
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/5CA025DE300C11EE903A6211C4F9AE02.roa
File: 5CA025DE300C11EE903A6211C4F9AE02.roa (raw, json)
Hash identifier: nLmRRkvPmyWIllTJe9Zouh2k0tm12CDZu9M1JMdFVeo=
Subject key identifier: 2B:77:B3:1B:FB:A4:41:1B:FB:80:1F:A2:E2:18:48:65:34:5E:BE:20
Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial: 026C
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/5CA025DE300C11EE903A6211C4F9AE02.roa
Signing time: Thu 09 Apr 2026 02:35:21 +0000
ROA not before: Thu 09 Apr 2026 02:35:21 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 150178
IP address blocks: 103.93.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Validity
Not Before: Apr 9 02:35:21 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d71069-93ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:8b:e8:24:70:8d:9b:fa:9a:88:5e:13:ef:
6f:d0:ca:0b:34:df:a1:cb:88:e9:a4:88:14:af:1d:
3f:6c:f7:97:e1:f4:36:98:6e:26:a7:2d:14:15:48:
83:af:c0:7e:d7:9e:94:40:86:8e:1a:47:82:ce:67:
11:15:ce:7c:f5:e8:4e:de:0b:ef:43:7b:2d:10:5a:
db:46:8f:c1:29:4c:7d:ec:a1:a0:82:6f:08:9d:c5:
0c:f8:8b:f9:11:93:83:6b:97:3b:7f:e5:66:32:ec:
80:03:52:c2:b8:33:84:54:ab:11:01:76:47:fa:b5:
e8:b9:e7:86:6f:fd:66:92:6d:83:e6:30:4d:a0:30:
98:ec:83:b4:65:76:5b:fa:88:82:8f:20:f2:78:91:
93:67:83:39:f4:5b:70:47:c9:ee:47:51:28:f2:d3:
d6:e4:22:01:76:38:51:c7:00:f8:11:a2:ea:c3:f7:
ec:7a:21:3c:c0:1f:03:0d:af:db:eb:f8:a7:ed:fa:
0c:09:ff:15:c5:a8:2d:27:db:8a:5a:73:32:01:4b:
f7:d4:2e:59:1e:ec:43:d0:85:48:ef:49:d6:ef:2a:
57:77:2a:0e:30:78:b4:29:43:fa:d6:53:8d:13:6e:
4d:a7:52:73:28:cc:bb:c9:31:18:fb:73:68:8e:09:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:B3:1B:FB:A4:41:1B:FB:80:1F:A2:E2:18:48:65:34:5E:BE:20
X509v3 Authority Key Identifier:
keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/5CA025DE300C11EE903A6211C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.93.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:b1:67:02:89:b7:7c:5b:5a:79:79:0d:db:49:75:05:10:18:
48:ff:3f:4e:26:5f:31:a4:33:cb:3d:f7:f8:46:1e:2a:40:da:
19:db:ae:07:49:84:c6:81:4a:2d:b0:b4:d7:21:25:20:cd:96:
ac:73:41:2c:f5:e2:55:fe:66:2a:84:f7:95:99:06:b3:29:59:
58:c8:bb:01:87:ae:a9:cd:62:d5:83:85:ac:4d:79:71:de:bb:
09:2d:e3:e0:95:14:ad:67:47:27:09:f6:28:45:95:65:ab:ba:
50:79:07:93:f3:c8:68:af:12:1e:79:a4:0a:f2:80:af:0b:aa:
c6:96:ba:6d:b8:1a:3b:5f:14:93:a0:79:d1:4e:c3:30:96:99:
c0:df:8e:4f:75:e4:5d:bf:ab:a9:af:55:21:c9:74:5b:b1:b7:
82:d1:29:6d:ff:64:0c:31:cc:b2:b6:15:83:0f:96:bd:b7:05:
73:06:87:4f:ca:1a:4a:db:e9:0f:12:93:b8:29:f7:a6:a6:b9:
7d:16:84:e4:e9:53:c4:18:9b:f4:88:fd:26:5e:aa:bc:b4:01:
f8:50:bb:b8:3f:d0:dd:23:4c:7f:5a:bf:45:79:08:5c:c3:41:
5e:60:37:00:3d:62:a9:0d:59:b3:59:f4:17:ab:19:04:32:37:
e0:f7:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:36 2026 by rpki-client