
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa
File: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (raw, json)
Hash identifier: +8k4rfDonzqcIXzrPnc9G+NWKEIwjetXPPpI12xDWO0=
Subject key identifier: C6:14:49:2C:B7:A0:E6:85:4A:DA:5D:F6:BA:AA:A7:6B:A4:DA:5E:71
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 05DE
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:58:58 +0000
ROA not before: Sat 19 Jul 2025 00:05:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140732
IP address blocks: 103.167.162.0/24 maxlen: 24
2001:df6:b980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Jul 19 00:05:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45432-69df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:a7:89:d2:de:d8:17:b0:0d:e5:11:b1:93:
5b:c5:33:37:42:f0:be:f1:18:9a:f3:4f:e7:8a:42:
11:a1:7d:37:f4:8e:58:c5:d2:b3:da:af:c5:92:8c:
24:b1:40:d6:f3:a6:db:46:77:3b:2a:37:26:e6:4a:
83:0d:47:1b:6d:de:97:87:8f:c9:4f:15:ef:b5:6e:
b3:91:36:1c:69:c6:79:19:11:d4:0e:73:c1:05:48:
08:3f:d0:e5:02:ed:9c:30:2d:22:17:6a:65:fa:56:
9c:de:bc:e2:c6:cf:05:05:16:67:70:75:b0:52:ad:
9f:f2:40:53:e6:96:cb:42:2e:4f:e2:60:04:22:c4:
2f:df:de:45:99:81:5f:2d:74:73:b0:83:d5:40:10:
e2:8e:19:8a:02:f5:41:7a:4b:3d:45:bc:39:6d:0c:
35:64:94:d6:18:6c:ff:42:2e:52:53:0a:56:20:c8:
4d:a6:1f:d3:ad:fd:74:8d:e4:ac:04:24:d8:3f:db:
23:3a:7f:8f:73:4f:81:f1:20:a7:69:47:84:84:f7:
2f:8d:dd:24:86:16:0d:45:c6:23:7c:0f:1a:1e:fa:
18:b5:8f:d8:49:30:41:4d:09:c2:7b:84:c3:00:17:
a5:be:88:49:29:d5:21:9f:b4:f6:47:f0:03:8c:38:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:14:49:2C:B7:A0:E6:85:4A:DA:5D:F6:BA:AA:A7:6B:A4:DA:5E:71
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.162.0/24
IPv6:
2001:df6:b980::/48
Signature Algorithm: sha256WithRSAEncryption
15:41:6c:e5:ef:d5:ba:12:48:88:8f:db:18:b9:f3:2d:3e:11:
ed:48:cb:39:60:89:04:df:2a:9a:f1:a2:1a:45:9e:04:b9:67:
8d:fb:00:44:9c:18:6a:ad:14:d2:f8:dd:9d:d0:55:f6:38:57:
d1:96:34:a7:82:3c:05:bb:39:38:c9:c1:d7:9b:92:a1:9f:da:
2e:1f:9d:26:f1:db:df:d9:70:34:cc:6a:a8:fa:b0:2a:ab:fe:
06:4e:17:dc:99:6a:f9:59:e6:9e:57:44:be:fc:f9:7e:99:b6:
cd:7d:4c:af:cf:02:1a:6c:4c:01:38:4f:7f:f5:79:14:fe:e2:
99:f3:b9:f2:19:7d:46:c2:1d:cd:b9:20:a4:e0:cf:12:08:65:
1b:c3:6d:2a:45:59:5f:fb:d4:4c:23:66:eb:4a:cd:a7:91:f0:
22:98:93:5e:34:49:36:83:75:c8:66:8a:cd:c4:d9:1c:ce:55:
6a:01:98:fd:23:53:55:85:93:34:a7:35:05:61:92:80:f8:6b:
4b:94:28:8f:ba:6a:55:91:94:99:bf:96:40:d5:ae:8c:26:57:
55:04:10:3c:43:07:bb:8f:ae:e9:ec:cd:9b:b0:55:b4:fe:e6:
e2:50:c2:6c:91:f3:c1:29:64:d4:66:cf:fa:6d:11:1a:e5:c8:
35:03:f2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:02:31 2026 by rpki-client