
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C5FA2070D5BE11F08FAD3430C4F9AE02.roa
File: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (raw, json)
Hash identifier: a0HTQdr8HylIpzgbI0QRxkVKLMCusDxHj8vJRj2eoYc=
Subject key identifier: 12:1D:31:56:5C:C8:0B:EB:DD:03:00:3A:2C:CB:22:F0:52:18:D9:A1
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 043B
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C5FA2070D5BE11F08FAD3430C4F9AE02.roa
Signing time: Sat 27 Jun 2026 01:32:28 +0000
ROA not before: Sat 27 Jun 2026 01:32:28 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140687
IP address blocks: 103.26.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jun 27 01:32:28 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3f282b-cc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:f9:58:69:03:c1:c1:fd:89:cd:b2:ef:7f:
0e:6d:96:29:1e:75:da:ce:47:6e:ed:e7:d8:d8:13:
1a:96:e4:54:17:1f:ec:93:84:21:13:fa:3c:25:b2:
7a:a5:62:d1:59:0a:12:24:90:aa:bd:32:45:65:b3:
5a:81:91:ee:b6:c3:86:40:89:55:8f:11:b6:86:ca:
4d:e6:b0:38:a7:5f:a3:37:e6:34:19:37:97:12:2e:
f5:29:52:40:67:4f:c7:04:5a:73:b3:46:3a:b5:d4:
72:76:e8:78:b5:d7:d1:7b:a9:1a:25:f3:9a:f0:d7:
70:84:6b:e0:01:e9:90:7a:f9:73:f8:4b:f6:70:58:
56:55:56:31:f1:0a:0d:a5:95:e8:3b:71:93:90:9e:
17:c9:bf:df:f4:d6:f4:f7:7b:e4:92:c3:b9:9f:d8:
7b:71:c9:31:da:d4:17:15:c7:87:a3:cb:44:4d:68:
ed:87:b6:22:c6:46:39:87:c8:ea:ef:00:09:77:12:
73:8e:14:39:73:ea:c0:f5:2a:ba:6d:e2:dc:0b:5f:
19:53:eb:8f:5a:a3:0a:df:bd:1b:5b:17:80:5c:1c:
62:21:e8:66:dd:a2:54:42:10:74:8c:dc:69:79:64:
2e:89:11:2c:05:e2:c1:6e:44:50:f4:8b:d3:fb:50:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:31:56:5C:C8:0B:EB:DD:03:00:3A:2C:CB:22:F0:52:18:D9:A1
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C5FA2070D5BE11F08FAD3430C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:03:b0:60:15:7a:68:8a:67:e9:de:06:6d:68:1c:9c:f7:d9:
12:7a:38:38:1e:1a:4f:ae:a7:df:e7:e7:f0:c5:a2:b9:6d:dd:
ab:a5:1a:3a:64:a3:ac:09:76:80:8c:7a:39:ed:a1:2a:00:4f:
e2:42:87:da:9a:cd:4b:ad:bd:39:31:8a:b1:4c:e0:9c:f8:e3:
8e:7f:00:15:a1:25:08:5b:f9:02:94:2e:ef:85:48:b6:3b:bf:
00:52:e1:80:fd:9a:a0:f5:cc:a3:61:b9:b7:e8:dd:95:f2:d9:
9d:8e:49:4f:75:e3:1e:14:5b:78:87:31:c0:15:44:12:28:d2:
b3:c1:2c:7b:b4:ad:b4:a6:7b:cf:d8:a0:e5:9e:0e:49:3e:8d:
1a:dd:fa:0d:f9:c6:53:62:19:93:cc:8c:a3:e5:e7:d1:6f:7b:
61:4e:60:57:82:0e:97:b5:3b:f8:b8:32:4d:ec:e6:5f:ca:dd:
5c:5b:4a:3f:2f:b0:d0:63:04:de:79:47:91:52:5a:da:27:3e:
a4:04:17:1c:1e:5b:a1:1d:6c:b3:62:c0:33:d1:ce:4a:a5:07:
b9:12:23:2e:16:fb:8a:fe:41:0f:55:aa:1f:66:82:7f:65:96:
7a:3a:8b:03:4b:a9:26:12:71:91:55:b7:f3:67:77:96:ce:c0:
e2:ac:7f:fe
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE
QUVGNDEzOTYwHhcNMjYwNjI3MDEzMjI4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNmMjgyYi1jYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyj5WGkDwcH9ic2y738ObZYpHnXazkdu7efY2BMaluRUFx/sk4QhE/o8JbJ6
pWLRWQoSJJCqvTJFZbNagZHutsOGQIlVjxG2hspN5rA4p1+jN+Y0GTeXEi71KVJA
Z0/HBFpzs0Y6tdRyduh4tdfRe6kaJfOa8NdwhGvgAemQevlz+Ev2cFhWVVYx8QoN
pZXoO3GTkJ4Xyb/f9Nb093vkksO5n9h7cckx2tQXFceHo8tETWjth7YixkY5h8jq
7wAJdxJzjhQ5c+rA9Sq6beLcC18ZU+uPWqMK370bWxeAXBxiIehm3aJUQhB0jNxp
eWQuiREsBeLBbkRQ9IvT+1DPUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBIdMVZc
yAvr3QMAOizLIvBSGNmhMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx
QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvQzVGQTIwNzBE
NUJFMTFGMDhGQUQzNDMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZxoLMA0GCSqGSIb3DQEBCwUAA4IBAQDDA7BgFXpoimfp3gZtaByc
99kSejg4HhpPrqff5+fwxaK5bd2rpRo6ZKOsCXaAjHo57aEqAE/iQofams1Lrb05
MYqxTOCc+OOOfwAVoSUIW/kClC7vhUi2O78AUuGA/Zqg9cyjYbm36N2V8tmdjklP
deMeFFt4hzHAFUQSKNKzwSx7tK20pnvP2KDlng5JPo0a3foN+cZTYhmTzIyj5efR
b3thTmBXgg6XtTv4uDJN7OZfyt1cW0o/L7DQYwTeeUeRUlraJz6kBBccHluhHWyz
YsAz0c5KpQe5EiMuFvuK/kEPVaofZoJ/ZZZ6OosDS6kmEnGRVbfzZ3eWzsDirH/+
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:17:45 2026 by rpki-client