
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/E9BDEF2CABD011F0B868ED11C4F9AE02.roa
File: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (raw, json)
Hash identifier: 6qNEgwLHVAYpgshoxndpSifoEhXIYB8Fbev50w/bqoE=
Subject key identifier: 40:C0:D7:90:B6:D2:4A:6F:6C:95:32:20:03:0E:29:F8:2D:DC:A9:2A
Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial: 0130
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/E9BDEF2CABD011F0B868ED11C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:41:15 +0000
ROA not before: Thu 27 Nov 2025 03:22:05 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 26658
IP address blocks: 59.153.144.0/22 maxlen: 24
103.198.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Validity
Not Before: Nov 27 03:22:05 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5a18b-3f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:f5:4b:14:04:b3:54:83:1f:c5:29:b5:40:
23:48:6b:2b:7c:06:76:32:32:84:54:c1:6d:78:4d:
3b:77:3e:65:62:b5:9c:a8:d9:d9:70:c8:b4:f1:61:
1c:94:6a:a1:8c:a6:a8:08:23:82:d7:43:63:37:05:
0c:17:f1:cd:91:a8:6e:63:94:70:95:89:d6:a2:f7:
34:72:40:e4:45:e0:41:d0:b7:4b:d2:3e:2e:e4:04:
e1:00:a3:7d:34:31:6c:fd:d1:db:41:c2:dc:2d:f9:
cc:48:6b:83:9d:b8:93:e9:97:38:9e:7d:5a:b4:26:
03:27:d7:3b:c8:8b:f7:42:d7:ef:0e:33:8a:c2:c8:
ea:51:d9:37:a7:31:8e:d8:61:86:dd:b5:64:19:56:
0e:39:82:bc:e4:b1:5f:d1:82:25:9d:e9:48:01:28:
3f:37:f0:20:cf:bb:ec:be:1c:15:df:9b:24:d8:28:
fa:1d:13:4a:33:ac:37:45:d5:1a:04:e6:ad:59:55:
55:89:15:76:58:c1:6d:73:2a:a0:3f:cf:a1:8b:52:
0d:8f:5b:e2:a3:eb:2b:bc:07:e4:30:1c:e0:09:a6:
5d:1e:28:a6:97:e8:35:87:6a:25:75:d0:b1:47:39:
fc:3e:5b:42:c7:41:f9:96:37:2a:33:ba:a8:57:82:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:D7:90:B6:D2:4A:6F:6C:95:32:20:03:0E:29:F8:2D:DC:A9:2A
X509v3 Authority Key Identifier:
keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/E9BDEF2CABD011F0B868ED11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.153.144.0/22
103.198.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:ea:a8:bf:7c:63:ca:80:d2:25:bb:02:61:dd:f8:49:69:13:
57:1f:65:0f:85:37:ff:71:d1:60:d0:88:e3:ad:51:d3:65:af:
a1:8d:65:5b:02:2b:5e:63:78:62:61:1b:05:d7:c3:b0:52:45:
f5:93:3c:35:00:14:01:ed:67:3a:db:f9:0e:d5:de:5d:7d:52:
3e:60:b1:75:d0:d7:f0:c8:8d:8b:64:56:a4:12:36:82:54:df:
7b:51:a8:27:61:ae:ac:51:35:f7:b7:1b:b1:67:e2:b8:3c:16:
3d:73:4a:57:fc:43:72:9d:3e:f5:ca:4b:d2:6c:7b:cd:85:c8:
3f:44:74:44:39:5a:dc:cf:b4:27:63:72:87:82:3f:1f:9d:e0:
4f:b8:4e:fc:00:4b:f2:d9:ab:3d:79:ba:50:39:a6:46:dc:13:
66:8d:af:a1:2c:0a:c2:31:03:e1:44:ef:21:9e:31:f3:8e:3a:
3b:cf:f3:c0:60:18:c1:77:c4:5b:06:78:05:0c:f1:6d:c7:78:
7f:92:ea:3e:e7:d0:9c:19:fb:0e:9f:c1:c8:91:a3:45:7a:d0:
6c:9b:89:6d:12:fc:f2:63:02:f7:50:80:ba:17:4c:d3:14:5b:
e8:41:16:4d:de:1c:ef:e3:77:c7:e1:cf:9e:66:5f:e7:2f:57:
8b:eb:f8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:28:00 2026 by rpki-client