
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa
File: 7588035C913E11EFB46E9A72C4F9AE02.roa (raw, json)
Hash identifier: MmWRFerEe26M/98UPURwOZll8JnafXZbQUp9p9WdUVM=
Subject key identifier: 60:54:F4:B9:A4:12:30:86:3B:18:AD:4E:13:BB:7C:BC:B8:B5:5A:E3
Certificate issuer: /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
Certificate serial: 0203
Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:36:57 +0000
ROA not before: Tue 03 Jun 2025 04:01:51 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 58914
IP address blocks: 103.24.64.0/22 maxlen: 24
2406:b300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl
rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA562, serialNumber=340F813433719A760E3BFE21933687261179C327
Validity
Not Before: Jun 3 04:01:51 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3de89-ebea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:61:5a:19:12:7c:a1:07:26:dc:5a:07:d2:
51:a3:31:33:d9:51:d4:50:29:af:e1:63:a1:4a:59:
47:b2:85:9a:94:03:e9:6a:e3:87:79:f4:4a:cc:ad:
c0:0e:ac:c4:62:65:69:b2:c0:18:f2:3d:ad:62:2a:
df:91:eb:c5:c9:51:ad:7f:46:d8:70:28:49:03:54:
75:12:ee:73:96:32:db:ec:8c:3d:7a:b4:1d:f8:53:
70:3c:08:05:05:85:7d:de:00:42:1b:1e:93:a7:1d:
42:5e:26:18:b0:6c:23:13:e2:68:8a:76:08:9e:42:
9a:20:b0:8e:2b:ef:12:76:14:f7:9e:ea:f7:33:b4:
6f:cc:74:be:61:c7:f7:65:ad:52:93:79:d2:83:59:
39:44:46:43:e1:98:66:0b:d0:49:41:64:9b:01:e1:
1e:e1:7f:25:7d:2c:b2:02:c8:a8:d9:8f:86:3c:4c:
ad:3e:eb:e3:39:e6:c0:05:c4:56:51:d7:ea:e4:ad:
09:bc:b2:ce:d5:87:bc:c6:b3:5c:9e:49:d3:1b:5b:
67:51:8b:74:9a:a3:85:e1:f4:0c:2e:d3:75:26:8b:
55:70:19:b0:23:f4:7f:58:a8:f2:81:c9:5c:9b:08:
68:c4:c6:70:d1:da:20:96:5d:45:a3:59:dc:41:44:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:F4:B9:A4:12:30:86:3B:18:AD:4E:13:BB:7C:BC:B8:B5:5A:E3
X509v3 Authority Key Identifier:
keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.64.0/22
IPv6:
2406:b300::/32
Signature Algorithm: sha256WithRSAEncryption
a4:9c:1a:ed:05:4c:28:59:3a:c8:8f:b3:63:ee:8f:4a:7e:90:
80:2f:d2:fa:35:7b:8a:7c:98:64:e9:d4:6f:4c:34:56:e8:ea:
68:3b:d5:c4:ca:68:1f:ec:c8:cd:6f:c1:59:f2:b5:2b:3d:b5:
45:df:d3:3a:bf:16:9e:9d:69:51:00:15:6a:f8:d9:86:6d:72:
97:5e:6d:92:26:8e:b1:df:3b:1a:82:d7:81:de:d0:df:a0:8f:
eb:3c:41:b7:1b:c4:66:60:78:88:12:d4:1c:f3:70:22:65:f7:
e2:24:08:46:30:68:4e:12:ba:7c:93:5e:9b:15:bc:62:b5:74:
75:c8:68:81:aa:86:b4:46:29:ab:f6:19:74:3d:48:5f:84:a6:
6a:5f:69:d9:81:73:dc:17:bc:d6:66:f3:01:0e:33:bd:6b:9e:
39:9b:12:04:07:22:df:71:95:34:65:13:5b:8d:dd:72:b9:5b:
60:57:c7:4f:51:0a:43:50:e9:75:bd:43:4e:2b:5e:4d:5e:92:
dc:22:24:40:63:69:d3:d6:86:4e:53:62:17:1d:01:dc:4b:9f:
35:08:88:85:aa:72:7e:3f:56:4f:6e:bb:52:9c:31:13:9e:21:
a3:50:83:de:af:0b:05:03:b1:ae:9e:8b:8b:60:0c:36:8c:37:
5c:06:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:21:36 2026 by rpki-client