
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/5CA964A68AC111EC91D19A11C4F9AE02.roa
File: 5CA964A68AC111EC91D19A11C4F9AE02.roa (raw, json)
Hash identifier: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=
Subject key identifier: 4A:3C:7B:D9:E2:AC:74:72:04:8B:70:C4:0A:81:07:1F:4C:F3:AE:FC
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 04E0
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/5CA964A68AC111EC91D19A11C4F9AE02.roa
Signing time: Tue 03 Mar 2026 00:32:44 +0000
ROA not before: Tue 03 Mar 2026 00:32:44 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 34927
IP address blocks: 103.180.192.0/24 maxlen: 24
103.180.193.0/24 maxlen: 24
2400:54a0:1010::/48 maxlen: 48
2400:54a0:101a::/48 maxlen: 48
2400:54a0:1020::/48 maxlen: 48
2400:54a0:102a::/48 maxlen: 48
2400:54a0:102b::/48 maxlen: 48
2400:54a0:102c::/48 maxlen: 48
2400:54a0:21a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Mar 3 00:32:44 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a62c2c-ed14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:fa:db:7a:40:08:02:8b:3d:9b:63:02:ff:
73:53:b8:51:40:ba:c3:a8:00:cb:da:d4:e7:26:7a:
91:df:f8:88:30:75:47:d6:9c:27:95:60:9a:5c:7e:
73:43:bd:75:34:c8:40:c7:e8:87:10:f2:88:11:d4:
8a:6e:b1:f7:e5:34:5a:40:fb:d0:59:33:d9:36:9e:
10:d8:e7:1e:cb:cc:88:a6:5a:b8:72:97:a4:6a:cd:
c2:74:e9:e4:a0:d6:f0:48:c1:87:25:f0:8d:90:0f:
c4:c7:b1:ed:83:f8:f6:ba:cc:fa:15:c8:92:63:56:
48:96:e3:bd:f7:ea:e7:7d:e4:7d:8f:15:4a:3c:94:
29:c5:19:e7:b3:03:41:02:80:5f:dc:71:ad:0d:69:
d9:fb:47:ca:95:46:87:88:0e:b3:93:2c:16:8f:5f:
1f:ab:91:55:d3:79:77:7e:54:ae:e6:4c:3a:ac:86:
84:bf:1b:5d:71:26:27:b2:e3:71:83:38:52:cf:73:
15:3c:fa:09:34:f9:86:34:8b:9f:aa:9c:5f:7a:6e:
57:30:74:ec:45:e8:da:6d:38:08:84:2f:4b:80:02:
7d:02:56:a2:44:17:6b:f4:88:fa:de:fd:4e:f3:de:
a6:e6:cf:eb:ec:ca:a9:f0:b3:d3:b7:0a:48:be:a1:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:7B:D9:E2:AC:74:72:04:8B:70:C4:0A:81:07:1F:4C:F3:AE:FC
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/5CA964A68AC111EC91D19A11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.180.192.0/23
IPv6:
2400:54a0:1010::/48
2400:54a0:101a::/48
2400:54a0:1020::/48
2400:54a0:102a::-2400:54a0:102c:ffff:ffff:ffff:ffff:ffff
2400:54a0:21a0::/48
Signature Algorithm: sha256WithRSAEncryption
9b:72:4d:4d:5c:3c:f9:4f:24:f9:e8:db:bc:24:a2:ca:a1:37:
86:98:9c:33:ea:cb:83:cf:99:df:e8:99:29:fb:b4:46:85:47:
eb:0b:f7:df:a8:89:4d:69:30:c2:4a:81:50:a5:8d:b3:30:46:
78:98:d6:9c:18:2c:5f:03:1f:a6:6a:d2:a3:37:82:60:7d:2d:
dc:c7:d9:6b:81:86:80:23:9d:46:5a:42:bf:e0:f5:85:e1:7c:
3c:f2:04:d5:a2:c6:5f:1d:b4:db:66:49:3a:2e:7b:c8:e2:21:
b7:d3:7f:e7:57:4b:c0:4e:b0:17:e5:4a:0d:72:bc:50:a4:fd:
24:fa:e2:de:34:1d:cb:39:aa:9b:9c:08:c3:30:a2:8e:76:55:
d8:49:97:0b:f3:1b:e1:64:a8:e9:4c:71:6e:3b:12:b4:f1:48:
ac:b2:c8:30:da:6a:58:83:3a:ad:52:e9:24:71:9e:82:20:32:
72:41:a8:16:fe:3e:c5:10:e2:19:20:71:70:d6:87:97:67:e1:
a4:4e:a5:17:6f:b6:39:52:29:5f:85:9b:c2:bb:91:7e:2d:1e:
59:7a:28:4f:0a:96:e6:75:c0:d3:09:38:d2:74:c2:02:8c:5c:
54:e8:17:01:91:50:6b:5c:ee:39:60:bf:3c:30:95:cd:3c:71:
7f:73:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:39:11 2026 by rpki-client