
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/A23D5DE87A6911EA930EB439C4F9AE02.roa
File: A23D5DE87A6911EA930EB439C4F9AE02.roa (raw, json)
Hash identifier: MObLxHg+0HyslwCyt5x1ibD8HWNnbjOCAqyl5AXJDCE=
Subject key identifier: 50:E4:B3:40:0D:35:3A:AC:11:C1:1C:E1:28:CB:EA:F2:07:F2:63:9B
Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC
Certificate serial: 0ABC
Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/A23D5DE87A6911EA930EB439C4F9AE02.roa
Signing time: Tue 02 Jun 2026 20:23:29 +0000
ROA not before: Tue 02 Jun 2026 20:23:29 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 134201
IP address blocks: 45.118.60.0/22 maxlen: 24
103.58.92.0/22 maxlen: 24
2402:6480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl
rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC
Validity
Not Before: Jun 2 20:23:29 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a1f3bc1-0239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:d5:5e:85:32:c5:cc:c6:90:b6:79:37:e1:
70:f9:fa:ff:6a:87:38:f1:27:0a:61:92:09:67:2e:
1c:b5:0b:7c:6d:88:d7:45:ad:8b:11:fb:f6:7c:3b:
c8:b6:e3:36:26:09:11:77:49:e3:a9:20:dc:7e:78:
91:d7:06:91:cd:8b:04:41:e9:31:ed:24:d0:a4:5d:
66:17:57:2b:eb:1b:c7:d0:e3:d7:2a:e5:00:6a:7a:
1f:5b:97:34:39:8f:f4:7b:7a:16:84:b5:87:9c:45:
e3:ef:b0:21:f0:6b:7f:74:5b:ef:d4:3b:79:56:21:
6f:67:02:34:f1:e0:e4:04:62:bd:a3:ae:1b:de:a4:
f1:77:51:a6:05:e7:28:fb:bf:bb:a9:f5:15:03:f2:
28:98:83:2e:0f:a4:2d:48:bb:8f:35:e4:46:10:02:
6b:8b:ed:64:35:50:16:c0:74:a8:b0:ee:2b:85:b3:
16:6b:d9:2b:a4:5a:af:1f:99:0f:ef:cd:c6:5a:08:
a6:d7:7e:97:a5:ee:33:bb:65:b8:27:1e:75:2e:3e:
bb:35:8d:7e:66:47:49:5a:5e:c7:bc:46:29:3d:10:
79:45:cd:1c:03:88:19:be:5e:e9:13:4c:37:42:c6:
f5:16:a5:58:b1:d0:45:26:50:a8:08:8a:4a:2f:8e:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E4:B3:40:0D:35:3A:AC:11:C1:1C:E1:28:CB:EA:F2:07:F2:63:9B
X509v3 Authority Key Identifier:
keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/A23D5DE87A6911EA930EB439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.118.60.0/22
103.58.92.0/22
IPv6:
2402:6480::/32
Signature Algorithm: sha256WithRSAEncryption
20:8f:f8:c1:58:f2:8c:9a:92:7b:a9:49:ac:be:43:da:87:d0:
02:96:a1:d9:c0:66:20:80:2f:e0:46:02:70:f1:e8:3e:33:e0:
3c:b5:3c:c4:a4:55:14:8b:12:58:e3:43:de:2f:12:6d:59:bc:
02:85:1a:6e:af:09:dd:e8:1a:c4:bf:ee:bd:99:62:d0:21:da:
25:3c:c0:f5:6a:f5:ab:19:ce:09:60:aa:1d:0b:c9:66:aa:78:
8a:a1:53:0a:cf:bb:36:ea:00:f8:cd:e3:a6:a4:de:a3:f5:c1:
fe:7a:a8:87:1f:1b:44:7f:34:1b:61:53:89:95:52:22:20:aa:
08:55:04:5b:07:e4:7d:84:8a:43:df:6c:69:2f:31:e1:67:bc:
7e:74:75:fa:23:89:35:2b:b1:a2:a0:a5:19:e9:fc:27:2e:98:
5d:8a:be:95:f0:c8:10:67:81:e3:ad:65:03:9e:65:68:5d:74:
28:83:c7:4c:b7:59:bd:b0:53:6b:1e:3a:ba:ee:81:51:ff:1c:
7b:eb:d8:25:46:af:d5:48:40:f4:98:38:a3:c7:0e:b3:42:a3:
cc:61:e2:99:50:18:94:33:bf:39:ae:2b:27:64:2c:9c:d2:4d:
dd:cd:c9:c2:0a:8b:5e:b2:0e:94:93:f6:bd:2c:26:ec:38:6c:
2c:b0:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:03 2026 by rpki-client