
$ rpki-client -vvf rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/095A900E485E11F19C8E7347A2833773.roa
File: 095A900E485E11F19C8E7347A2833773.roa (raw, json)
Hash identifier: i0zNc9repKF5CGp6D95VSysFWBtQLS/5goar7nKkzq0=
Subject key identifier: 41:62:A6:22:CE:68:4E:68:78:45:2D:D6:A7:B3:14:4C:D0:70:D7:55
Certificate issuer: /CN=A91281AC/serialNumber=ADEA6F4F74C005D19BC291931B8C1A8F341907F1
Certificate serial: 02
Authority key identifier: AD:EA:6F:4F:74:C0:05:D1:9B:C2:91:93:1B:8C:1A:8F:34:19:07:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/095A900E485E11F19C8E7347A2833773.roa
Signing time: Tue 05 May 2026 08:40:15 +0000
ROA not before: Tue 05 May 2026 08:40:15 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 63966
IP address blocks: 103.53.154.0/23 maxlen: 23
103.53.154.0/24 maxlen: 24
103.53.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.crl
rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 09:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91281AC, serialNumber=ADEA6F4F74C005D19BC291931B8C1A8F341907F1
Validity
Not Before: May 5 08:40:15 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f9acee-06f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:dd:d1:3e:25:2e:78:18:fe:2b:7e:a4:2e:
04:04:2a:9a:6d:84:a6:9c:6d:49:0f:2e:25:fb:41:
d4:ab:8a:16:1e:29:e7:8b:cd:26:5b:ac:55:40:96:
8d:52:99:7e:5b:23:af:02:5e:f9:0a:b8:d8:7a:34:
90:2a:88:2c:b0:60:21:0c:c9:96:a9:be:ce:bf:8d:
c2:a3:27:34:97:c1:03:75:eb:a5:41:0e:67:6e:ee:
dd:75:4b:77:99:0a:bb:28:33:f8:71:25:f4:10:fa:
0c:a4:90:70:c3:5d:66:e6:a4:d6:c1:05:d2:6f:fe:
13:b5:f6:b6:a7:a5:80:63:1b:7d:60:53:b6:62:ea:
46:cc:c9:f1:d7:bc:5b:89:bd:56:d8:d2:81:2f:8a:
7e:08:04:ad:5f:29:e7:b1:e1:15:c9:fb:e0:21:c1:
6f:03:c6:a2:78:f0:04:cc:91:63:1c:56:85:64:fa:
b8:7d:cb:2c:9e:57:47:18:92:89:e9:6d:36:2d:e7:
08:59:94:18:55:0d:18:0d:1b:08:46:15:24:c4:c0:
38:47:ae:d0:e8:b0:3a:02:e1:15:ee:b6:19:e7:9d:
99:67:dc:ca:d8:6b:be:fc:1d:a8:11:ac:07:67:7e:
8e:87:72:a3:c4:c0:b3:79:93:c7:51:ad:41:d1:a1:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:A6:22:CE:68:4E:68:78:45:2D:D6:A7:B3:14:4C:D0:70:D7:55
X509v3 Authority Key Identifier:
keyid:AD:EA:6F:4F:74:C0:05:D1:9B:C2:91:93:1B:8C:1A:8F:34:19:07:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/095A900E485E11F19C8E7347A2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.53.154.0/23
Signature Algorithm: sha256WithRSAEncryption
44:ba:a4:0f:d3:61:23:60:99:3d:19:c7:82:6f:0e:81:72:73:
55:fa:b9:39:61:65:92:56:c8:d3:f5:af:66:85:11:63:d6:cd:
26:d9:d1:f1:58:8f:ac:9e:04:73:c2:27:ce:57:0c:74:e4:9e:
64:5d:96:ab:f3:b9:01:f3:08:c0:79:bf:05:c9:dd:76:cf:0b:
f6:1c:a7:cb:1f:60:ab:1c:90:07:b3:22:4d:15:96:6f:94:98:
c7:9f:cd:de:86:8e:f8:a9:f5:27:2f:6a:3c:55:e6:6a:cf:db:
05:3a:88:65:52:29:a6:b4:3e:de:57:6f:52:86:a7:5b:d5:31:
3e:15:db:49:29:6d:f1:f8:af:04:b6:76:f7:07:f0:64:b4:55:
c1:6a:3b:2f:15:4d:c9:19:1e:b9:6c:a8:8f:9b:df:34:1d:e2:
1c:bb:aa:17:7c:ea:b5:aa:f8:d4:77:ce:a0:f9:82:cd:b2:30:
9c:61:24:46:e1:e9:a2:14:ec:cf:b7:ba:58:b8:53:2a:67:36:
3c:c0:b2:18:c8:6e:b4:85:6e:fc:67:82:92:b4:8c:1d:0f:71:
e1:21:0d:09:06:f3:6c:e0:60:f5:56:46:5b:cc:47:5e:e5:78:
5f:98:7e:7b:f2:a3:08:6c:bc:b2:d8:a9:8e:6c:51:9c:52:82:
41:58:e2:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 10:12:57 2026 by rpki-client