
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5BEF6A4A245B11ED90A2B55DC4F9AE02.roa
File: 5BEF6A4A245B11ED90A2B55DC4F9AE02.roa (raw, json)
Hash identifier: f7Err/9XdtqbSbqYDK/SI3vRPUiihYIZ5dO3be1EgNI=
Subject key identifier: 6F:03:97:9C:95:55:FC:9E:F6:FB:D0:05:2E:15:8F:7C:2A:15:27:5A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BE0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5BEF6A4A245B11ED90A2B55DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:31:14 +0000
ROA not before: Mon 15 Sep 2025 02:45:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 149117
IP address blocks: 103.82.28.0/22 maxlen: 22
103.190.202.0/23 maxlen: 23
103.227.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27616 (0x6be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 15 02:45:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61dc2-8390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fd:fb:78:8f:13:a2:8b:56:de:40:cc:46:96:
6c:b0:12:68:87:d1:7d:8a:9e:32:45:43:60:6e:fc:
4a:b7:4d:3b:90:f3:d7:ec:8f:86:1c:6a:52:ba:ff:
88:e5:96:51:68:62:37:d4:6a:b4:c4:37:3a:c1:65:
27:54:57:66:d6:41:39:e2:16:f5:72:69:34:89:34:
d1:c3:9e:9e:13:85:ee:0b:88:98:74:6e:ef:86:a4:
03:70:b9:cc:e3:ec:b5:c2:03:80:7e:0a:b6:bc:2e:
e5:04:9d:51:9b:e4:33:fc:d4:02:ac:a8:7a:73:09:
c2:b5:90:63:67:b9:92:3f:73:a4:c9:44:d8:c8:17:
fd:b0:62:d3:b4:37:37:b3:f7:94:61:83:7b:55:e4:
c9:2f:59:52:4a:4c:a8:e9:fe:e5:d1:35:c7:87:a2:
36:8b:20:e4:9d:e2:1b:c8:5d:80:93:68:fd:ad:a9:
f0:17:2a:a0:91:87:96:fb:09:b9:3c:f8:80:71:d7:
b3:f1:be:3d:6c:21:43:0d:87:a5:b2:08:b8:68:ca:
7e:9a:1a:2d:32:92:e4:fc:54:52:f6:7b:20:46:4c:
a7:8a:1a:c1:56:77:dd:8a:5b:53:16:a6:78:8c:45:
da:f2:7f:e2:83:cf:07:7b:22:69:f0:1a:d1:d5:27:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:97:9C:95:55:FC:9E:F6:FB:D0:05:2E:15:8F:7C:2A:15:27:5A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5BEF6A4A245B11ED90A2B55DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.82.28.0/22
103.190.202.0/23
103.227.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:c6:12:c1:ca:fe:49:c5:03:54:4c:62:6f:a8:d6:2e:f6:7e:
a1:09:30:4d:44:13:a5:d1:93:12:e9:32:85:a3:98:19:ce:f7:
63:36:54:99:19:12:a1:35:31:e5:4f:f9:24:92:3e:32:c5:ef:
90:5b:7f:8c:39:53:c5:21:9c:12:8d:91:35:f0:35:23:b4:1f:
4e:21:d6:eb:c6:cb:d4:ce:ae:ae:55:5e:62:87:d8:0b:80:cf:
7e:81:27:14:35:a1:73:e5:e7:3c:41:f1:1f:25:66:d2:79:09:
a3:ab:7b:89:c3:af:f8:57:40:2e:2d:ac:29:1a:08:58:89:b9:
7d:46:8b:f5:c7:05:98:85:92:7b:ec:6b:bf:52:d6:48:d5:3d:
4b:1b:5b:45:83:a8:89:08:e1:a2:bf:da:76:2b:33:a5:bb:46:
52:d2:1b:f0:23:83:30:4e:e1:de:35:e6:30:51:72:60:6a:6a:
c4:e5:05:99:be:ee:97:60:c3:71:f1:23:f4:76:ec:dd:0e:29:
ba:0f:72:c1:4d:72:d4:02:93:83:f3:79:9c:07:3f:4f:5c:00:
8c:9f:20:cf:11:80:7d:40:24:52:31:ac:2a:c7:43:c4:73:96:
eb:51:b5:a2:c5:1d:aa:73:83:92:79:18:d2:5c:01:d6:b9:36:
06:ce:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:45:24 2026 by rpki-client