
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa
File: 5D98833C77EC11EEA06F373BC4F9AE02.roa (raw, json)
Hash identifier: CsyZRvBZjt0dHAYffGH8YRNAMUomFdDHqloAHzosLdk=
Subject key identifier: 40:A9:1D:EC:FE:65:13:A9:07:D6:EF:9F:F9:20:AA:23:7E:96:95:C8
Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial: 021A
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa
Signing time: Wed 05 Aug 2026 04:52:12 +0000
ROA not before: Wed 05 Aug 2026 04:52:12 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55720
IP address blocks: 103.190.124.0/24 maxlen: 24
103.190.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 02:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Validity
Not Before: Aug 5 04:52:12 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a72c17c-7dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:05:2c:17:89:1a:fa:d4:2b:8a:d2:b9:92:
f1:27:89:32:20:97:b3:a6:37:43:bd:a6:36:34:a7:
4f:dd:b3:1e:45:68:9d:e3:d5:ca:e4:6b:b2:55:2b:
09:7c:bd:ec:a0:c4:ac:02:1f:c9:01:43:27:c8:b9:
ae:16:32:74:af:46:85:ed:2a:ed:6e:ce:36:a9:08:
dd:c5:9c:c8:1d:8b:fe:5c:5d:16:f6:2f:9e:db:84:
f3:bd:a2:f5:c8:6c:46:1c:f6:de:ad:84:58:34:2c:
77:c8:68:db:ea:08:ac:2e:5b:02:b7:cd:e4:36:29:
3e:93:ef:46:66:82:d4:77:6a:89:e2:6f:47:56:d1:
c6:6e:f4:83:9c:8a:6a:23:f0:e4:9e:17:b2:f8:be:
20:d2:65:57:b0:c3:a5:de:ca:c7:75:23:9e:73:41:
73:fb:3e:a4:b7:d0:ec:2a:2a:3b:63:ed:e5:94:6f:
99:fe:ef:27:b9:cd:88:11:bb:6e:fd:9a:9d:f7:6d:
da:e5:57:17:c1:83:c6:1b:5a:59:7d:a2:ad:c3:e9:
e3:b8:f4:8f:68:9b:2a:20:a6:c6:3d:3e:94:ae:55:
7d:b1:f8:d7:29:c7:65:cb:7b:1b:27:4f:e2:c5:10:
6e:39:fe:c9:f0:91:8c:ee:35:d8:f3:17:88:6f:c0:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:1D:EC:FE:65:13:A9:07:D6:EF:9F:F9:20:AA:23:7E:96:95:C8
X509v3 Authority Key Identifier:
keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/5D98833C77EC11EEA06F373BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.190.124.0/23
Signature Algorithm: sha256WithRSAEncryption
60:0a:5e:ea:a9:e7:00:49:61:5e:ab:1c:c0:8e:c6:0c:c0:42:
77:9c:16:d2:4b:21:30:3e:cf:fd:8b:79:89:ab:76:c9:c2:ca:
0d:e3:f1:06:0c:ea:b6:3f:70:5e:8c:93:ae:f6:27:bc:32:10:
25:18:40:ec:2d:2c:88:f4:c2:a0:77:b2:40:93:02:f9:29:07:
da:81:3e:cc:0d:b1:e9:94:5d:81:e2:ec:c2:ad:75:5d:02:92:
ef:a5:d1:08:aa:ab:5e:62:b4:6d:dd:e3:da:a4:5f:a3:8e:d1:
aa:b9:76:89:44:d4:50:02:b5:a0:99:e5:de:7a:37:d2:55:37:
e6:a4:9f:7f:77:39:17:d4:a5:8c:09:fe:ba:6d:3b:15:f4:ad:
c6:03:cb:88:2c:51:e2:5f:5f:47:2a:e3:e8:99:b5:8f:46:e1:
87:b2:28:a4:94:60:f0:86:3d:b1:4d:ac:e0:ac:66:e0:27:31:
11:72:68:59:e6:d2:96:d7:0b:cf:82:11:c4:b3:6d:13:ce:34:
e0:40:5e:54:2d:e1:a2:c9:14:7c:5a:e1:2d:96:8b:88:59:ec:
b2:86:cd:43:77:df:47:b7:b8:66:55:3e:0b:e0:f7:f2:0c:1d:
2d:84:5c:de:f6:1f:38:66:6e:80:b6:5f:94:b3:98:f8:d1:87:
6f:24:25:68
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4N0YyMUI0NkU4
NERFOUQ3MEIwHhcNMjYwODA1MDQ1MjEyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcyYzE3Yy03ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLAFLBeJGvrUK4rSuZLxJ4kyIJezpjdDvaY2NKdP3bMeRWid49XK5GuyVSsJ
fL3soMSsAh/JAUMnyLmuFjJ0r0aF7Srtbs42qQjdxZzIHYv+XF0W9i+e24TzvaL1
yGxGHPberYRYNCx3yGjb6gisLlsCt83kNik+k+9GZoLUd2qJ4m9HVtHGbvSDnIpq
I/Dknhey+L4g0mVXsMOl3srHdSOec0Fz+z6kt9DsKio7Y+3llG+Z/u8nuc2IEbtu
/Zqd923a5VcXwYPGG1pZfaKtw+njuPSPaJsqIKbGPT6UrlV9sfjXKcdly3sbJ0/i
xRBuOf7J8JGM7jXY8xeIb8DoxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFECpHez+
ZROpB9bvn/kgqiN+lpXIMB8GA1UdIwQYMBaAFG/NeBmo+T+vQNDjh/IbRuhN6dcL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDJBMi9FRkQyMTU4NDc3
RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2OUEwT09IOGh0RzZFM3Ax
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I4MTRHYWo1UDY5QTBPT0g4aHRHNkUzcDF3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjAyQTIvRUZEMjE1ODQ3N0VCMTFFRTkzQjY4QjNBQzRGOUFFMDIvNUQ5ODgzM0M3
N0VDMTFFRUEwNkYzNzNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ758MA0GCSqGSIb3DQEBCwUAA4IBAQBgCl7qqecASWFeqxzAjsYM
wEJ3nBbSSyEwPs/9i3mJq3bJwsoN4/EGDOq2P3BejJOu9ie8MhAlGEDsLSyI9MKg
d7JAkwL5KQfagT7MDbHplF2B4uzCrXVdApLvpdEIqqteYrRt3ePapF+jjtGquXaJ
RNRQArWgmeXeejfSVTfmpJ9/dzkX1KWMCf66bTsV9K3GA8uILFHiX19HKuPombWP
RuGHsiiklGDwhj2xTazgrGbgJzERcmhZ5tKW1wvPghHEs20TzjTgQF5ULeGiyRR8
WuEtlouIWeyyhs1Dd99Ht7hmVT4L4PfyDB0thFze9h84Zm6Atl+Us5j40YdvJCVo
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:40:22 2026 by rpki-client