
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/545EDE9C140911EF8520A25BC4F9AE02.roa
File: 545EDE9C140911EF8520A25BC4F9AE02.roa (raw, json)
Hash identifier: pWo8UGItGRuFuaNz8hCTITDK+iaiHyXnLVWT/0w5Zfw=
Subject key identifier: A3:3C:2D:E0:81:5D:1B:D5:F2:3D:30:BD:50:74:42:FF:B9:45:08:90
Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial: 026C
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/545EDE9C140911EF8520A25BC4F9AE02.roa
Signing time: Thu 21 May 2026 02:33:18 +0000
ROA not before: Thu 21 May 2026 02:33:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135517
IP address blocks: 103.101.98.0/23 maxlen: 23
103.101.98.0/24 maxlen: 24
103.101.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Validity
Not Before: May 21 02:33:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a0e6eee-d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:3e:d8:28:25:e0:5c:04:89:35:f9:00:2f:
f1:35:45:ef:3a:29:95:4d:d4:6a:b8:b9:8f:e3:f3:
f7:3f:6b:8c:78:25:92:09:03:37:f7:4b:3a:81:d3:
bb:b4:16:b4:fd:bb:ed:b3:78:9c:b5:35:dc:a6:6a:
70:1a:7a:91:ca:f8:3b:ff:c4:54:c9:e2:9c:ae:0f:
c6:e6:af:74:82:8f:1a:96:5c:33:cb:98:09:aa:29:
ab:04:0f:63:28:eb:de:ef:aa:78:42:42:8b:6e:ef:
b8:51:b7:5e:5f:0a:d3:ba:59:25:a8:21:9d:a0:23:
23:e4:0e:40:0d:9d:db:2a:9c:fe:ad:24:39:f1:f8:
ae:13:04:7a:8c:6c:65:cc:9b:e6:11:c2:da:9a:36:
b3:5a:ae:75:fe:87:75:c3:db:ac:ad:47:c0:ee:25:
90:ef:ba:a2:89:8c:7f:c7:21:42:5a:6d:54:d2:0e:
ff:00:a4:94:7a:b7:f9:3d:1d:0c:0b:38:f7:f0:58:
8c:fb:3e:63:ee:a9:8d:ee:d0:4e:49:09:08:b3:d3:
65:24:d8:2c:71:96:ce:28:68:da:b4:91:ea:3a:cb:
ba:c7:c1:28:b3:9c:cf:d9:8d:a3:e9:e0:7f:f3:3a:
79:98:95:b6:db:e9:6d:9b:dd:70:ff:7b:c4:56:c4:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:2D:E0:81:5D:1B:D5:F2:3D:30:BD:50:74:42:FF:B9:45:08:90
X509v3 Authority Key Identifier:
keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/545EDE9C140911EF8520A25BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.98.0/23
Signature Algorithm: sha256WithRSAEncryption
68:d6:1f:3b:6c:58:e9:a9:22:82:b6:9a:3e:cf:25:e9:3b:dc:
75:e7:96:5c:72:c6:48:83:17:29:b5:0b:f9:56:d2:b5:a1:07:
67:4b:74:a2:61:59:d2:bc:80:28:ce:80:84:b9:f3:72:c1:63:
f7:d1:b0:38:c5:c9:2d:f9:b3:01:8b:86:37:51:40:df:70:f5:
e5:39:af:99:64:29:11:5c:85:77:81:99:8d:46:70:49:ee:27:
ee:a8:4c:1d:9c:89:57:78:01:4a:5e:89:44:61:c6:ab:81:18:
6b:78:b9:2d:17:0e:88:b6:d7:0d:71:8e:75:84:9e:50:a9:e3:
97:93:7c:a8:94:73:16:b2:6c:45:bb:b2:3c:c3:52:5f:00:c6:
c0:30:1d:95:d7:98:6f:be:e4:98:1b:9c:37:76:d2:1e:e3:2a:
10:f2:14:e9:d9:25:81:91:4b:bb:09:04:bc:3a:ce:6f:a6:44:
49:a3:ac:f2:c0:ad:79:53:24:78:9b:59:a6:1c:b5:ce:b5:54:
30:a4:7f:d7:17:65:b1:e6:30:d3:3f:e4:a6:c9:35:8d:71:1f:
90:d2:c2:6f:47:ff:92:19:63:af:e3:7f:87:95:8d:96:3c:77:
16:5a:9b:40:af:a7:25:c5:7b:ce:14:06:24:de:59:57:21:b0:
f3:91:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:40 2026 by rpki-client