
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/25B9F9C454BE11EE810E4C27C4F9AE02.roa
File: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (raw, json)
Hash identifier: +XblEFbHvTMWzWB5YcW4gFr8l+aiQacIHVPmD8SMV9w=
Subject key identifier: 40:5E:71:16:AA:C4:5B:1B:B2:61:D7:5B:04:29:62:8C:39:43:CB:EF
Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Certificate serial: 0205
Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/25B9F9C454BE11EE810E4C27C4F9AE02.roa
Signing time: Fri 05 Jun 2026 03:35:33 +0000
ROA not before: Fri 05 Jun 2026 03:35:33 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 59217
IP address blocks: 103.114.44.0/22 maxlen: 24
2402:cac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Validity
Not Before: Jun 5 03:35:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a224405-ea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:92:51:fb:0e:f6:65:9b:0c:77:de:b0:cb:
7c:39:19:67:6a:16:61:73:6b:92:df:a1:f9:3d:8b:
7d:07:61:5f:5e:00:8d:ca:ab:df:97:6f:4b:b2:b0:
55:36:34:6a:ec:a3:90:86:29:a7:6c:9d:d9:3d:b9:
d1:14:60:3f:83:d7:27:d7:82:81:44:1f:36:37:07:
15:a6:3f:c0:33:22:de:63:9c:fe:bf:26:51:92:c3:
10:65:96:49:a6:e7:2e:be:87:bc:13:bf:e2:0e:eb:
31:71:54:e8:cf:f2:af:c5:ad:50:fa:87:9e:b5:5a:
54:3b:57:7d:6f:76:bd:27:16:da:b0:94:40:d6:d7:
37:40:b4:e7:b9:60:2e:0a:38:0f:3e:e8:44:74:2f:
03:a1:02:9a:ef:e5:ba:50:f1:76:b6:70:4e:75:d8:
b0:24:9a:57:53:b1:b9:5b:84:23:8d:37:31:d1:bf:
14:ce:37:82:61:27:e2:db:c3:64:4b:00:1a:c2:79:
51:d9:bd:4a:5b:58:f5:8f:e9:8f:dd:02:5f:29:01:
f1:eb:f2:02:88:90:0a:9a:53:15:ce:d3:25:43:cf:
8a:fe:32:b6:5c:45:e3:8f:a2:b9:5c:ac:cc:4e:9a:
77:bb:32:cd:f7:1e:37:01:c4:11:30:1d:2c:04:65:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5E:71:16:AA:C4:5B:1B:B2:61:D7:5B:04:29:62:8C:39:43:CB:EF
X509v3 Authority Key Identifier:
keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/25B9F9C454BE11EE810E4C27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.44.0/22
IPv6:
2402:cac0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:3b:80:19:b2:a4:98:2d:27:db:b3:52:d4:0c:e3:90:35:c3:
fe:b9:64:c6:dd:6a:fc:a5:d7:6d:c4:d2:20:54:1d:bc:a1:6f:
7c:7d:0e:01:f6:ac:9c:9a:ae:01:cb:a9:a7:e4:9a:10:31:af:
8a:74:bf:64:90:5e:54:e1:fb:a3:5f:9f:04:b9:b7:d1:fb:33:
aa:23:9e:39:53:4a:74:24:4c:41:c8:a5:cd:19:54:27:5e:b8:
88:89:f0:3d:60:5c:a2:a1:23:f8:9d:68:f9:a5:c3:e8:07:4c:
02:81:82:fe:13:cc:b8:a4:ea:92:cb:71:9f:65:c6:16:9b:14:
de:8e:e1:bf:d7:9e:a9:54:15:23:e9:54:c7:74:cf:20:bd:38:
8b:a6:3a:3a:e0:b3:37:5a:df:45:fd:d6:62:e3:2c:96:80:d9:
f5:74:87:c3:73:5b:9a:77:60:25:d4:bd:fe:49:1c:63:ef:5c:
33:4d:a2:52:b6:3a:e4:98:de:82:46:c8:08:21:fb:89:1d:9a:
f0:4a:9d:c5:74:a7:50:69:b9:03:71:47:9c:73:f6:70:36:24:
34:97:1f:11:df:c6:48:bc:b0:7b:6c:2b:a5:42:eb:c2:06:2d:
6c:35:dd:88:3f:00:ad:cc:d0:43:48:bf:2f:b4:63:c9:00:32:
cc:ca:04:89
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5
QTgwQkVBMDgwHhcNMjYwNjA1MDMzNTMzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyNDQwNS1lYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAte6SUfsO9mWbDHfesMt8ORlnahZhc2uS36H5PYt9B2FfXgCNyqvfl29LsrBV
NjRq7KOQhimnbJ3ZPbnRFGA/g9cn14KBRB82NwcVpj/AMyLeY5z+vyZRksMQZZZJ
pucuvoe8E7/iDusxcVToz/Kvxa1Q+oeetVpUO1d9b3a9JxbasJRA1tc3QLTnuWAu
CjgPPuhEdC8DoQKa7+W6UPF2tnBOddiwJJpXU7G5W4QjjTcx0b8UzjeCYSfi28Nk
SwAawnlR2b1KW1j1j+mP3QJfKQHx6/ICiJAKmlMVztMlQ8+K/jK2XEXjj6K5XKzM
Tpp3uzLN9x43AcQRMB0sBGWPVwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEBecRaq
xFsbsmHXWwQpYow5Q8vvMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0
QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkI5MkIvQzQ2MDgxRjI1NEJEMTFFRTgxMDJGMDdGQzRGOUFFMDIvMjVCOUY5QzQ1
NEJFMTFFRTgxMEU0QzI3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ3IsMA0EAgACMAcDBQAkAsrAMA0GCSqGSIb3DQEBCwUAA4IBAQCc
O4AZsqSYLSfbs1LUDOOQNcP+uWTG3Wr8pddtxNIgVB28oW98fQ4B9qycmq4By6mn
5JoQMa+KdL9kkF5U4fujX58EubfR+zOqI545U0p0JExByKXNGVQnXriIifA9YFyi
oSP4nWj5pcPoB0wCgYL+E8y4pOqSy3GfZcYWmxTejuG/156pVBUj6VTHdM8gvTiL
pjo64LM3Wt9F/dZi4yyWgNn1dIfDc1uad2Al1L3+SRxj71wzTaJStjrkmN6CRsgI
IfuJHZrwSp3FdKdQabkDcUecc/ZwNiQ0lx8R38ZIvLB7bCulQuvCBi1sNd2IPwCt
zNBDSL8vtGPJADLMygSJ
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:36 2026 by rpki-client