
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/578A0E0E957211EE8C422C45C4F9AE02.roa
File: 578A0E0E957211EE8C422C45C4F9AE02.roa (raw, json)
Hash identifier: mb2hhV/xCnl6K6rCey/syhBYAavoIyTBJaUzuADA2q8=
Subject key identifier: E4:3B:71:04:73:FD:44:01:14:09:72:ED:55:B7:BF:8D:5F:F7:15:8D
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DDA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/578A0E0E957211EE8C422C45C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:25:18 +0000
ROA not before: Fri 02 Oct 2026 15:25:18 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135972
IP address blocks: 103.139.14.0/23 maxlen: 24
2001:df0:6380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28122 (0x6dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:25:18 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfccde-b0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:e6:cb:e3:b2:55:b4:8e:0b:08:76:08:4c:
84:8b:18:5e:3c:1d:44:b3:87:cc:0e:95:67:e7:59:
d9:89:82:81:36:16:15:3f:ee:94:a3:25:27:f2:40:
0a:0f:9a:9a:2d:3d:ae:5d:91:f1:a9:89:d6:22:7f:
8d:a6:cd:36:4f:db:18:d8:08:5f:42:24:dc:d4:34:
88:67:2b:bd:dc:fa:58:72:e4:64:6f:f8:28:bb:41:
cf:ae:69:91:46:3f:3d:96:01:a5:6a:ca:84:7a:cd:
2f:e3:0b:9b:ee:3a:90:74:c9:85:2e:90:27:c6:0d:
de:25:a3:d7:73:d1:e5:a5:2f:91:9b:39:9e:e3:88:
36:ff:d5:30:8c:53:08:8c:df:7f:12:4e:89:2c:09:
28:8f:ab:8d:a3:c9:5b:22:0a:98:48:ff:a5:8e:27:
9b:be:2a:15:2a:cd:5c:49:16:d9:e4:19:cc:3b:59:
51:eb:90:4e:56:a5:b0:48:dd:6d:9c:84:5c:fa:e9:
0d:c2:fc:05:42:92:25:4f:c4:3e:63:37:29:9d:bd:
d4:76:21:95:4b:a7:64:6a:fb:63:d4:45:2e:a3:cc:
ab:6d:6e:6c:32:21:43:96:2c:02:b3:09:85:57:17:
b7:09:74:12:3d:ef:7e:49:a0:4f:f6:8b:74:7c:b6:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:71:04:73:FD:44:01:14:09:72:ED:55:B7:BF:8D:5F:F7:15:8D
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/578A0E0E957211EE8C422C45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.14.0/23
IPv6:
2001:df0:6380::/48
Signature Algorithm: sha256WithRSAEncryption
55:46:b2:32:f1:64:26:ce:dd:bd:00:30:23:47:24:eb:5f:e5:
61:15:a7:d3:70:11:86:68:8f:14:bc:73:39:c2:e5:fe:1c:ac:
b9:f6:12:b0:d3:7e:9e:39:d9:28:2b:8a:da:a3:cf:16:20:d7:
7d:ed:0d:c1:ee:c2:01:3b:19:18:fb:21:17:9f:a3:83:db:0d:
5c:5a:73:22:f7:2c:47:35:54:65:0a:7e:da:33:2e:ba:78:12:
b0:cc:2b:3f:be:63:76:21:e9:a2:69:29:74:a8:ed:76:9a:e3:
e0:6a:8a:68:22:e7:da:88:81:34:a5:d0:2d:e2:a4:f9:55:0d:
df:4a:d8:e4:72:0e:20:90:76:0e:ed:b2:45:ec:00:e9:90:13:
81:8f:cb:2e:c6:84:b7:44:83:7c:8c:8f:d0:8d:3c:68:ba:c8:
5d:6e:0b:15:e1:9f:58:44:35:b6:32:5e:7c:05:aa:4d:a3:08:
0d:26:be:7b:70:f4:34:98:20:82:10:d8:71:42:6e:af:30:79:
64:a7:4f:0c:30:af:8e:eb:4c:6f:d1:97:91:0d:d5:98:92:34:
1f:2a:59:03:82:9b:c2:a3:59:7b:dc:77:a3:5c:1f:d0:7f:9b:
08:96:ad:ee:19:23:85:08:ad:7c:7e:4e:7c:e7:4a:34:1c:5e:
11:67:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:55:27 2026 by rpki-client