
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa
File: 9C53117E83FB11EBB159507AC4F9AE02.roa (raw, json)
Hash identifier: AvFpiPzoylVw4G/MsLt4TbCQjir5YYIiqW7GJXdzpek=
Subject key identifier: 45:06:66:8D:D7:4A:C1:A0:0B:7C:4C:78:CF:18:A8:7C:75:ED:16:D1
Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial: 070D
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa
Signing time: Tue 31 Mar 2026 22:28:39 +0000
ROA not before: Tue 31 Mar 2026 22:28:39 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 139879
IP address blocks: 103.164.48.0/23 maxlen: 23
103.164.48.0/24 maxlen: 24
103.164.49.0/24 maxlen: 24
2001:df6:3c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Validity
Not Before: Mar 31 22:28:39 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc4a97-3b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:23:e3:ea:ed:f6:54:c0:33:b0:6f:ec:fc:
49:c7:6a:fd:50:a2:b2:e4:d9:3c:56:3c:0e:24:83:
e8:2d:20:8c:ee:98:c3:69:cb:03:41:4b:f4:b4:66:
73:67:3b:0b:98:c4:13:31:4f:6a:64:0e:53:04:b3:
3e:17:db:47:56:11:74:2e:ab:09:93:1c:5f:e1:e5:
26:87:e5:e7:dc:6e:f2:cd:e2:6e:d4:aa:84:ca:04:
a9:c2:17:54:a2:10:93:af:5e:27:6b:5d:c1:62:b5:
70:75:32:d5:56:fa:ec:00:3d:a8:fd:2a:76:c4:8f:
74:59:54:61:2c:c0:9a:26:55:fd:05:69:db:d4:5d:
2b:e0:54:f3:46:29:16:b3:68:fa:33:62:63:b0:25:
e8:d3:3e:57:1a:da:b9:45:8e:9f:4a:68:cd:19:bc:
df:5a:66:d0:5c:d6:b2:f2:08:df:b2:5d:2c:fc:14:
f3:0c:d9:09:18:5f:70:f8:86:dc:4a:6a:ba:93:68:
5e:19:42:50:8b:1a:88:a2:40:a2:45:4f:4b:f1:24:
f7:1e:f3:10:ac:d8:84:4e:d4:a0:82:7b:38:84:d0:
c6:9e:59:6e:f9:6d:e1:43:22:b9:c5:d1:8c:2f:17:
74:a7:a3:a6:32:f9:9c:58:b6:e2:a8:88:9b:f9:0b:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:66:8D:D7:4A:C1:A0:0B:7C:4C:78:CF:18:A8:7C:75:ED:16:D1
X509v3 Authority Key Identifier:
keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.48.0/23
IPv6:
2001:df6:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c3:e1:c4:cb:9c:00:5b:a9:5b:42:45:0f:f2:dc:21:f4:8b:
0b:10:eb:b1:f5:36:86:81:8e:fa:2c:6b:d0:0e:40:3c:16:20:
cb:93:b9:9e:92:54:59:60:78:9a:33:a0:b0:bc:d7:11:7b:02:
e1:21:92:f1:7e:d1:64:cf:83:02:4b:9f:75:fb:6d:2f:82:a8:
66:6f:1d:86:f6:dc:60:06:7f:dd:51:61:7a:e1:9c:aa:15:d1:
71:74:b6:28:d2:b7:f4:55:da:7f:9c:a3:54:2d:ce:2d:87:82:
5e:29:91:a2:e7:3a:ba:96:08:56:3c:d9:58:8d:ae:c7:0e:f6:
a3:8f:9b:15:c7:d4:22:03:c6:30:f1:13:92:a3:a1:85:a3:33:
f0:b8:dc:a8:50:83:e8:5f:29:e2:f9:28:72:7a:b3:6e:44:64:
f2:07:a0:83:d7:4e:5f:60:68:ab:f0:ae:8b:7b:52:0f:95:89:
a4:ca:61:7c:e4:33:90:13:47:f1:00:cf:c7:79:ab:db:8f:7b:
18:dc:f7:74:8d:4e:66:73:9a:6c:80:3b:9b:df:1f:68:bc:58:
5f:12:cb:0d:28:1a:78:87:48:6f:36:ee:e4:ed:73:70:c5:6e:
91:db:f4:f2:ec:e0:62:72:31:42:26:48:b4:bd:40:77:5a:d8:
c1:b7:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:24 2026 by rpki-client