
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23C52CAEACC511EB8D348368C4F9AE02.roa
File: 23C52CAEACC511EB8D348368C4F9AE02.roa (raw, json)
Hash identifier: c7TmGURsET/2CgIU9JC+LgtLs5Ss3iHdHVRuVjyHK+k=
Subject key identifier: 53:F9:44:32:42:7D:5D:BB:06:29:1E:BF:40:67:21:DC:BD:4C:59:99
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E1E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23C52CAEACC511EB8D348368C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:51 +0000
ROA not before: Thu 28 Aug 2025 14:54:09 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140799
IP address blocks: 103.166.140.0/23 maxlen: 24
103.166.142.0/23 maxlen: 24
2407:5740::/48 maxlen: 48
2407:57c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24094 (0x5e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:09 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c53-6c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:a1:27:7a:c1:2d:9b:df:95:c1:5d:48:e5:
58:62:66:a3:af:ed:57:f5:a7:76:65:3f:6e:6c:d8:
88:60:89:4c:5e:28:ce:43:66:c4:ec:e6:53:4a:4b:
74:2d:5f:72:91:a5:0c:0c:7a:0c:40:70:44:a2:d0:
ed:3e:01:41:37:8e:1d:cf:13:58:c8:a7:d6:af:b1:
0b:55:65:86:2e:9c:43:29:b6:f8:2b:db:85:42:7a:
03:fb:fa:24:18:f7:14:bd:ba:02:e1:90:7b:b5:46:
21:5e:aa:2c:e7:3d:d7:6b:14:fd:1f:17:1b:27:70:
82:c8:39:ab:c4:1b:83:ba:4a:38:45:aa:5f:48:27:
7f:ee:b0:6b:03:38:3c:97:15:2c:74:e1:fd:76:50:
32:58:fc:af:26:bd:91:9a:cc:b3:c9:e4:87:ac:df:
47:61:6f:b8:b5:9c:7f:56:0c:11:da:37:00:3e:94:
d7:45:dd:03:5c:d4:a3:73:c7:9f:4c:7d:ca:af:2d:
b0:40:d3:c5:75:8c:7f:a5:e6:fb:aa:f5:bf:ad:6a:
d3:5f:f4:1f:3a:bb:c2:db:64:a6:05:a4:fb:73:78:
12:83:8e:c9:ce:fd:22:15:e8:0e:26:c5:46:eb:81:
b0:74:44:48:18:d9:af:04:fd:d9:8d:98:f6:d8:59:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F9:44:32:42:7D:5D:BB:06:29:1E:BF:40:67:21:DC:BD:4C:59:99
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23C52CAEACC511EB8D348368C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.140.0/22
IPv6:
2407:5740::/48
2407:57c0::/48
Signature Algorithm: sha256WithRSAEncryption
4c:85:ff:64:e7:14:be:82:b4:b1:df:d3:da:31:e8:9f:fa:09:
9f:23:86:e8:4f:22:8c:3d:34:73:31:43:45:70:da:51:04:c0:
4b:3d:a7:b6:c6:ec:30:36:78:d0:c4:5f:78:2b:29:fb:e9:d0:
27:f6:ed:9f:b5:52:df:fd:8d:05:07:4d:9f:03:d5:da:b2:10:
2d:01:ab:8d:1d:11:da:35:d9:5d:56:33:a3:11:fc:c7:e8:19:
27:ba:de:b3:5a:ec:61:8c:4c:26:f7:04:c0:e4:5a:bf:4a:c3:
50:31:e7:20:f5:f5:06:b2:c1:c7:62:b5:a8:b4:88:94:35:00:
56:4a:c5:52:2b:8b:18:08:74:e5:e8:a6:54:64:0f:f4:66:4c:
02:ce:88:80:c6:26:95:36:15:24:d9:b7:25:1e:a0:d3:79:aa:
ed:17:63:a6:10:88:a2:dd:eb:ce:31:60:9e:f4:af:79:be:c4:
9e:87:13:08:c6:e6:24:73:30:9a:b5:d3:77:19:bb:d3:0f:72:
dd:9f:3f:23:05:e4:93:1c:25:d3:01:bb:fc:79:a1:53:a0:cd:
f3:05:a8:50:fa:98:50:b9:8e:a6:80:2f:e2:a8:c7:7d:06:e8:
aa:71:ea:2f:50:82:2d:31:f4:f0:cb:f4:15:fe:9b:1e:9a:a2:
88:d6:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:25 2026 by rpki-client