:b6:04:6a:
f3:d6:13:97:7f:25:cc:6c:e1:74:23:03:62:39:06:74:53:0f:
9a:67:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:30 2026 by rpki-client