
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C25659465C9D11EC99F7D10BC4F9AE02.roa
File: C25659465C9D11EC99F7D10BC4F9AE02.roa (raw, json)
Hash identifier: NXzX7R7NLEazsVeUoaLWbp54rjvi9QQud2skYKW4OZQ=
Subject key identifier: 43:82:20:C8:56:56:D3:3C:3F:83:BF:C3:FD:59:88:18:D4:8F:23:8D
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 05DD
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C25659465C9D11EC99F7D10BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:58:57 +0000
ROA not before: Sat 19 Jul 2025 00:05:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136969
IP address blocks: 103.167.162.0/24 maxlen: 24
103.167.163.0/24 maxlen: 24
2001:df6:b980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Jul 19 00:05:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45431-9454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:2d:61:80:9e:0c:6c:7e:3d:a7:12:6e:3f:
8c:3d:0f:c6:f7:1d:db:86:6d:92:cf:96:bf:30:cc:
cb:55:f8:f9:b8:c8:2e:74:61:d9:eb:b7:37:27:68:
1c:3c:e8:d1:ad:82:6c:08:4d:0d:ca:1b:b0:53:68:
2d:e1:88:1b:c0:63:01:55:3d:14:de:3e:39:b1:29:
6c:f7:39:c1:62:3a:13:ec:04:fd:03:cf:de:ca:4c:
b7:5c:09:f4:5e:ec:7d:6e:21:4d:b3:96:33:32:8e:
09:04:88:de:f3:b4:ee:99:95:04:86:a2:99:92:06:
9e:e0:4d:1f:a1:61:b5:32:46:0c:33:c7:66:23:69:
f4:99:58:31:5c:1f:6e:57:17:4e:ea:e5:fd:3d:64:
dd:e1:29:72:d7:0f:bb:cb:64:c9:fb:8a:4f:bc:b1:
9f:95:96:c4:77:43:1b:47:2f:43:b3:4e:4d:73:c6:
ad:25:ad:d6:67:93:2b:7a:87:b0:86:8e:c2:23:1c:
8b:85:4b:b7:7f:92:f4:98:68:59:a3:5c:51:ed:1d:
43:d2:6d:4e:cc:bd:a7:24:b5:cc:59:36:42:f8:63:
45:82:2f:9a:18:a8:66:8b:1b:8a:55:cc:28:d4:e7:
f3:6c:f9:d2:9e:a6:e0:95:a8:0c:d9:a5:f6:fe:57:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:82:20:C8:56:56:D3:3C:3F:83:BF:C3:FD:59:88:18:D4:8F:23:8D
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C25659465C9D11EC99F7D10BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.162.0/23
IPv6:
2001:df6:b980::/48
Signature Algorithm: sha256WithRSAEncryption
3b:7f:81:c0:d1:cf:71:f1:c6:f4:3c:f6:7c:97:7e:59:cb:30:
87:fd:5d:53:f2:b7:a7:ed:fd:c9:98:3d:31:63:68:31:05:6b:
c9:7f:9a:e1:45:27:60:34:20:9b:1e:fe:25:f1:de:7d:11:40:
57:0c:16:f8:16:96:d0:bd:6a:42:89:e1:20:3a:fa:14:fc:83:
83:39:25:57:c6:48:a7:a8:0d:f0:4b:c8:97:f6:91:86:24:8f:
80:f6:05:8d:dc:74:52:01:bd:0e:4b:63:23:94:ac:9b:35:c5:
13:25:3b:6f:b6:fd:1d:90:94:ad:7d:b8:27:17:e4:fe:65:5c:
46:6e:40:74:90:95:73:5a:ee:d3:2c:86:91:17:21:56:5b:80:
5a:c1:ca:38:44:31:9e:3c:18:df:6e:e7:c1:9c:9b:93:41:df:
b3:ae:cc:02:2e:9b:29:bd:73:68:26:21:3f:17:89:72:a3:3b:
46:37:e3:69:e7:18:82:74:90:2a:62:2e:89:3b:35:c2:cf:b5:
99:f2:ed:6f:2c:16:7b:e4:b0:75:a1:9a:ab:5a:3d:c5:84:94:
97:e7:2f:10:09:74:f9:54:d8:7d:52:b9:59:c8:4d:0a:b4:11:
17:db:1b:47:c4:74:57:3d:93:38:b9:a2:2d:aa:01:27:1e:84:
fa:11:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:31:15 2026 by rpki-client