
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/785B44D6F2AF11EF97443030C4F9AE02.roa
File: 785B44D6F2AF11EF97443030C4F9AE02.roa (raw, json)
Hash identifier: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=
Subject key identifier: 70:09:44:E1:C8:42:C1:D1:F2:08:90:4A:6B:A1:79:8F:75:C8:CF:E3
Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial: 024D
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/785B44D6F2AF11EF97443030C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:57:52 +0000
ROA not before: Mon 09 Feb 2026 02:22:12 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45814
IP address blocks: 103.84.150.0/24 maxlen: 24
139.5.116.0/24 maxlen: 24
139.5.117.0/24 maxlen: 24
139.5.118.0/24 maxlen: 24
139.5.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Validity
Not Before: Feb 9 02:22:12 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a437d0-8811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:94:ae:5c:42:6a:70:3d:e7:45:e7:68:29:
30:eb:cc:7d:b3:25:39:97:95:5d:f8:ba:e0:e9:de:
8a:67:2b:99:f8:f9:03:31:46:22:af:15:05:6b:b6:
09:83:35:63:de:d2:65:49:82:ac:ec:62:60:2d:76:
39:1a:7b:ba:48:4e:70:ef:78:35:fb:76:90:f4:80:
2a:d9:12:53:ec:03:1f:9b:f0:d1:0f:8c:25:b3:a8:
0d:e9:f6:39:ac:b3:5f:69:b6:6c:4c:56:54:db:11:
2f:fe:98:1e:cc:7c:7b:cb:48:de:8c:00:e6:03:2a:
40:b7:83:1e:44:f3:e7:5f:bf:52:d1:be:5d:f8:2e:
93:2c:76:66:49:99:55:f4:c0:5d:cd:9c:8f:d0:7e:
56:88:b0:3d:37:51:ae:82:de:71:b9:3b:82:9e:d7:
b5:bb:40:ff:89:a3:f1:2c:e4:4a:76:42:9e:33:04:
9c:c6:48:b9:92:ba:c0:45:3c:60:98:a7:9a:2e:f7:
3f:a9:ff:af:11:ec:36:e4:6d:07:76:63:61:ef:c8:
68:19:e4:d0:a8:ec:29:42:fb:d1:9e:67:c9:41:95:
a6:19:fd:c2:16:89:4a:96:48:26:05:3f:33:99:7a:
e6:b5:cc:15:a6:33:c0:98:e8:44:2f:32:50:ba:c3:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:44:E1:C8:42:C1:D1:F2:08:90:4A:6B:A1:79:8F:75:C8:CF:E3
X509v3 Authority Key Identifier:
keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/785B44D6F2AF11EF97443030C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.150.0/24
139.5.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:47:7b:35:8e:fc:b1:0c:0a:be:e2:97:3e:85:5c:45:67:1e:
b7:18:53:da:1f:56:48:b6:ed:8f:91:61:69:82:01:b0:09:14:
71:a0:45:06:f4:40:07:b4:0a:c4:95:cf:0f:d0:dd:05:e4:19:
47:bf:86:aa:4a:37:e5:0c:98:61:90:6a:43:b3:bf:02:8c:38:
cd:fb:77:15:48:80:40:e0:08:e9:86:eb:4c:90:5e:2c:38:32:
3f:7d:88:dd:b9:23:ad:9c:4a:7b:cd:d8:3a:d6:81:02:29:d5:
e8:a7:d2:5d:44:60:58:af:15:be:d6:ca:ea:39:2b:1b:f5:0e:
97:98:d8:74:66:ad:58:39:42:7b:ef:91:be:f5:66:33:17:36:
2f:10:ff:fd:5c:9c:37:22:f0:ff:1d:5c:3c:7d:c2:db:f7:a1:
9e:c0:64:ae:b8:0d:1f:27:6b:84:f4:2e:90:ba:e6:5d:b1:6d:
d5:5c:c0:84:25:12:04:8e:ac:7b:85:ab:27:e0:a1:bd:ce:b2:
2b:6c:39:f6:e9:75:c1:f3:d7:53:04:48:ea:5e:ea:12:10:01:
6f:14:ef:17:6c:38:53:43:20:d0:6a:3e:ba:b0:1f:6f:fb:05:
00:ff:bc:44:a2:11:dc:d8:cd:1d:52:2d:ea:38:f1:95:3d:1d:
f9:57:42:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:35 2026 by rpki-client