
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1DE4BA468E9011F08491DD13C4F9AE02.roa
File: 1DE4BA468E9011F08491DD13C4F9AE02.roa (raw, json)
Hash identifier: OwW/GVxdoCnXKKFLXgPCrfMr2J5+4zL5QgowGqz68ms=
Subject key identifier: A6:43:D0:B6:09:AB:1E:57:48:99:59:D6:71:49:A0:9C:E8:DB:45:D9
Certificate issuer: /CN=A91F5183/serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C
Certificate serial: 58
Authority key identifier: D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1DE4BA468E9011F08491DD13C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:29:54 +0000
ROA not before: Wed 10 Sep 2025 21:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 37999
IP address blocks: 103.231.156.0/23 maxlen: 24
202.36.33.0/24 maxlen: 24
202.89.4.0/22 maxlen: 22
202.89.4.0/24 maxlen: 24
202.89.5.0/24 maxlen: 24
202.89.6.0/24 maxlen: 24
202.89.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl
rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5183, serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C
Validity
Not Before: Sep 10 21:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3dce2-f8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:2a:02:d0:42:cf:2a:51:b9:08:57:b2:c4:
e8:dc:89:c0:1d:7a:2a:f8:cb:65:ec:18:ad:c1:63:
84:9d:d5:fe:6f:8f:52:9d:66:b2:5d:71:cd:64:dd:
8a:f6:69:ce:e4:6e:89:4c:2d:d6:b2:43:a9:0b:17:
8b:0e:8c:ac:cd:1a:3e:5a:cc:ef:11:c2:58:55:bc:
65:f2:55:79:75:56:c2:98:34:f5:5d:23:f9:a6:ea:
ac:e6:55:ed:8e:bb:e8:7a:62:b3:a1:86:0c:15:07:
70:2d:08:8e:0a:ab:2b:0c:9f:4c:34:3d:b8:65:15:
4d:d1:b3:93:10:04:85:72:8e:6f:96:a8:90:a0:29:
13:a4:5a:1a:52:14:65:fb:11:71:c5:9b:fe:9b:0d:
15:fa:af:de:9c:10:9e:56:8a:93:2d:77:b6:8e:78:
56:94:45:71:6e:71:2b:13:c5:3f:53:6b:56:de:3b:
4d:39:db:d6:e3:09:39:59:71:37:a3:77:13:ac:f3:
09:9b:bb:e7:a0:a4:a0:0a:45:96:3b:7c:e1:73:a9:
2a:d7:19:d6:ab:5d:5f:b8:0e:3e:44:e5:52:43:68:
13:ac:12:70:c3:09:48:ed:fb:4b:11:e6:80:a6:c8:
4d:77:84:d3:ff:43:63:b8:4a:5b:bd:ef:c5:74:01:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:43:D0:B6:09:AB:1E:57:48:99:59:D6:71:49:A0:9C:E8:DB:45:D9
X509v3 Authority Key Identifier:
keyid:D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1DE4BA468E9011F08491DD13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.231.156.0/23
202.36.33.0/24
202.89.4.0/22
Signature Algorithm: sha256WithRSAEncryption
76:80:b2:eb:d0:43:21:86:e5:02:cc:be:6f:7e:46:3c:2c:a9:
04:33:29:01:41:af:aa:15:99:30:74:a5:da:c2:e7:7f:71:21:
36:c3:df:af:94:9f:e6:e1:24:70:f5:03:7e:24:07:1d:c2:6e:
ad:be:49:24:41:ba:ec:04:44:c3:70:60:e9:92:6d:b2:71:0a:
53:70:8c:7f:db:6d:f5:dd:4b:65:7d:c4:9a:05:fe:a0:e7:bd:
e5:a9:fc:1e:40:f5:ea:1c:64:03:17:39:51:0c:bd:62:24:a3:
76:bd:bb:4e:69:77:3f:cd:ac:f6:b1:b9:36:be:c3:68:bd:a5:
9b:91:1b:c9:c9:bf:75:4f:3a:63:13:ca:63:f5:0b:64:d4:29:
c0:dd:47:e6:75:03:65:96:17:c7:d6:28:35:cc:6f:51:d3:0f:
a5:6f:c2:4d:35:66:63:e4:43:86:eb:da:65:38:6a:5e:d2:9f:
cb:2c:2a:ad:a7:c1:59:74:16:06:7c:4c:6f:07:41:37:9e:c1:
eb:90:a6:ee:29:d7:3a:62:42:6a:a8:75:eb:2a:17:34:60:18:
30:52:f2:35:cb:88:ed:b6:8b:c3:b3:0f:33:e4:66:10:33:c0:
31:24:28:3b:55:95:a0:53:b1:b4:71:a2:d5:a7:d1:85:0d:c9:
21:11:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:39 2026 by rpki-client