
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa
File: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (raw, json)
Hash identifier: BSkw2Ad0VbHRCKrmofWBzYDdrZyzRIF8n2conu8IolM=
Subject key identifier: 6A:8E:32:13:88:89:2C:21:24:AB:AB:A7:09:31:5C:FB:14:E3:A8:F3
Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
Certificate serial: 0B72
Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa
Signing time: Mon 18 May 2026 19:23:56 +0000
ROA not before: Mon 18 May 2026 19:23:56 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136267
IP address blocks: 103.85.196.0/22 maxlen: 24
2400:afc0::/32 maxlen: 32
2400:afc0:196::/48 maxlen: 48
2400:afc0:197::/48 maxlen: 48
2400:afc0:198::/48 maxlen: 48
2400:afc0:199::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl
rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
Validity
Not Before: May 18 19:23:56 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a0b674c-e01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:42:7b:ec:07:fe:ad:a7:3d:48:94:7b:17:
04:20:c5:54:01:4a:22:22:41:ad:3d:18:e0:e0:d1:
40:e5:47:ce:e7:1b:57:e3:f9:b9:0b:9c:e3:ae:5c:
25:0c:54:e1:06:db:93:8e:b9:36:62:2a:57:c7:04:
31:1d:20:5f:32:bd:b2:50:9e:0a:47:5a:b9:f2:fb:
2a:0f:44:f6:fc:f6:92:9b:6d:70:19:43:08:6b:db:
9d:8b:49:e9:ed:78:76:3b:7c:d1:cb:e3:bb:bc:bc:
9a:1f:d1:b7:0b:f9:ba:90:db:52:2d:4d:65:dd:af:
47:87:74:fa:19:28:6e:a8:a4:5b:23:d2:cd:45:35:
84:a0:9e:d8:31:04:56:ef:57:3a:2b:6e:7b:fe:54:
ed:3b:6e:f2:bb:06:5c:f7:27:17:82:04:d8:18:25:
f8:55:6e:f8:a5:61:01:14:e5:69:48:a4:62:e9:85:
d0:30:ba:4e:9d:89:6c:37:17:35:b2:d2:bb:60:66:
2d:5f:47:99:9e:31:6a:fe:7a:2e:99:5d:cb:ad:f0:
8b:36:ad:22:25:58:fe:0a:1c:95:87:09:f7:50:26:
78:c4:1c:c9:20:c3:99:28:60:7c:f3:d8:d8:96:d8:
99:84:e6:97:65:32:16:02:66:20:90:5a:8a:91:b8:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:32:13:88:89:2C:21:24:AB:AB:A7:09:31:5C:FB:14:E3:A8:F3
X509v3 Authority Key Identifier:
keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.196.0/22
IPv6:
2400:afc0::/32
Signature Algorithm: sha256WithRSAEncryption
12:96:47:24:e7:b7:e1:68:43:c3:8a:15:23:d0:89:74:5c:93:
19:6f:be:f0:81:7b:71:f8:0c:eb:43:e8:b2:91:ea:16:ee:b5:
fa:62:3a:82:3d:71:3a:19:18:8e:07:6b:53:29:98:f0:c0:fc:
44:87:1e:01:b5:0d:a0:c7:c0:8a:6a:0e:fa:16:ce:03:5d:43:
d8:07:cc:5c:8d:b9:8c:30:10:2b:24:a2:d4:cc:2e:b1:c3:eb:
4f:25:00:1c:4c:73:5e:01:17:43:eb:aa:15:fb:8b:58:ff:32:
9c:5b:34:ad:0d:c8:0d:2b:44:44:66:46:33:03:98:44:3f:6a:
3d:00:fb:5d:6b:1b:58:9c:04:0c:1c:4d:68:8c:11:c2:fe:58:
27:a8:2c:66:6e:ec:73:a7:98:2f:2c:c7:b9:7a:ab:90:63:c5:
00:af:c3:19:0f:fc:a1:41:7f:7b:5e:05:a2:29:b5:b3:3e:1e:
9c:d2:53:c9:e1:a9:8c:9b:12:cf:9a:11:04:c8:70:34:0a:12:
d9:c6:8f:ca:43:39:34:7d:c4:30:de:3d:41:89:54:5b:9b:cb:
23:cb:74:3c:d1:88:82:63:af:50:b2:5f:19:f7:95:7a:7e:42:
e4:8b:84:d4:85:94:0e:3b:8a:3e:9e:05:67:51:03:ac:eb:fe:
a8:a4:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:14:54 2026 by rpki-client