
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5B04EBF23BE611EE86CE677AC4F9AE02.roa
File: 5B04EBF23BE611EE86CE677AC4F9AE02.roa (raw, json)
Hash identifier: EVWM9699GXxNQUuJzLDzn9dMzOD6GK0MQ9LNhJYYG2Q=
Subject key identifier: D2:4F:6B:8E:84:15:26:35:1E:C0:7C:6D:64:69:4E:EB:D3:C8:F4:32
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E6E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5B04EBF23BE611EE86CE677AC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:30:05 +0000
ROA not before: Fri 02 Oct 2026 15:30:05 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150873
IP address blocks: 103.249.200.0/23 maxlen: 23
2401:22a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28270 (0x6e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:30:05 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcdfd-5f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:ee:a3:2a:52:13:00:10:e2:83:55:d9:0d:
e1:96:8f:c7:47:2f:fc:b7:99:91:c5:6f:74:11:86:
68:d0:24:00:96:34:df:42:07:9a:79:5e:c3:d7:29:
b3:47:2e:f8:89:9a:1f:30:8b:a1:d9:b0:5a:51:e1:
08:99:38:88:05:fd:ea:d2:67:2e:28:a0:77:58:d9:
a7:33:09:22:7e:48:bc:78:fc:50:69:29:e4:55:6f:
79:15:b3:21:05:27:19:a1:63:52:de:e7:b9:1e:2f:
39:1d:0e:7d:92:c3:76:f5:60:d6:b8:04:89:3b:8a:
6f:40:85:39:16:5d:c0:dc:e1:cf:fc:78:07:a5:28:
7a:23:d0:c0:af:a5:84:b7:b3:c0:01:d2:47:25:10:
ba:83:2c:dc:5d:0f:51:b4:7a:05:b2:3e:2f:d1:36:
ac:b6:53:df:eb:85:6b:36:c4:1e:79:61:51:4f:9b:
7d:bf:0c:d7:45:1a:2e:bb:2d:0f:34:ac:01:86:2b:
14:5c:6a:25:ea:50:41:93:4f:04:11:b1:32:ad:ce:
4d:87:e0:14:c4:23:22:9a:81:1e:e8:6a:4c:88:57:
4c:f2:e7:cd:7c:ea:0c:52:83:48:b4:90:80:fc:93:
35:6a:9b:0d:be:8f:b1:9d:c7:54:fd:cf:8c:f2:03:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:6B:8E:84:15:26:35:1E:C0:7C:6D:64:69:4E:EB:D3:C8:F4:32
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5B04EBF23BE611EE86CE677AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.249.200.0/23
IPv6:
2401:22a0::/48
Signature Algorithm: sha256WithRSAEncryption
06:37:01:ca:0e:08:88:ae:32:1b:df:11:45:84:79:af:1f:c0:
fb:6c:38:cb:9e:f3:e1:a8:c9:17:3e:4a:bb:85:9b:16:fe:ac:
10:23:10:0a:5b:0c:dc:01:12:fe:3e:bf:cf:e0:16:1f:c1:6f:
44:5f:b8:59:f3:95:8c:93:1d:b8:ff:14:59:da:4c:fe:9a:37:
f8:44:6b:47:ed:a2:78:60:88:83:f0:68:76:af:24:49:3a:c7:
e7:a6:99:ae:0a:c4:39:71:b6:f5:83:15:f1:33:aa:a5:bd:de:
7c:14:87:de:bb:d6:21:59:6c:22:a7:58:00:19:e5:01:e8:92:
8c:1b:c1:33:7b:ff:be:51:19:77:58:d3:7d:50:0d:16:68:7f:
c3:6e:35:8c:8d:22:c5:e1:0c:b3:df:3f:da:db:ef:8d:b8:c2:
4b:36:2f:fe:b0:b4:a3:42:da:0b:27:c4:7d:fb:b7:63:aa:89:
a8:c9:62:a9:b7:dd:96:3b:7e:53:6d:52:5a:c3:f0:0f:75:53:
6b:da:d7:49:31:a0:72:80:6a:78:da:6e:17:65:5e:cb:0c:70:
0a:d1:0b:28:d0:89:90:2b:93:62:86:f0:a1:8c:53:90:9d:56:
9a:ff:4f:0a:1d:0f:2c:79:4b:36:ce:17:13:55:7a:43:fe:28:
e3:4a:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:04:47 2026 by rpki-client