
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/D0CA23541BC611F09FDAC047C4F9AE02.roa
File: D0CA23541BC611F09FDAC047C4F9AE02.roa (raw, json)
Hash identifier: 0ABnHn0tYQYE8SzbXPlx35zELqu/1VmLMO+AifbeoVw=
Subject key identifier: D8:6A:F8:06:A8:44:C0:86:39:95:9F:E1:DA:25:0E:20:29:C7:B0:40
Certificate issuer: /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial: A4
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/D0CA23541BC611F09FDAC047C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:35:39 +0000
ROA not before: Thu 17 Apr 2025 20:01:57 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 31287
IP address blocks: 103.170.192.0/23 maxlen: 24
2407:b6c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Validity
Not Before: Apr 17 20:01:57 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5922b-cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:4d:41:8f:8c:e3:cb:a5:5b:72:2d:66:33:
6f:10:01:7a:b5:aa:06:ce:0a:00:9e:b4:53:98:57:
6c:2f:88:65:ea:f8:00:1d:09:87:e7:40:b0:a7:e4:
20:08:61:6e:7a:c6:0b:21:32:d0:fe:b5:73:4e:a1:
c0:7e:ec:74:25:0a:da:d1:8e:cd:17:71:4e:92:b9:
4d:4c:9e:73:2e:b3:6e:10:89:12:8f:a9:6c:b7:5e:
e4:07:09:af:3c:a3:89:b9:91:e4:69:9a:65:03:f8:
db:c1:b2:6d:3d:ed:b9:b2:51:53:ce:0b:cf:90:dc:
f4:cb:39:b8:a4:3c:32:c7:f0:d5:fe:cb:99:ef:38:
2a:da:a6:24:0e:2a:94:f0:5e:ee:9e:2d:74:00:40:
ae:22:5f:9e:50:4b:1a:52:b5:aa:7c:47:9e:82:87:
e2:e6:30:21:fc:24:bd:df:6e:8f:3d:95:74:47:db:
ef:90:9f:02:64:38:6f:98:9f:c8:44:1e:3d:1b:c1:
1a:bc:e5:ca:ff:ec:e6:c7:8a:21:fd:49:3a:cc:e1:
88:a9:03:7e:5a:9c:ad:b1:dc:ab:87:e1:d3:61:69:
c2:7c:d9:70:ff:50:8b:f4:a7:99:83:e0:93:22:3f:
32:77:c3:cf:47:c2:d9:b9:e8:f9:cc:70:8a:c3:01:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6A:F8:06:A8:44:C0:86:39:95:9F:E1:DA:25:0E:20:29:C7:B0:40
X509v3 Authority Key Identifier:
keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/D0CA23541BC611F09FDAC047C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.192.0/23
IPv6:
2407:b6c0::/32
Signature Algorithm: sha256WithRSAEncryption
57:dd:4a:a6:84:53:d8:5a:54:5f:b7:af:f0:09:e3:a1:30:f9:
82:51:52:db:e7:4e:5a:d1:85:bf:10:de:f5:d8:e0:ee:0d:25:
96:82:8f:40:a7:fc:a0:e4:69:48:5f:86:30:67:8f:31:65:b6:
9f:31:71:e2:4a:ef:6e:c3:9a:70:7e:73:67:5b:70:b0:60:8e:
63:61:a2:a0:f2:e8:c8:85:65:6f:be:ab:5a:4c:ce:82:a6:6c:
33:9f:ee:4f:96:7a:a7:7a:d7:ad:a0:59:1f:15:1f:4a:7a:5a:
47:17:f7:ea:4e:e1:d7:da:57:15:d9:24:36:3a:8e:1b:c6:e2:
50:cd:42:fe:e5:d8:ec:cf:07:1c:eb:4b:fb:40:8e:91:44:5f:
6c:36:6d:81:7b:dc:0e:de:b7:22:75:18:2b:87:c6:65:87:0d:
b3:1e:0c:2e:13:18:a9:b7:82:ae:30:95:74:a9:c4:80:01:58:
9d:3b:f2:13:0f:43:f4:2e:c3:46:9a:c1:3b:51:bf:b0:7e:8b:
f8:78:8a:85:8f:67:b7:1b:2f:d7:7c:f6:67:21:09:0c:b4:b4:
2d:3a:65:e7:7f:f8:c4:23:33:4f:4d:04:4a:8a:f7:aa:1d:e0:
4e:11:02:a5:9a:0e:44:f1:ce:b9:db:82:9d:f6:37:04:a4:70:
cf:11:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:19:43 2026 by rpki-client