
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa
File: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (raw, json)
Hash identifier: CyhUpuelxfurs175TzhNpev0g401OlIUHRIQIbAxz3o=
Subject key identifier: 5D:5B:7E:88:B6:0C:58:18:97:1F:3F:1A:FF:72:EE:B8:F0:5E:52:DE
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 04CA
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa
Signing time: Sat 07 Feb 2026 00:19:56 +0000
ROA not before: Sat 07 Feb 2026 00:19:56 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 151332
IP address blocks: 103.179.36.0/24 maxlen: 24
103.179.37.0/24 maxlen: 24
2001:df0:45c0::/48 maxlen: 48
2001:df0:45c1::/48 maxlen: 48
2001:df0:45c2::/47 maxlen: 48
2001:df0:45c4::/46 maxlen: 48
2001:df0:45c8::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Feb 7 00:19:56 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6986852c-83cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:54:38:6b:be:cd:a7:66:17:40:27:24:94:
3f:7e:61:9c:c4:dc:13:5e:8b:04:de:a8:5b:bc:95:
f9:c0:a9:a2:3b:3f:c0:ef:52:ca:93:7e:c3:da:eb:
c0:f2:4e:b8:e9:08:2a:53:3d:81:34:88:f0:63:fe:
b8:a1:d6:c2:10:1b:9c:a5:e8:61:ad:bc:4f:2d:4e:
a6:70:06:c2:f1:56:bc:27:b0:b5:22:01:ad:76:a3:
d5:56:4e:5d:39:f8:14:f9:21:a9:b2:ec:21:c7:11:
0f:c5:4f:79:b5:1b:df:54:00:2d:4d:07:a1:35:85:
bb:b6:7e:bc:52:1a:2e:12:31:67:fb:c5:d8:b3:dc:
92:f0:a4:8a:bc:af:e8:ea:20:5e:9f:87:d7:7a:1b:
7c:25:6a:e5:16:a2:b7:60:36:94:7d:11:ef:6a:2f:
15:a1:60:17:ff:64:69:b2:0a:c6:46:62:f1:8d:d0:
69:50:b1:50:91:b2:8f:90:c0:20:5f:d2:0e:85:90:
db:4a:dd:18:c5:90:c2:4e:b6:08:84:52:83:23:2f:
81:33:40:aa:37:83:b0:fa:7f:4e:d9:54:ac:c2:4b:
26:86:54:cf:8c:c8:f5:ee:23:dc:1d:7f:c1:94:5f:
5b:07:25:ee:cd:61:99:de:2a:9b:ae:5a:c8:48:85:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5B:7E:88:B6:0C:58:18:97:1F:3F:1A:FF:72:EE:B8:F0:5E:52:DE
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.36.0/23
IPv6:
2001:df0:45c0::/44
Signature Algorithm: sha256WithRSAEncryption
83:41:f1:c7:99:8c:86:3a:73:fb:32:5a:a7:c2:ad:c7:ef:00:
32:08:72:1c:1b:92:2a:84:eb:7e:24:3e:1e:3f:67:62:fd:e4:
e3:4b:d5:ad:a5:c9:44:51:ab:ec:ca:6f:cf:0b:ee:16:ff:3c:
5c:57:c2:59:96:4f:fc:f4:a9:93:73:c9:02:5f:a2:11:e7:1c:
96:e6:5b:c3:ce:c0:28:97:52:14:92:03:bc:2c:f2:15:ee:9b:
c9:1b:51:1b:cf:a4:74:76:50:4e:cd:14:c4:cb:bc:da:95:df:
ba:62:ec:05:5b:0f:f5:7c:25:f9:3a:b2:14:92:97:b2:2c:a7:
f1:e1:16:98:3b:0e:b9:59:da:62:d2:04:eb:c8:3c:83:57:11:
d9:bc:ef:dc:1c:62:90:82:30:f9:84:7f:3e:06:66:36:6f:f8:
d0:f6:52:5c:a1:6f:ce:cf:bd:e1:67:97:4b:e7:d2:e0:32:7d:
b8:0e:fa:58:6d:2b:5e:5b:37:29:88:08:96:d0:33:a7:3d:f4:
5d:61:e8:2c:97:40:30:ce:2c:7f:3c:97:45:f6:0c:33:d2:3d:
61:75:16:92:22:6f:d8:71:68:d0:36:82:53:d7:2e:34:84:fc:
ab:b3:ad:0b:34:b1:b6:e4:7b:55:2d:38:18:f1:cc:16:be:ec:
0a:74:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:57 2026 by rpki-client