
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa
File: AB22314C35C211ED8FD8923EC4F9AE02.roa (raw, json)
Hash identifier: miSnfPDEwzwY9m534sj3j64GltBUJI3iG02qdGuLOXc=
Subject key identifier: C8:98:EA:A3:15:57:CE:1F:5F:C1:81:76:F7:B1:C5:D5:22:4E:05:E3
Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Certificate serial: 05F7
Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:45:59 +0000
ROA not before: Wed 14 May 2025 23:53:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134715
IP address blocks: 103.166.42.0/23 maxlen: 24
2407:5040::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Validity
Not Before: May 14 23:53:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47b57-94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:28:0d:8d:80:88:7f:c8:d4:14:ee:9c:79:
c9:7a:53:3f:18:94:68:f2:a3:34:1d:ac:4a:c0:fa:
a1:49:b3:5b:bf:6d:fa:72:8c:1a:20:82:bd:78:5d:
fe:55:1b:e6:d2:f4:ae:ab:b7:0c:c7:0a:a4:f8:fa:
f5:9d:d9:0c:82:9b:0d:29:8b:3e:28:b7:6d:30:a9:
dc:49:a4:05:dd:76:d9:aa:0f:7e:d5:d3:f6:e8:35:
ae:66:cf:46:81:99:6e:0f:05:bf:80:47:32:43:ed:
bb:8b:50:e6:4c:91:fb:e7:e3:7d:be:3a:50:b6:9f:
ae:22:b1:ae:a1:9e:87:1c:46:20:ff:9a:4b:b5:e1:
32:44:82:07:69:c6:01:32:db:cd:a7:79:a3:5d:cb:
ec:bf:42:04:ae:24:a3:59:78:8f:8f:62:7c:ee:45:
02:f6:74:f8:4e:b8:d8:f8:c8:a5:86:3c:95:4d:b7:
93:4e:fd:f2:18:a3:56:9a:b1:d8:03:38:75:7d:58:
de:13:74:48:49:d2:94:1c:bc:cb:6a:2f:2a:69:d6:
64:c7:c3:47:da:ca:94:0d:97:b2:ec:dd:37:19:ae:
ca:8b:58:44:c3:65:62:4e:87:2b:91:81:2c:9c:6f:
cc:21:21:be:0d:87:b2:cd:5d:0e:d7:1f:7f:19:0f:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:EA:A3:15:57:CE:1F:5F:C1:81:76:F7:B1:C5:D5:22:4E:05:E3
X509v3 Authority Key Identifier:
keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/AB22314C35C211ED8FD8923EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.42.0/23
IPv6:
2407:5040::/32
Signature Algorithm: sha256WithRSAEncryption
10:e9:d8:24:00:04:28:3b:8b:0c:28:3b:25:75:66:43:9d:60:
73:fd:c7:ba:8f:83:01:c9:33:2c:0d:07:bb:12:fa:bb:5a:8a:
45:78:23:38:92:56:df:97:e9:90:eb:a0:d6:38:da:dc:df:3a:
3e:6e:d3:79:8c:36:7c:be:1a:c4:25:9e:c2:e9:f8:a2:e2:51:
15:03:95:f0:29:fa:b8:02:34:d0:e3:d8:93:22:41:c5:21:66:
81:9a:1b:a6:01:df:b2:7b:ed:55:bf:da:03:e8:2b:1a:a1:d9:
ac:ac:1e:cd:4e:7a:d2:37:c1:c8:ba:2e:17:5d:ce:fd:eb:ed:
2c:24:73:3c:70:99:3a:e4:46:e0:e3:b3:81:01:07:55:94:1e:
76:5c:70:be:8c:79:c6:10:8b:ed:72:e3:49:71:82:97:24:fb:
1f:33:d2:47:1c:0d:0e:6f:96:c8:0a:30:f4:72:55:85:d6:27:
6f:d5:ba:41:90:4c:0b:64:07:04:33:a4:22:20:2d:82:a6:6e:
5f:1e:da:0f:fc:b8:bb:3f:f8:ba:3e:6a:8c:92:76:99:0d:b4:
bc:ec:22:03:fb:76:10:09:eb:be:1b:fd:fa:ff:49:c5:cc:6c:
b4:e7:55:10:c0:e3:91:61:22:d6:2a:60:28:ea:3e:fa:73:61:
2e:bf:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:06 2026 by rpki-client