
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/5122B56A51F311E9AB54691EC4F9AE02.roa
File: 5122B56A51F311E9AB54691EC4F9AE02.roa (raw, json)
Hash identifier: pA/9FBNMln0DoNLtOKkiTbgr8bTJzminkkAizik/o0Y=
Subject key identifier: FE:F4:DA:3D:61:7B:96:E4:FB:83:A3:F3:0A:A6:2A:59:17:99:94:AE
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 1322
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/5122B56A51F311E9AB54691EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:48:54 +0000
ROA not before: Wed 14 May 2025 17:38:54 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 133219
IP address blocks: 103.14.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4898 (0x1322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Validity
Not Before: May 14 17:38:54 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59546-283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:3b:5f:72:0b:b1:05:79:df:9f:e1:87:5d:
8b:ef:fb:13:2d:6b:96:25:4b:af:ed:33:fb:4a:ea:
79:0b:c2:01:fb:ac:63:d7:32:f3:4a:25:a4:10:08:
1a:9b:47:5b:2a:f0:87:0b:e1:13:25:a3:2c:31:1b:
34:0c:05:cb:03:61:dc:9e:db:04:c9:83:0e:df:53:
bf:30:b6:57:ee:a6:e9:d7:33:61:67:c5:2e:1b:eb:
5a:ba:19:41:c0:28:49:35:1d:a1:2f:a2:0a:06:11:
d7:34:14:56:37:93:3b:69:1e:82:76:85:05:77:9c:
8f:0e:3b:00:b7:48:bc:8c:64:93:bc:b6:4f:c6:05:
2d:69:3e:b7:f1:57:8b:78:75:97:dc:27:05:34:6f:
8d:1f:19:3c:5b:5c:c1:4e:87:3d:bc:96:bf:06:68:
fa:41:9a:38:63:89:07:26:6a:d4:83:84:15:fa:f1:
ce:b0:2f:30:d9:99:44:21:73:85:50:f8:df:13:13:
2c:8c:0d:1a:d5:6a:3f:5a:72:1f:eb:6b:11:28:69:
ac:32:21:c8:44:38:9d:7b:99:9c:b3:2c:f3:83:e1:
e6:6b:72:66:9d:4d:d0:ee:89:9b:17:5e:d8:de:b5:
51:7d:6a:db:33:e6:8e:6a:4e:23:4d:35:38:c7:ea:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F4:DA:3D:61:7B:96:E4:FB:83:A3:F3:0A:A6:2A:59:17:99:94:AE
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/5122B56A51F311E9AB54691EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.78.0/24
Signature Algorithm: sha256WithRSAEncryption
40:37:02:65:51:7a:d0:6e:f5:37:25:ae:bd:5f:f4:93:d2:39:
72:5a:80:92:1d:d6:d9:9f:94:a4:b9:74:69:af:f9:68:c3:9f:
71:f5:3e:c4:b4:f0:41:88:a6:9b:38:55:52:db:dc:dc:cd:9c:
9d:f3:f1:0d:da:19:29:84:ab:c7:56:ab:d8:10:02:e4:a6:30:
69:eb:9d:84:9b:2c:d8:90:fd:08:a9:bc:0e:b1:f1:5b:4f:88:
a7:58:bf:d7:e9:cb:0d:84:2c:68:cd:f9:1d:7e:e0:91:0c:7b:
2f:2d:e7:eb:df:05:d0:ad:da:46:85:dd:e5:29:99:94:51:28:
4d:a7:4c:c1:91:cf:81:61:a5:d9:be:20:33:da:59:a4:b1:a3:
26:62:2b:50:42:36:38:a6:73:d1:af:90:61:0b:08:de:16:16:
f0:5d:66:ae:3f:09:12:1c:fb:56:f1:2b:da:e3:0b:9b:bc:40:
77:89:3b:aa:ef:74:7f:b2:2b:ed:0b:79:4d:cc:d6:13:20:6c:
6a:ec:d0:fc:33:13:0f:df:1d:76:69:93:ca:80:06:07:cf:db:
ee:ff:53:30:9f:28:1a:ce:5f:51:80:b8:a4:fe:59:1c:36:29:
3f:d2:2f:61:6e:8d:76:e4:98:92:65:81:bf:bf:f1:63:4b:6e:
fe:77:57:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB
RkNDNTI4NTkwHhcNMjUwNTE0MTczODU0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTU0Ni0yODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/U7X3ILsQV535/hh12L7/sTLWuWJUuv7TP7Sup5C8IB+6xj1zLzSiWkEAga
m0dbKvCHC+ETJaMsMRs0DAXLA2HcntsEyYMO31O/MLZX7qbp1zNhZ8UuG+tauhlB
wChJNR2hL6IKBhHXNBRWN5M7aR6CdoUFd5yPDjsAt0i8jGSTvLZPxgUtaT638VeL
eHWX3CcFNG+NHxk8W1zBToc9vJa/Bmj6QZo4Y4kHJmrUg4QV+vHOsC8w2ZlEIXOF
UPjfExMsjA0a1Wo/WnIf62sRKGmsMiHIRDide5mcsyzzg+Hma3JmnU3Q7ombF17Y
3rVRfWrbM+aOak4jTTU4x+rAvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP702j1h
e5bk+4Oj8wqmKlkXmZSuMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz
ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkZFNkEvMUQ2NDMyOEVEMzg3MTFFOEJENzA3NTVDQzRGOUFFMDIvNTEyMkI1NkE1
MUYzMTFFOUFCNTQ2OTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZw5OMA0GCSqGSIb3DQEBCwUAA4IBAQBANwJlUXrQbvU3Ja69X/ST
0jlyWoCSHdbZn5SkuXRpr/low59x9T7EtPBBiKabOFVS29zczZyd8/EN2hkphKvH
VqvYEALkpjBp652EmyzYkP0IqbwOsfFbT4inWL/X6csNhCxozfkdfuCRDHsvLefr
3wXQrdpGhd3lKZmUUShNp0zBkc+BYaXZviAz2lmksaMmYitQQjY4pnPRr5BhCwje
FhbwXWauPwkSHPtW8Sva4wubvEB3iTuq73R/sivtC3lNzNYTIGxq7ND8MxMP3x12
aZPKgAYHz9vu/1Mwnygazl9RgLik/lkcNik/0i9hbo125JiSZYG/v/FjS27+d1fs
-----END CERTIFICATE-----
Generated at Sun Mar 22 07:23:05 2026 by rpki-client