
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/5A51D464F5FA11EC9B35372AC4F9AE02.roa
File: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (raw, json)
Hash identifier: wu4B3+COj6mwPOma5aipHU++amHET1ZTyASPgZVelnU=
Subject key identifier: C1:9B:74:0B:21:28:8E:E6:F7:4B:E3:11:FF:E8:B1:AF:C2:DB:50:84
Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial: 0896
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/5A51D464F5FA11EC9B35372AC4F9AE02.roa
Signing time: Wed 30 Sep 2026 21:41:22 +0000
ROA not before: Wed 30 Sep 2026 21:41:22 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 142300
IP address blocks: 103.150.208.0/24 maxlen: 24
103.150.209.0/24 maxlen: 24
2406:f480:0:80::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 21:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198 (0x896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Validity
Not Before: Sep 30 21:41:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abd8202-fe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:23:6d:6b:3d:54:21:34:8f:e6:6b:1c:a9:
28:66:4d:07:97:83:23:6a:3c:13:48:1f:6d:83:d5:
97:0b:61:01:df:2a:78:1a:1e:72:4e:c0:78:f3:f8:
9a:8d:6d:7d:45:2c:fb:2c:78:bb:49:90:d7:3f:b9:
aa:e8:77:36:a5:55:a6:11:aa:1a:fd:02:d5:16:b3:
3b:7f:d9:7f:b4:e0:37:17:75:43:0c:9f:c4:27:df:
7e:c5:55:8c:9e:fc:be:b0:18:1e:c1:d8:50:d3:6d:
38:2e:09:f6:dc:72:5f:65:e0:5e:7d:af:7d:38:f0:
0d:2e:b1:da:83:ca:12:55:05:b9:b5:2f:7f:11:12:
0e:a7:f2:2d:f0:a2:34:f6:1b:70:e4:0d:64:75:82:
69:9b:d8:36:73:19:90:c8:33:f8:3a:cc:9a:a5:4e:
58:4a:21:cb:c8:5c:57:ca:30:40:8e:9f:3b:14:e6:
c4:48:50:fc:a2:8a:ca:c1:f7:e7:bc:01:dd:20:4a:
0a:97:8c:d9:85:65:1c:bf:b1:fb:4b:63:23:58:17:
fe:32:45:ba:71:35:95:13:7b:a7:38:b1:5b:93:a5:
85:27:a1:03:67:bb:d9:94:6e:be:7d:64:18:a5:5e:
08:8d:5d:89:84:82:1c:1f:db:99:6d:90:1f:34:8c:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9B:74:0B:21:28:8E:E6:F7:4B:E3:11:FF:E8:B1:AF:C2:DB:50:84
X509v3 Authority Key Identifier:
keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/5A51D464F5FA11EC9B35372AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.208.0/23
IPv6:
2406:f480:0:80::/64
Signature Algorithm: sha256WithRSAEncryption
25:44:f2:fe:80:ae:7c:c4:1d:49:37:dd:62:00:af:e4:aa:3b:
05:2e:f9:d9:8c:67:3c:88:7a:9e:2a:82:2d:44:a2:72:92:a1:
1b:18:6c:8c:ea:65:61:14:0e:a0:5a:a8:7b:e1:d8:47:04:9b:
00:79:b4:02:aa:5a:c2:b3:7d:f8:a3:9a:90:38:93:04:31:49:
86:ec:aa:5b:e8:41:08:60:7e:53:77:2f:ba:d4:61:a0:2a:6c:
d0:67:ce:09:ae:d0:1f:6c:77:3e:a4:25:38:e8:53:27:64:d8:
8a:51:9a:b0:f8:ad:c7:17:b4:4d:d1:35:7e:3f:2e:9b:49:50:
71:6e:2c:87:64:25:a0:71:0f:38:75:5f:18:67:74:7f:8e:67:
33:67:b3:b5:f5:cc:0b:39:8f:fa:81:18:e2:20:95:c9:a0:3e:
37:3a:94:46:c3:4d:3c:f2:a1:4c:ae:a8:64:f4:a1:ea:82:5b:
e8:b6:9e:b9:89:57:d5:60:ac:e2:da:5a:f0:40:7c:f1:27:c2:
7f:b1:80:5a:58:b6:07:03:20:4b:1c:f7:88:5e:2b:37:ed:67:
31:cc:ef:5c:27:0f:2b:78:38:38:ec:50:ea:43:8d:bf:6e:bf:
ab:57:16:01:26:79:97:32:52:52:26:27:a8:60:96:49:cd:7f:
fd:26:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:01:05 2026 by rpki-client