
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/3520A4C0DDA711EBA436967CC4F9AE02.roa
File: 3520A4C0DDA711EBA436967CC4F9AE02.roa (raw, json)
Hash identifier: ZTo5SEv/ESfrPoVSh5u2zaa5o6F1qItIFD1q81cLNus=
Subject key identifier: F7:8E:4C:35:78:74:51:BD:B9:91:B1:51:36:C9:79:30:46:24:94:E8
Certificate issuer: /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial: 06F5
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/3520A4C0DDA711EBA436967CC4F9AE02.roa
Signing time: Wed 22 Apr 2026 22:28:05 +0000
ROA not before: Wed 22 Apr 2026 22:28:05 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141731
IP address blocks: 103.162.228.0/23 maxlen: 24
2001:df6:180::/48 maxlen: 56
2001:df6:180:fffe::/64 maxlen: 64
2001:df6:180:ffff::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Validity
Not Before: Apr 22 22:28:05 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e94b75-7f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:9a:8d:b7:0f:b0:02:bf:64:13:d9:f1:06:
19:f6:78:70:1f:25:93:5d:82:48:dc:e7:a0:ca:69:
69:b3:00:94:7c:0c:84:4c:63:a6:fb:de:f6:af:7a:
b4:13:de:f1:79:39:24:b1:49:13:f1:85:59:0a:25:
9e:25:9d:4c:a7:27:7a:d3:d4:a4:3f:ab:b9:40:4d:
fd:26:4f:2a:02:01:97:3b:f1:26:22:4f:29:55:a4:
da:83:b1:3b:ca:19:cc:e8:a8:9e:af:50:07:5e:3f:
f4:a1:2d:bf:a2:40:2a:ee:22:54:64:f7:d6:80:6a:
77:93:ec:fd:e7:46:1d:db:0d:93:b3:16:0f:eb:a2:
1b:72:be:89:d8:91:2e:71:36:18:c9:05:bd:42:f9:
f4:01:4f:bd:89:c3:0c:b6:e3:72:16:85:5c:04:c9:
fa:2b:5e:c1:00:ad:0f:f6:8e:33:5b:dc:2c:79:49:
27:c8:eb:c9:6a:d8:53:02:d3:6b:0d:33:a6:38:03:
c2:0e:1e:53:74:b7:5d:f8:8b:d6:30:73:c1:81:80:
61:4e:5a:18:77:46:0f:16:5a:d3:2f:26:4e:cd:ba:
45:79:98:40:b4:6d:70:e5:88:ec:15:f4:08:73:e2:
43:eb:c3:df:09:de:b4:de:7d:55:12:81:88:77:a4:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:4C:35:78:74:51:BD:B9:91:B1:51:36:C9:79:30:46:24:94:E8
X509v3 Authority Key Identifier:
keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/3520A4C0DDA711EBA436967CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.228.0/23
IPv6:
2001:df6:180::/48
Signature Algorithm: sha256WithRSAEncryption
10:03:f6:c6:97:a6:1f:07:44:37:b3:2e:a3:98:eb:f5:4c:ed:
c7:49:39:dc:47:85:55:0b:33:1d:d7:1e:86:6d:12:53:45:37:
91:c3:f6:3b:ea:79:c1:e8:77:96:8f:9b:1e:f5:1d:a8:92:9c:
96:6d:97:92:d0:8f:41:ed:01:88:8b:26:bb:d4:a3:14:83:77:
06:c4:8a:f8:52:dd:5c:88:20:d8:53:3b:0e:93:30:6f:18:e0:
75:f8:b2:12:87:e4:47:5e:4f:d9:5b:3b:c7:b4:f6:3f:a8:22:
1b:5c:15:42:58:e3:72:47:d8:fa:c6:61:6f:2b:08:92:9d:8c:
ae:f5:2e:89:b5:d4:0d:4f:16:d6:63:f0:dd:71:34:61:27:26:
01:2c:17:88:54:19:f4:26:39:56:1f:89:a7:6a:1b:63:40:f6:
59:11:98:3d:75:1c:a6:51:fb:cb:2f:9e:03:2a:23:74:d5:52:
1d:be:47:f4:b9:22:a3:4e:5e:71:b9:17:59:89:37:75:bd:46:
f0:2b:ba:cd:63:b7:fb:a5:5d:aa:77:80:ff:66:25:dd:af:ac:
cb:bd:1e:3b:5e:d5:90:a7:0c:cc:77:d9:68:12:c6:91:98:b9:
ae:e0:03:67:24:40:26:9d:a9:b1:58:bf:6d:6b:18:d6:36:bc:
36:3c:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:38:07 2026 by rpki-client