
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/5C5BA8365D6A11F081971E0DC4F9AE02.roa
File: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (raw, json)
Hash identifier: yCQh77GfzAA6MVXcrT8cCRDK8VNTk64KsqKB1im8Bxs=
Subject key identifier: 24:EA:ED:9B:4C:D6:5A:6D:1C:C0:62:44:1D:74:95:D3:7E:1B:78:D0
Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial: BE
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/5C5BA8365D6A11F081971E0DC4F9AE02.roa
Signing time: Wed 01 Jul 2026 09:34:30 +0000
ROA not before: Wed 01 Jul 2026 09:34:30 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 6984
IP address blocks: 103.22.236.0/22 maxlen: 22
103.22.236.0/23 maxlen: 23
103.22.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 07:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Validity
Not Before: Jul 1 09:34:30 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a44df26-518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:fc:d3:dc:7a:fb:7d:3f:49:23:57:29:1e:
17:47:55:40:03:38:31:58:6d:76:0f:1a:4b:92:e5:
c4:a2:68:95:91:a4:b4:3a:9a:13:3a:ab:e3:f5:85:
2f:30:25:a1:62:4e:af:5c:50:80:81:2c:f6:8a:2e:
c8:0a:5b:7a:29:06:a4:2c:e7:ed:8f:97:f5:c5:54:
99:af:b2:39:c4:46:2a:45:aa:4e:50:b3:a1:29:ef:
86:13:f4:97:34:2a:13:82:e2:cd:0d:38:06:5a:26:
fa:78:c0:07:26:19:97:1c:d0:c7:81:b5:ff:97:11:
13:96:f6:e1:8e:a6:b7:1d:1b:69:7e:9a:45:6c:fb:
f2:40:ce:a6:e1:08:52:e3:6a:f6:b6:ee:70:99:dc:
81:57:f7:03:17:c0:5b:e5:31:42:19:7b:72:6e:d6:
fe:66:a5:a0:b1:fa:1f:3f:d1:67:ac:18:b8:74:6b:
fc:11:98:92:dc:0f:c4:a2:89:31:96:9b:1c:3d:ca:
26:4f:89:92:23:43:1c:94:5c:42:b9:51:1b:d2:66:
5b:5c:75:1f:33:12:87:3f:f9:10:43:dc:85:09:a3:
a8:c9:80:a2:fd:d6:c0:b4:e4:7f:3f:d9:ed:34:5c:
19:ac:e3:0c:47:23:13:79:0a:95:7d:6b:e9:2b:4d:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:ED:9B:4C:D6:5A:6D:1C:C0:62:44:1D:74:95:D3:7E:1B:78:D0
X509v3 Authority Key Identifier:
keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/5C5BA8365D6A11F081971E0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.22.236.0/22
Signature Algorithm: sha256WithRSAEncryption
45:c3:47:db:49:8b:6b:85:04:58:65:6f:57:e8:c7:f1:59:74:
ec:32:5f:a2:d8:f7:89:2d:04:19:93:a9:92:c3:10:26:ca:15:
68:d6:73:03:2c:d3:df:f6:54:b0:b4:d2:a2:db:84:55:2a:aa:
9e:f1:e5:5c:64:37:98:dd:55:08:02:7e:2f:94:82:53:36:73:
10:47:41:c0:88:5a:bd:3d:f4:56:16:5a:e8:d9:47:f3:34:3d:
72:43:a5:79:df:90:cd:fe:1b:58:12:2d:10:01:ca:48:86:35:
ec:4a:43:63:7d:2b:3f:87:6f:6c:c8:81:cf:28:72:55:34:aa:
20:87:51:c7:45:82:a3:f6:ee:be:f7:f9:bf:ad:34:18:14:0a:
59:8c:54:6f:ba:62:e1:fe:0b:76:a1:4a:6c:b7:79:86:46:39:
35:0d:27:e4:fb:dd:dc:72:e6:9e:38:af:c8:c0:07:22:29:f8:
c4:d0:b7:5b:3b:0c:e6:14:44:9c:62:19:18:0a:7b:e3:a6:50:
f0:23:cb:b5:f0:c9:9b:01:38:ca:83:f3:01:25:fd:a4:4b:6a:
f8:af:e0:c0:dc:32:4e:f1:1a:74:c2:45:34:50:35:bd:b3:39:
af:f5:58:56:3d:12:5c:a7:a8:14:d0:a2:ee:bc:70:6b:10:1e:
97:96:79:05
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVEQzExMTAvBgNVBAUTKDk4MjQyMTgxQTc1NTRBMjhFNzhDMUFFOEE3M0JFMjc5
NDUyQ0NCRjQwHhcNMjYwNzAxMDkzNDMwWhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0ZGYyNi01MThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAynv809x6+30/SSNXKR4XR1VAAzgxWG12DxpLkuXEomiVkaS0OpoTOqvj9YUv
MCWhYk6vXFCAgSz2ii7IClt6KQakLOftj5f1xVSZr7I5xEYqRapOULOhKe+GE/SX
NCoTguLNDTgGWib6eMAHJhmXHNDHgbX/lxETlvbhjqa3HRtpfppFbPvyQM6m4QhS
42r2tu5wmdyBV/cDF8Bb5TFCGXtybtb+ZqWgsfofP9FnrBi4dGv8EZiS3A/Eookx
lpscPcomT4mSI0MclFxCuVEb0mZbXHUfMxKHP/kQQ9yFCaOoyYCi/dbAtOR/P9nt
NFwZrOMMRyMTeQqVfWvpK03G2QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCTq7ZtM
1lptHMBiRB10ldN+G3jQMB8GA1UdIwQYMBaAFJgkIYGnVUoo54wa6Kc74nlFLMv0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURDMS9GRDExMkI3NjVE
NjkxMUYwOTExRDcyMENDNEY5QUUwMi9tQ1FoZ2FkVlNpam5qQnJvcHp2aWVVVXN5
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21DUWhnYWRWU2lqbmpCcm9wenZpZVVVc3lfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVEQzEvRkQxMTJCNzY1RDY5MTFGMDkxMUQ3MjBDQzRGOUFFMDIvNUM1QkE4MzY1
RDZBMTFGMDgxOTcxRTBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZxbsMA0GCSqGSIb3DQEBCwUAA4IBAQBFw0fbSYtrhQRYZW9X6Mfx
WXTsMl+i2PeJLQQZk6mSwxAmyhVo1nMDLNPf9lSwtNKi24RVKqqe8eVcZDeY3VUI
An4vlIJTNnMQR0HAiFq9PfRWFlro2UfzND1yQ6V535DN/htYEi0QAcpIhjXsSkNj
fSs/h29syIHPKHJVNKogh1HHRYKj9u6+9/m/rTQYFApZjFRvumLh/gt2oUpst3mG
Rjk1DSfk+93ccuaeOK/IwAciKfjE0LdbOwzmFEScYhkYCnvjplDwI8u18MmbATjK
g/MBJf2kS2r4r+DA3DJO8Rp0wkU0UDW9szmv9VhWPRJcp6gU0KLuvHBrEB6XlnkF
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:49:11 2026 by rpki-client