
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5D432F98177711EEAB396D1CC4F9AE02.roa
File: 5D432F98177711EEAB396D1CC4F9AE02.roa (raw, json)
Hash identifier: LOVQf/LdRjlXMFrzIgrgv8KlqIFzre3Qe7jhRSJb4JQ=
Subject key identifier: 85:0E:F6:42:BC:79:34:D3:5D:DF:29:8A:1D:22:9A:0D:9F:4E:6F:04
Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial: 01FD
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5D432F98177711EEAB396D1CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:59:55 +0000
ROA not before: Thu 03 Jul 2025 04:08:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.229.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Validity
Not Before: Jul 3 04:08:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a41c2b-5fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:93:20:9e:fa:43:cc:b8:09:eb:bb:b1:3f:
4d:ac:36:b2:2b:69:82:5c:22:04:92:6e:55:03:df:
bd:d9:8c:bf:72:86:d3:23:07:25:f3:34:01:ce:65:
c1:b1:89:e3:e8:b4:8c:ea:a4:88:c5:5d:ec:d1:d5:
a7:27:fd:d9:5b:2c:49:64:37:3d:64:ad:05:10:ca:
49:f4:dd:48:36:e3:06:17:85:5e:14:68:58:d9:93:
07:aa:79:07:66:ba:c0:58:73:ad:e8:a6:f3:da:87:
16:41:0b:e0:02:79:55:fa:6b:64:be:15:37:f4:95:
8e:05:7f:66:19:0e:bb:93:1b:94:dc:3c:c4:8e:46:
05:96:18:be:54:a9:42:e3:19:57:c0:94:76:15:80:
17:0b:ad:8a:11:0b:57:e9:79:65:05:47:25:3f:d5:
b1:e3:e0:0b:06:51:4f:a6:86:68:8f:a3:13:de:89:
66:f2:3d:a0:57:e7:97:20:29:27:c8:23:4e:bc:3d:
52:d1:9d:14:3c:b2:6f:9e:e9:c5:ca:30:ae:d3:2b:
27:76:67:29:a6:53:23:3b:0c:22:ce:e5:b5:03:e6:
ec:2f:d4:1a:29:b5:2d:50:47:4c:52:72:1f:55:d5:
68:e4:21:af:37:57:ad:28:5d:16:ee:73:82:eb:94:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0E:F6:42:BC:79:34:D3:5D:DF:29:8A:1D:22:9A:0D:9F:4E:6F:04
X509v3 Authority Key Identifier:
keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5D432F98177711EEAB396D1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.229.233.0/24
Signature Algorithm: sha256WithRSAEncryption
13:58:cc:6b:a4:2e:7f:25:4b:a7:17:76:77:2b:88:5d:f2:5b:
17:7f:32:02:0f:5d:05:ef:2f:b2:c6:97:ca:58:c9:94:44:8d:
d2:56:d9:b9:00:fe:53:bd:95:25:cf:0f:eb:3d:c7:9a:1d:b5:
8f:9d:61:87:48:e9:8a:11:90:d0:18:dc:cd:b6:fb:8f:be:c1:
bc:bd:9f:26:3f:40:e3:09:9d:43:b8:8b:ec:c7:71:5c:89:08:
4c:99:15:cc:67:a9:31:9f:87:24:1a:7a:b3:d8:7a:bf:b8:42:
bb:6d:0b:23:30:39:ae:2e:de:53:77:c7:f8:1e:80:a7:3f:83:
5c:7b:7a:09:28:9e:b2:4e:c5:e4:ad:df:60:62:19:46:05:ac:
50:73:af:93:85:7e:3d:ea:b5:82:28:dd:93:67:55:50:8d:12:
9c:6d:52:1c:7c:2d:d5:97:c4:72:c4:97:a6:44:0f:32:57:2f:
f4:02:ee:81:f5:7f:df:a1:5a:cd:28:ee:e7:25:62:d6:e6:c0:
d0:19:5e:41:33:7e:00:52:d5:a8:ab:dd:5c:75:a9:d5:4a:2c:
82:50:71:87:20:31:09:33:e4:ef:dd:a9:d9:8d:a0:30:be:a0:
c4:ec:91:0a:de:bf:fc:a6:d5:42:32:b4:3a:1b:d0:8b:83:8e:
33:12:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:49 2026 by rpki-client