
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa
File: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (raw, json)
Hash identifier: SXOigKbAj347KcynIILNYxKxvcTy0xBVZIcQghVZJ58=
Subject key identifier: 12:9F:77:F7:31:38:0A:8E:FD:C4:5E:C1:07:D9:38:82:13:A7:F9:18
Certificate issuer: /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Certificate serial: 01A9
Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:40:16 +0000
ROA not before: Sun 13 Apr 2025 04:09:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149828
IP address blocks: 103.185.230.0/24 maxlen: 24
2001:df0:9dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Validity
Not Before: Apr 13 04:09:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3df50-55f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:ba:b0:1c:e8:88:b3:b9:c1:88:75:cd:b3:
8b:30:20:1a:c4:1a:c1:3b:95:0f:7c:3d:3e:5c:cb:
e9:eb:1f:52:93:86:d5:90:88:eb:15:a0:8c:c9:59:
89:b7:0e:77:4d:f0:80:b5:44:e4:a5:4d:2b:bb:38:
84:76:14:11:23:76:a6:89:de:52:11:01:14:f8:bc:
ba:4a:cf:4b:46:2c:92:32:76:5d:bc:df:13:cc:13:
f8:f1:28:d7:d5:7b:7e:05:f1:bc:e8:b8:25:63:ae:
c1:38:0e:a6:94:7e:9d:ae:6f:87:d6:20:b0:a0:00:
5f:8e:ef:96:83:a2:f5:ed:b6:c8:c6:e4:54:e1:c0:
c0:52:f8:c8:8a:a3:1c:39:e2:4a:34:39:47:74:f4:
c0:80:13:13:2e:d8:ee:7e:03:0a:70:36:ff:fa:ce:
4f:fe:7d:bd:37:c7:c5:e7:ab:1b:49:bf:21:3f:05:
dd:5a:fc:de:ef:8d:be:05:c2:13:a3:66:c0:e6:36:
95:60:49:96:ae:6d:a4:87:e9:cf:b5:54:07:e3:6a:
9a:61:b3:fe:40:6f:2d:0f:bc:8a:19:a6:1c:54:ef:
8f:56:29:1e:05:5e:dc:5a:3b:93:6a:7a:1b:89:2d:
7b:13:6e:8d:fa:e1:44:22:55:73:b0:15:8d:d1:cc:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:77:F7:31:38:0A:8E:FD:C4:5E:C1:07:D9:38:82:13:A7:F9:18
X509v3 Authority Key Identifier:
keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.185.230.0/24
IPv6:
2001:df0:9dc0::/48
Signature Algorithm: sha256WithRSAEncryption
be:10:6c:c0:a6:d0:fb:2b:c5:da:df:77:fb:d1:54:8b:6b:79:
1e:3a:5e:64:6c:21:39:39:09:dc:ee:72:63:55:15:1a:d4:3f:
fc:89:09:84:2f:be:76:8a:a7:2a:4a:07:73:53:7a:59:54:05:
3a:66:64:75:52:e6:96:b2:5f:fa:15:ee:d3:a2:de:72:07:66:
ea:1f:b2:59:74:f5:c6:85:d3:25:02:df:b0:12:78:59:1b:92:
75:b1:1b:18:5e:e8:d8:10:fa:6f:66:99:61:2d:ff:84:d5:fb:
14:39:ca:a2:8e:7d:18:e1:e3:af:f3:40:ff:16:b0:f1:59:20:
1d:bc:a3:46:38:e7:a8:7e:96:d9:4c:e9:f2:6b:bb:d5:c0:0a:
7e:7f:10:59:00:60:b8:3d:c5:3c:fd:35:ad:47:27:38:e6:d0:
4d:11:9e:45:13:c1:f7:02:51:29:fe:20:de:5c:4a:7f:b1:bd:
1c:4b:3c:3c:33:89:2b:43:bc:05:1e:66:e8:84:fe:fe:33:8c:
ec:e2:10:97:f4:2e:ca:84:c4:70:d9:b1:24:62:22:dc:30:ac:
fd:20:db:f5:8c:0a:59:af:f7:18:cf:4f:1d:6d:3a:6d:c1:f3:
2b:70:c1:30:ee:f4:e5:77:cc:2e:7f:7d:7f:97:25:d1:24:92:
c7:c3:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:39 2026 by rpki-client