
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/A213FF8E535211F184FC032898833773.roa
File: A213FF8E535211F184FC032898833773.roa (raw, json)
Hash identifier: /sb5ONI+bRGD73MyIUMkM893RApQNOS9VkRgEjeAKps=
Subject key identifier: 78:39:19:69:BC:60:73:EC:8A:4B:48:6A:47:F3:80:D9:5A:42:A4:5B
Certificate issuer: /CN=A91D1FD2/serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Certificate serial: 18
Authority key identifier: 22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/A213FF8E535211F184FC032898833773.roa
Signing time: Tue 23 Jun 2026 09:38:56 +0000
ROA not before: Tue 23 Jun 2026 09:38:56 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140725
IP address blocks: 103.152.53.0/24 maxlen: 24
2001:df3:f880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1FD2, serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Validity
Not Before: Jun 23 09:38:56 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3a5430-3ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:21:7d:67:30:f5:dc:53:7a:11:76:85:be:
ae:de:17:db:9c:62:c6:31:62:ad:5a:bd:52:df:65:
cd:67:ce:8b:ec:41:46:5a:37:00:7a:f4:7b:be:57:
e4:fc:db:be:11:66:80:d8:d1:e7:b7:ae:06:61:95:
cc:e2:86:ed:2e:b0:ad:fc:55:36:d4:52:75:8a:c9:
46:e2:cf:ab:9a:02:02:92:6b:bb:d0:21:87:63:e3:
e0:b9:27:8b:cd:b8:32:a5:12:74:03:ef:61:a0:5d:
e1:65:06:36:c8:a3:ae:99:19:6d:74:8e:86:26:0b:
c2:e6:6f:74:9f:ac:44:df:83:c8:0e:ee:d1:2e:36:
bf:da:a0:8d:fe:bc:16:a3:d0:03:87:57:7d:4e:4d:
22:01:fe:61:24:14:87:1b:b9:27:89:73:a3:26:8b:
01:31:be:91:b0:30:1c:e8:a1:0d:96:b5:f5:12:dc:
51:14:e1:2a:d2:79:6e:b0:4a:da:6a:48:88:69:8a:
87:4c:08:81:f2:1f:d8:e7:c6:45:06:8a:01:85:2b:
8d:d3:61:8c:ba:b3:72:83:26:85:02:ec:ec:1f:70:
f0:9e:bc:5d:57:7d:4c:31:c0:d4:78:f6:01:d1:6e:
16:ae:17:4a:d1:84:d5:7e:2b:b1:42:c3:f5:93:13:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:19:69:BC:60:73:EC:8A:4B:48:6A:47:F3:80:D9:5A:42:A4:5B
X509v3 Authority Key Identifier:
keyid:22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/A213FF8E535211F184FC032898833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.53.0/24
IPv6:
2001:df3:f880::/48
Signature Algorithm: sha256WithRSAEncryption
3e:01:ec:4b:46:24:4b:85:22:29:41:66:cd:7b:6e:18:b5:63:
d4:c4:f7:70:20:d7:4f:e0:fd:7c:ac:e2:02:26:0b:f5:62:0f:
ad:6b:75:36:93:66:33:70:2c:ca:4b:d9:e7:03:3b:92:6b:4b:
f2:85:51:bb:fd:f3:40:e1:55:01:4f:eb:4a:a3:bf:51:70:d2:
5c:9e:37:69:2e:32:68:36:71:d2:41:52:c5:aa:ef:ef:77:79:
37:0c:b8:d1:82:87:cc:0c:12:7c:98:59:6b:e2:7d:3e:dd:91:
10:a4:1a:bb:fc:65:73:71:41:c3:db:11:85:ea:19:db:e4:43:
df:a6:71:1f:3e:5e:28:cc:8d:4a:2f:d5:98:6e:59:dd:00:62:
f7:c8:f3:1f:2c:bb:b7:7f:a9:76:ab:19:33:45:ee:8f:90:50:
27:2f:af:a4:9d:25:95:2f:a4:9b:aa:c3:e2:be:b8:21:81:1a:
ae:9a:87:c9:91:09:37:73:78:02:1f:22:7d:b2:d6:75:3a:01:
55:4f:8c:6d:3d:d7:6f:a4:eb:b6:18:30:76:6f:f2:be:a7:46:
da:c1:9f:ef:e5:2d:72:7a:66:71:a0:9e:4d:39:45:54:c8:e6:
06:c6:e1:20:1a:09:3e:3e:b1:f0:92:49:cc:32:9b:2e:54:b5:
14:be:be:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:15:45 2026 by rpki-client