
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
File: 5A5F40627F5911ECA27EA93CC4F9AE02.roa (raw, json)
Hash identifier: mPhcIZa2lEICyW/t4HwYMSZVAAggvod51Fn73MTa7zo=
Subject key identifier: C2:BA:97:8E:B2:64:C5:9B:10:6D:7F:E0:30:66:67:E2:84:4D:1B:B6
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DA8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:23:41 +0000
ROA not before: Fri 02 Oct 2026 15:23:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131440
IP address blocks: 103.245.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28072 (0x6da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:23:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc7d-7de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:8b:cd:d6:f4:b8:8a:d8:0d:2c:f8:d9:39:
bf:51:df:72:d8:4d:fd:76:2d:a3:c2:5c:ef:ff:b1:
18:ba:88:96:68:10:90:c3:a8:9d:58:5a:d5:71:56:
4c:8f:c9:7e:74:06:0b:88:8b:87:eb:19:ff:ee:7d:
06:c4:87:db:b9:03:e6:dc:b6:04:e3:b1:bb:53:4c:
98:83:c5:2b:fd:4a:9c:f1:71:7e:7e:d0:cb:d6:23:
33:69:ad:f8:44:be:67:35:59:ba:7b:6b:6e:b7:d6:
b7:b1:e0:21:c1:ac:29:0c:c0:4e:18:bd:15:24:38:
5a:f3:67:18:b6:8c:dd:24:27:51:42:69:c5:64:ed:
ff:94:b4:c9:f7:8b:29:3f:97:3a:0e:a3:d2:74:f4:
5c:4b:48:34:2d:b4:da:1a:1f:45:04:90:58:19:59:
d8:5e:58:bd:b1:84:ea:c0:52:60:ef:85:bd:17:b0:
bc:a8:e4:e1:cb:9a:70:ba:0e:21:20:10:8d:61:1f:
0b:73:5a:71:1a:0b:37:89:bd:70:73:1a:39:7b:26:
05:87:51:0a:27:bd:1c:23:61:74:35:62:23:2b:00:
45:77:e0:11:ae:c2:b3:09:02:55:d3:c0:ba:a9:25:
03:96:63:48:3f:b6:d1:8f:d3:1a:5a:36:ae:31:c2:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BA:97:8E:B2:64:C5:9B:10:6D:7F:E0:30:66:67:E2:84:4D:1B:B6
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.245.252.0/22
Signature Algorithm: sha256WithRSAEncryption
82:99:bc:56:c5:b4:25:1e:9d:47:d9:de:69:4f:f9:c4:a5:2b:
65:a4:52:4c:02:e6:9b:e7:a2:92:80:2b:91:1a:e5:2d:c1:27:
d1:8f:57:da:d7:5e:92:82:23:cf:76:07:96:96:b4:4f:54:59:
1a:81:8c:ae:08:93:23:66:db:e4:0e:bf:80:5b:58:a6:1e:81:
4a:2d:2f:94:cc:53:62:66:98:07:89:c9:54:c3:68:02:1c:a7:
3b:73:a0:6f:9c:84:c0:bc:f4:00:c9:e8:f1:f6:31:6c:e6:f2:
61:9c:26:06:31:89:9a:19:5e:32:9e:7d:ef:ef:f9:47:a9:1b:
0a:54:37:bf:f6:69:c9:47:66:d1:d7:cd:bb:50:31:ef:56:2a:
be:b9:da:ca:15:e1:a1:b6:a2:2a:b4:87:61:5b:97:9b:fd:c6:
f3:12:1e:7b:ca:eb:10:31:b6:af:19:4f:6a:27:ad:7e:ad:00:
07:2f:f0:5d:f5:33:c1:44:8d:5c:34:f9:90:6b:c1:1f:fe:98:
7c:43:3e:6d:4a:5b:33:3b:9b:3b:8b:e6:80:b9:30:ac:12:17:
0f:a7:e9:c6:15:4b:f8:a1:11:bc:72:96:7d:03:fb:bb:13:2e:
fc:ec:59:ab:b5:51:de:68:1b:fc:65:62:f2:cb:5e:2e:f9:77:
d2:66:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:46:27 2026 by rpki-client