
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/5295B96E705F11F1BD79389570A30FBC.roa
File: 5295B96E705F11F1BD79389570A30FBC.roa (raw, json)
Hash identifier: n1nOWdau1wyLHktQpIFU/BOos2aKf6aKxaZ+x98puqQ=
Subject key identifier: 80:0D:D8:F2:DF:BB:F7:A9:A3:FB:E5:45:97:30:4D:A4:F7:0B:22:C4
Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial: 058C
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/5295B96E705F11F1BD79389570A30FBC.roa
Signing time: Thu 25 Jun 2026 06:30:14 +0000
ROA not before: Thu 25 Jun 2026 06:30:14 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 963
IP address blocks: 103.147.224.0/23 maxlen: 24
103.231.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Validity
Not Before: Jun 25 06:30:14 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a3ccaf5-e8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:27:f0:c5:67:fb:42:ee:2f:b4:ef:bf:96:
70:2a:1b:7d:0f:ee:44:81:7a:4a:e9:6e:4b:52:ca:
93:fa:f9:55:4e:4b:f8:20:7f:11:dd:bb:15:1b:99:
ab:a3:38:8e:18:5f:3d:da:47:b6:63:2b:3b:48:b9:
ae:34:04:9f:a5:18:8e:73:cb:53:f5:a6:cf:bd:6d:
25:c4:dd:34:14:84:18:b0:ea:34:45:fa:8c:c4:57:
9c:3e:55:6c:0a:9d:ae:ad:6e:9a:9f:6e:e2:b1:a4:
c3:81:ab:1f:b6:7b:58:4e:54:b0:f1:09:ec:ed:2f:
87:54:f7:b4:32:51:d2:72:4b:d3:66:a6:45:83:1f:
c1:cc:39:cb:7e:e7:78:53:ea:c2:25:e3:eb:06:f3:
c5:b5:87:4c:fb:3b:e0:7e:0d:c8:a6:c3:fd:88:d7:
a2:e7:8d:aa:39:91:7e:b6:d6:c2:ed:d2:81:77:21:
0a:ce:25:72:27:a6:c8:ca:36:86:de:c0:d7:50:a0:
f7:e1:61:51:b9:81:c5:03:7b:a1:fe:f6:bb:be:df:
b9:17:72:8d:bc:01:b6:ea:aa:aa:82:96:97:d2:5a:
40:90:e5:b8:1d:d0:b9:01:fd:d1:54:a5:0e:50:4a:
ef:f6:3b:5b:10:f9:7d:e1:42:f0:84:b4:64:2d:48:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:D8:F2:DF:BB:F7:A9:A3:FB:E5:45:97:30:4D:A4:F7:0B:22:C4
X509v3 Authority Key Identifier:
keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/5295B96E705F11F1BD79389570A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.224.0/23
103.231.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:26:94:cc:75:4c:b5:e1:ec:b6:a9:59:b2:63:17:27:e6:f2:
b3:02:9e:69:32:23:61:fe:62:90:69:97:11:1a:01:0a:a0:db:
dd:30:6f:c1:5d:c4:39:d1:17:19:10:24:82:81:c8:38:c8:dc:
fe:af:fd:3a:67:64:12:38:6b:0c:ac:15:cf:9c:01:07:d4:a9:
5d:83:21:10:d4:93:bf:69:5e:97:67:56:b0:56:4e:76:ea:a6:
8f:09:ba:23:cc:50:6b:49:32:7f:db:d5:42:b2:76:0e:83:25:
d2:f8:17:f3:29:ea:b5:33:12:c7:a1:91:91:6b:52:1a:76:91:
9e:6c:bc:8d:01:20:64:65:90:b3:27:3f:26:ba:53:0b:88:48:
18:fc:af:cc:4e:95:b5:0c:29:97:50:53:36:71:14:94:8f:ec:
a1:b0:35:14:58:f7:7e:12:54:4f:ea:e4:3c:65:f5:1c:bd:99:
9a:f6:7b:ce:0e:47:a6:5b:e3:97:54:73:dd:a1:71:56:b2:93:
03:9b:ba:6a:d0:e9:f7:c7:ab:63:95:92:11:20:b1:5e:40:a2:
f5:e4:da:86:53:c9:8f:12:dc:12:04:b2:2c:14:41:4a:0d:e1:
50:06:c7:25:61:35:b1:28:1d:cb:2f:99:72:07:c5:88:cf:49:
fc:57:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:37 2026 by rpki-client