
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa
File: 14564AB0E83311E6A72DC543C4F9AE02.roa (raw, json)
Hash identifier: 1JIPjH43h7F+AY6RV/6u/KwLSOLkd4S+wof4uQEdR30=
Subject key identifier: F6:74:71:38:A4:92:2E:79:F1:44:E8:E3:FC:EF:04:6F:F6:8F:E0:DC
Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial: 1CCA
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:29:31 +0000
ROA not before: Wed 30 Apr 2025 16:24:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55795
IP address blocks: 101.128.5.0/24 maxlen: 24
101.128.6.0/24 maxlen: 24
101.128.7.0/24 maxlen: 24
103.9.16.0/22 maxlen: 22
202.52.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7370 (0x1cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Validity
Not Before: Apr 30 16:24:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4231b-689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:11:e4:85:29:9f:4f:72:d0:10:b8:2a:af:
77:38:3e:03:ab:a3:c0:8b:a0:87:69:72:6b:d6:eb:
46:52:fd:45:be:78:fc:21:15:05:81:2e:eb:02:bb:
c7:f8:28:5a:f3:4f:dd:a2:9d:0d:f2:f9:b7:78:cf:
fe:3d:c4:5b:52:d2:5a:79:1a:0b:bd:39:fe:c8:e7:
6e:c5:fa:58:e8:be:ec:62:d7:d4:cd:8b:fe:e0:86:
fa:4e:c4:d2:e1:2b:19:a8:d1:44:9e:1e:ce:ec:a6:
62:a8:b6:44:df:0a:9c:22:0d:d4:1c:77:d0:c0:2b:
78:5c:ee:49:76:c7:4a:34:e3:8a:67:5c:b5:c0:9f:
81:37:15:c8:3e:31:73:07:e9:cc:97:e6:49:b4:78:
e2:4e:12:24:e1:64:00:cc:52:cb:b7:dc:10:74:07:
da:71:49:cb:9b:6a:52:01:c6:e6:c4:e8:50:e1:01:
17:8a:62:a8:97:88:03:d8:4b:6a:3b:19:b2:ae:c8:
11:38:a5:7b:3c:26:72:67:01:5c:53:1b:29:6c:57:
2a:5b:1f:2d:d3:73:65:87:33:cd:1e:41:60:0e:24:
4a:68:ab:31:40:bf:4b:c9:4b:3f:3a:35:73:2d:27:
e3:c9:15:11:ae:3a:a3:23:e3:29:b1:58:fa:2a:61:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:71:38:A4:92:2E:79:F1:44:E8:E3:FC:EF:04:6F:F6:8F:E0:DC
X509v3 Authority Key Identifier:
keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.128.5.0-101.128.7.255
103.9.16.0/22
202.52.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:eb:06:64:cc:0a:d4:53:77:41:f7:e5:73:83:04:a6:32:0b:
9d:cf:56:25:d5:9b:df:b2:3e:7c:99:3d:79:1b:c2:4f:e7:f2:
e6:f2:12:03:b6:47:47:fa:1b:c5:06:cc:84:72:d1:60:9f:77:
eb:cc:03:6b:8a:50:a3:20:eb:70:51:24:23:d4:a1:68:52:a7:
ad:b4:f4:a3:fc:98:92:65:ee:04:12:6f:94:5f:23:36:1b:c3:
98:7d:0d:41:6c:40:45:20:8e:51:7f:6f:ae:04:ea:18:bd:bd:
1b:b2:5c:18:5d:d3:ce:26:80:99:41:d8:b1:27:29:98:7f:01:
83:d2:e7:fa:3f:02:7a:9c:2c:61:fe:6d:72:2d:f1:63:8e:98:
97:07:94:04:20:dc:1c:14:63:98:34:71:9b:51:cb:b1:6f:bf:
32:82:91:d9:8e:ea:93:a9:1a:b7:98:c7:2f:9a:1d:47:bb:b4:
43:27:ba:bb:ad:5b:5d:48:9c:4c:21:98:66:2c:c5:3c:c9:6c:
5d:a1:85:bc:5c:35:2f:26:3a:b5:b6:4e:97:98:d2:b7:61:e0:
b0:4a:10:96:19:23:7c:cb:90:2d:89:60:a9:15:3a:7e:eb:c2:
09:a4:d8:37:af:26:d3:f8:63:ab:73:05:4a:cf:25:99:36:eb:
9e:46:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:11 2026 by rpki-client