
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa
File: 5915642864AB11EEBFD54F2EC4F9AE02.roa (raw, json)
Hash identifier: /Cz52wzWYqQnUj07hXNkZLZ60VUenuXwm+9E2QE9HIA=
Subject key identifier: 3A:F2:5B:10:6C:90:98:94:9F:9C:19:6E:A9:93:82:06:27:2F:EF:60
Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial: 0F3A
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:01:28 +0000
ROA not before: Sat 30 Aug 2025 18:08:52 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151627
IP address blocks: 103.5.0.0/22 maxlen: 22
103.5.0.0/23 maxlen: 23
103.5.0.0/24 maxlen: 24
103.5.1.0/24 maxlen: 24
103.5.2.0/23 maxlen: 23
103.5.2.0/24 maxlen: 24
103.5.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3898 (0xf3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Validity
Not Before: Aug 30 18:08:52 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a470e8-1e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:76:b9:09:9b:97:fe:60:be:3a:ec:21:81:
04:59:65:f8:02:27:be:48:01:3a:c0:22:2c:01:a1:
ab:44:c2:83:ef:e1:28:f1:0b:18:39:7b:26:70:42:
a1:2c:80:09:a2:c9:e3:46:89:93:7f:ac:2c:3a:cd:
5e:ff:31:90:48:90:c9:28:a1:f4:3a:98:59:fb:9b:
9c:79:6a:d4:6d:6e:80:20:2f:e7:4d:97:e9:6c:48:
3c:17:e1:a1:05:85:16:7a:02:b3:c2:06:32:7d:2e:
6e:c2:b9:f3:47:bb:4d:30:31:f2:df:cf:fb:7d:54:
9a:cc:b4:2f:28:1e:6b:0e:63:ab:18:39:b6:df:76:
43:65:11:7e:bc:b7:8f:ff:c1:9d:52:da:08:56:83:
ae:90:a3:67:89:60:32:b8:18:75:34:dc:03:be:a6:
b2:eb:6b:09:21:35:a4:28:3d:13:4d:9a:57:3c:11:
b4:2a:61:82:b8:7f:92:c9:29:72:0f:c7:3b:29:a6:
c4:70:50:8d:1e:5d:de:dc:be:67:ac:e0:29:3d:8b:
d5:a8:73:63:69:bf:c3:52:f1:50:f3:ca:71:ee:42:
f0:d1:64:af:01:8e:0f:ab:ee:60:14:66:21:c4:64:
f6:00:64:5b:ee:0a:49:99:aa:11:d2:91:22:d2:39:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:5B:10:6C:90:98:94:9F:9C:19:6E:A9:93:82:06:27:2F:EF:60
X509v3 Authority Key Identifier:
keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.0.0/22
Signature Algorithm: sha256WithRSAEncryption
72:6e:f9:5c:44:ba:68:97:a4:17:47:1b:5f:99:d9:fa:93:7a:
cd:72:5b:84:ae:46:c3:ea:ff:55:9a:41:8a:3c:4c:ad:d5:2b:
4e:c7:4d:18:85:cb:9f:a9:f1:db:1e:24:e5:b0:c9:83:15:26:
47:51:09:5a:f9:71:d5:1c:7f:2c:9f:f2:cb:f4:d8:32:df:4f:
64:ec:94:70:53:e1:ab:36:ad:f1:13:c4:17:3c:78:b7:75:29:
a5:78:6e:7d:b1:ed:67:7b:fa:f2:9d:a1:09:34:28:fc:00:af:
f7:aa:61:64:28:03:46:59:c7:a3:59:16:b4:fd:8a:30:f7:f2:
c9:58:6d:5d:e5:72:a5:b8:f8:91:43:27:ab:68:42:9b:97:26:
6c:af:b4:38:85:ea:0f:15:ab:39:ec:23:c0:43:bf:22:1a:0d:
91:aa:9e:9a:ae:b6:cb:40:7e:90:f3:f3:26:9f:c1:a7:2e:74:
c9:52:95:c5:33:53:59:0c:64:8c:76:74:60:36:90:10:f0:b4:
13:86:9c:a4:98:5a:5e:99:37:34:44:c4:f0:08:97:77:32:5a:
8d:3c:e0:f1:ec:b7:fc:df:2c:3d:57:f2:31:a3:a9:f7:c9:00:
34:14:77:14:a5:4f:08:de:51:ee:7a:bd:f0:4a:92:c2:5c:c6:
66:e2:f2:ed
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx
REM0NUUyQjIwHhcNMjUwODMwMTgwODUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzBlOC0xZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Zp2uQmbl/5gvjrsIYEEWWX4Aie+SAE6wCIsAaGrRMKD7+Eo8QsYOXsmcEKh
LIAJosnjRomTf6wsOs1e/zGQSJDJKKH0OphZ+5uceWrUbW6AIC/nTZfpbEg8F+Gh
BYUWegKzwgYyfS5uwrnzR7tNMDHy38/7fVSazLQvKB5rDmOrGDm233ZDZRF+vLeP
/8GdUtoIVoOukKNniWAyuBh1NNwDvqay62sJITWkKD0TTZpXPBG0KmGCuH+SySly
D8c7KabEcFCNHl3e3L5nrOApPYvVqHNjab/DUvFQ88px7kLw0WSvAY4Pq+5gFGYh
xGT2AGRb7gpJmaoR0pEi0jkJEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDryWxBs
kJiUn5wZbqmTggYnL+9gMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5
REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvNTkxNTY0Mjg2
NEFCMTFFRUJGRDU0RjJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwUAMA0GCSqGSIb3DQEBCwUAA4IBAQBybvlcRLpol6QXRxtfmdn6
k3rNcluErkbD6v9VmkGKPEyt1StOx00YhcufqfHbHiTlsMmDFSZHUQla+XHVHH8s
n/LL9Ngy309k7JRwU+GrNq3xE8QXPHi3dSmleG59se1ne/rynaEJNCj8AK/3qmFk
KANGWcejWRa0/Yow9/LJWG1d5XKluPiRQyeraEKblyZsr7Q4heoPFas57CPAQ78i
Gg2Rqp6arrbLQH6Q8/Mmn8GnLnTJUpXFM1NZDGSMdnRgNpAQ8LQThpykmFpemTc0
RMTwCJd3MlqNPODx7Lf83yw9V/Ixo6n3yQA0FHcUpU8I3lHuer3wSpLCXMZm4vLt
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:44 2026 by rpki-client