
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/7148438E5DC211EE954BE21DC4F9AE02.roa
File: 7148438E5DC211EE954BE21DC4F9AE02.roa (raw, json)
Hash identifier: m6XdQYiJnSOPXQOuIfb3rx9O+LxbHIvmGlPQ4asjwys=
Subject key identifier: C4:54:14:D4:3A:9D:4A:83:4D:F1:9A:86:9A:9D:5B:43:17:24:79:64
Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Certificate serial: 023D
Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/7148438E5DC211EE954BE21DC4F9AE02.roa
Signing time: Sun 27 Sep 2026 03:52:44 +0000
ROA not before: Sun 27 Sep 2026 03:52:44 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 151660
IP address blocks: 103.252.194.0/23 maxlen: 24
2401:2520::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Validity
Not Before: Sep 27 03:52:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab8930c-b9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:1d:73:3e:35:f5:df:43:cd:fd:70:4a:7f:
03:04:13:c4:b0:9a:ca:e8:31:38:36:e7:93:40:30:
1b:79:f6:d5:eb:33:d9:7c:19:b7:30:77:b6:05:34:
04:4c:be:86:b1:b0:fb:5f:6a:b5:64:3f:30:52:70:
e7:0a:48:74:b9:b7:ec:3e:6f:0e:66:cb:cd:fb:81:
cf:ec:21:0c:2e:ae:d9:59:a4:fb:7e:82:31:55:b7:
52:ad:fd:b7:42:3a:42:2b:7f:13:4a:d6:29:bb:ee:
ea:3e:21:6d:1d:4f:75:ab:97:81:b1:2b:d6:88:cc:
8b:f3:2b:c3:d1:ba:82:f5:a5:da:b9:55:6b:17:41:
2f:cd:22:c8:18:27:e5:82:be:81:a6:5b:32:59:15:
79:89:35:b7:b7:15:1c:68:9f:88:51:ec:88:ba:61:
2f:9c:6b:61:e2:da:c3:f2:b1:2d:2f:4a:fe:a9:52:
25:a5:09:4c:1c:fd:45:3d:4d:b7:f6:02:6e:89:a1:
91:59:22:9c:58:f5:af:13:10:e3:9a:60:c9:19:48:
b8:25:8a:d3:2b:d1:38:e7:4c:33:58:9b:d4:12:a5:
02:e9:77:9e:6b:53:2c:5e:69:67:72:4d:33:4d:8c:
f3:82:8d:a5:c8:b9:a8:c9:6d:5f:89:f4:a8:04:8e:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:14:D4:3A:9D:4A:83:4D:F1:9A:86:9A:9D:5B:43:17:24:79:64
X509v3 Authority Key Identifier:
keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/7148438E5DC211EE954BE21DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.194.0/23
IPv6:
2401:2520::/32
Signature Algorithm: sha256WithRSAEncryption
3b:56:30:ca:1e:53:e4:55:10:6c:de:88:dd:9f:65:00:40:4c:
d7:0c:57:35:34:ee:db:2f:ee:96:c0:96:1a:74:a5:62:a4:32:
45:b6:68:b5:eb:d2:ab:91:cd:36:58:8f:70:39:82:98:de:90:
50:5d:82:95:19:23:09:b3:71:18:e5:06:fe:8b:e5:d9:7e:15:
30:17:bd:5c:50:cb:83:2e:d5:cb:a4:cc:fe:d2:2a:87:a9:f3:
4b:76:b2:42:40:6e:d0:70:93:e9:27:60:61:85:a0:b7:43:c8:
9a:b4:dd:66:f5:a2:f8:76:3f:71:bd:44:1a:bd:2b:6a:13:db:
c9:2a:34:84:e6:eb:85:30:71:a0:d4:bc:2a:bf:b8:5d:db:10:
3f:4b:99:b8:df:36:0c:66:56:40:02:48:49:f6:9c:75:02:2c:
fc:90:a1:39:d3:83:b4:3c:82:c5:94:14:f1:e3:31:86:ea:77:
e7:72:5c:a1:b6:c7:4c:a7:c1:fd:46:91:98:fd:2b:77:de:80:
6e:05:df:f9:51:09:3f:77:58:05:18:0c:30:e5:95:56:d8:1c:
08:e0:41:f4:d8:eb:0c:16:62:45:14:c4:a6:6c:8d:6f:b8:62:
a8:d9:fa:13:26:51:13:b7:67:4a:8d:06:0c:da:a0:fc:22:55:
97:b1:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:37 2026 by rpki-client