
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa
File: 3442C35A995711ECA076C26CC4F9AE02.roa (raw, json)
Hash identifier: rlSahlV2k8tV8D40qqJftXMSzJ14xhZ1SM4p6rcVoBU=
Subject key identifier: D7:EB:17:A1:40:CA:B2:20:11:9C:11:03:5F:82:EF:3C:22:D3:C4:1B
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5DA1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:14:46 +0000
ROA not before: Thu 28 Aug 2025 14:52:16 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131345
IP address blocks: 103.5.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23969 (0x5da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:52:16 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60bd6-ba49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:a7:2d:99:1e:fa:81:7b:04:b7:37:02:76:
02:c4:46:2b:2c:c0:99:30:a1:32:11:f2:a8:93:dc:
cf:56:58:bf:7e:d6:71:2f:ea:95:ba:76:ee:0d:1a:
a1:80:96:80:4f:03:40:eb:f0:bf:19:56:96:ad:77:
39:48:41:6f:10:58:c5:48:a4:07:bd:98:a6:10:bf:
79:c0:c3:4b:1e:30:5d:a1:8d:85:8b:5c:ae:1e:32:
82:b0:59:4f:df:da:9f:d0:d9:13:83:b0:31:08:bc:
4e:0e:9c:c1:ed:b5:3e:0b:92:5c:f3:f6:b5:e4:bc:
fe:aa:00:5c:63:e7:b9:bf:c4:86:bf:2d:e1:6b:32:
fe:05:c7:a9:a0:74:96:d9:43:60:44:77:f9:43:17:
df:20:fc:31:ff:9c:51:60:25:f5:74:1a:eb:2b:46:
7e:94:72:c9:e2:b5:78:8d:70:0c:d5:bc:ff:d2:6b:
3d:7e:d3:ab:e9:a9:d9:af:2c:ab:17:a3:15:58:5d:
3e:e2:a8:30:cd:ac:31:e4:bb:28:6a:80:1e:e0:ce:
84:72:4f:f9:03:a8:e1:05:a6:aa:1e:05:87:fc:c7:
0c:52:ac:d9:7b:97:37:77:70:a8:43:fb:5c:cf:b8:
b2:cc:e9:05:c8:fd:05:e7:a0:80:61:a3:66:79:49:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:17:A1:40:CA:B2:20:11:9C:11:03:5F:82:EF:3C:22:D3:C4:1B
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.30.0/23
Signature Algorithm: sha256WithRSAEncryption
af:6e:08:13:4f:65:37:6c:31:b8:ae:3a:fe:e5:02:48:69:10:
61:66:c0:50:07:60:b0:05:c4:c5:bc:0f:bd:37:56:9e:45:3d:
ae:17:ce:af:bd:ba:80:6f:1a:c4:71:01:f1:11:97:94:c0:85:
90:e5:c2:53:04:7e:0e:f9:61:dd:b7:8f:27:17:4d:f3:b8:29:
15:c0:54:16:17:c2:14:60:92:ff:37:5f:72:4b:2d:d8:c5:94:
1e:7f:fe:d5:59:21:56:54:f7:8e:fd:5e:ae:8a:93:82:77:e2:
73:75:2f:7c:69:4e:b2:b9:ac:42:1f:50:3a:6a:01:56:fa:09:
c4:ae:86:02:35:1d:25:3f:70:0b:ba:7b:eb:71:3e:6a:b0:09:
3f:52:a1:4e:15:a7:e1:8a:89:c8:80:df:18:c8:66:7b:28:d7:
d7:53:96:20:77:14:c0:01:bd:de:d8:87:f3:8c:e0:1c:8d:c7:
85:d7:44:fe:9e:d2:de:73:a6:c9:43:4d:aa:e9:97:33:6c:20:
5b:27:1b:7a:be:5d:c9:0e:1a:e0:0d:82:0a:b0:6a:04:0c:bd:
59:67:67:bb:3f:f3:22:aa:9c:58:dc:48:f3:f4:95:c4:15:16:
75:df:73:82:fb:92:69:60:fc:35:15:72:e5:68:4f:dd:56:34:
19:d3:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:07 2026 by rpki-client