
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/5541D6A21F9A11EE9BB7905DC4F9AE02.roa
File: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (raw, json)
Hash identifier: tV7zN4p6YBZjKHrlAaXgAexa7jVk375T1BwHlahtKKM=
Subject key identifier: 13:C1:85:6B:20:FA:3F:E4:FB:83:48:30:6A:C7:CA:23:82:81:A6:CD
Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Certificate serial: 01FB
Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/5541D6A21F9A11EE9BB7905DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:08:05 +0000
ROA not before: Mon 29 Sep 2025 02:30:30 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151491
IP address blocks: 103.239.105.0/24 maxlen: 24
203.9.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Validity
Not Before: Sep 29 02:30:30 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a45655-bffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:d2:22:9d:4d:c5:7a:3f:3e:74:eb:65:d4:
14:5e:6d:ee:7e:68:8f:f6:40:8c:9b:0d:25:b0:70:
84:dd:61:21:67:18:81:ce:0f:cc:1b:8c:5a:51:1a:
3a:ef:b0:04:56:23:0a:82:11:f1:5d:9a:9d:98:82:
d0:a6:04:23:00:0a:39:cc:05:50:f7:88:aa:2e:ed:
e6:f8:fe:c3:59:31:a8:18:c3:a5:dc:8a:7f:75:12:
93:da:ce:8c:48:24:90:5a:5b:ef:bf:e5:6d:69:a2:
04:a6:73:32:3e:6d:4e:4b:23:36:d6:73:74:4c:c5:
2c:08:d2:87:6c:95:7d:ed:bb:5b:a6:fb:39:bb:0c:
c2:ea:b0:f4:92:64:78:e3:36:f9:1c:d8:a3:2f:ce:
cd:f9:3d:16:28:ba:fe:74:40:e2:73:86:59:d5:97:
31:fc:27:42:f1:d8:b5:3c:28:31:28:dd:01:8f:1b:
82:a7:d1:bc:26:f6:af:71:7b:b2:9b:08:26:10:03:
98:58:41:99:d6:69:d7:a8:c3:3b:b4:8f:a0:ee:56:
3f:0d:f4:80:9e:2c:33:09:4b:a7:d8:66:43:92:76:
6a:9b:b3:9c:74:fb:04:89:c1:7c:77:0b:6e:28:06:
93:d9:c6:67:2c:d8:4c:eb:69:21:60:81:5d:2e:e1:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C1:85:6B:20:FA:3F:E4:FB:83:48:30:6A:C7:CA:23:82:81:A6:CD
X509v3 Authority Key Identifier:
keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/5541D6A21F9A11EE9BB7905DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.105.0/24
203.9.219.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d9:e9:81:cc:a5:bb:89:f7:8a:0a:1e:1d:e8:e5:e1:a6:88:
51:17:75:7b:47:93:de:a4:36:41:54:2e:7b:e7:4d:9e:58:dd:
c6:e3:3c:08:d6:fb:48:dd:c6:63:83:f1:be:99:fd:4a:8f:24:
76:c7:36:5c:56:00:85:c4:9d:fe:57:cd:c9:2e:bd:20:28:49:
69:08:b7:07:fb:f7:9b:3a:bb:07:12:7d:fc:86:c2:c2:a0:4e:
0f:6f:db:fc:2f:f1:6d:4c:48:15:d8:84:54:5c:b4:ab:aa:0b:
0f:31:12:77:e9:2b:58:c4:19:a8:ca:0a:49:82:3e:c2:ac:f7:
5d:6a:75:be:72:44:77:ff:04:8a:51:9b:69:d3:94:fd:2d:97:
e0:04:18:65:55:05:e3:18:a3:e2:20:a1:b1:17:03:68:6c:cc:
e1:d6:fa:52:c8:e9:36:d7:97:46:63:16:ef:15:1d:a1:ad:f6:
80:c9:e0:df:f6:12:e6:25:0d:b6:e3:6c:9c:45:b3:ad:c5:39:
72:74:85:b7:16:72:55:91:df:11:13:a9:2a:85:28:59:a8:95:
41:be:31:92:c9:0f:2f:48:2c:9f:ec:fb:1c:ca:5c:84:21:ed:
5a:67:31:90:0e:5d:99:42:bf:de:73:31:7e:ac:85:18:c6:ac:
44:80:75:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:14 2026 by rpki-client