
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AA23566C85B11F1B1BE427E4211F970.roa
File: 5AA23566C85B11F1B1BE427E4211F970.roa (raw, json)
Hash identifier: NASz2ih119htk+nVqQP+9LOCkaTGvtBO/9WOHz/NeXc=
Subject key identifier: E5:3D:CC:D7:7A:FD:9B:F8:12:58:EF:0E:E9:97:D0:04:18:23:FD:E9
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 301A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AA23566C85B11F1B1BE427E4211F970.roa
Signing time: Thu 15 Oct 2026 05:43:31 +0000
ROA not before: Thu 15 Oct 2026 05:43:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 197328
IP address blocks: 113.203.218.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 20:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12314 (0x301a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 15 05:43:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ad06803-c91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:66:cf:39:84:72:db:97:cd:2d:42:bf:d7:
a0:25:f5:11:f3:45:ae:9d:44:1c:8a:3e:68:d5:5c:
cf:97:be:cc:b8:9f:35:8d:b7:45:fa:00:2e:a6:37:
67:76:15:f6:8a:f9:52:d2:92:59:b6:b2:53:17:69:
ad:50:54:86:cd:74:24:20:33:da:ab:89:31:2c:60:
5c:3c:1e:17:24:61:2d:48:b1:9b:87:91:42:17:1b:
e0:45:84:c9:7b:9e:11:66:3c:1b:56:16:84:a9:38:
13:5d:f2:1e:f7:2a:17:32:5e:bf:01:a1:5e:ce:ad:
56:e7:6b:a4:0b:35:c1:d3:a6:81:86:14:09:be:b6:
de:16:3d:2f:b5:b9:f1:89:24:c5:74:36:d5:36:0d:
ba:23:30:6b:6c:ec:1b:3b:29:56:10:54:7c:02:7f:
25:b9:bf:d0:5f:b0:46:ef:7e:89:58:56:c1:af:14:
86:6e:6e:ae:82:de:38:59:7d:4a:b8:8f:b4:09:46:
9e:c2:38:0d:d4:e5:71:4e:88:28:2f:ee:d9:be:03:
1a:54:bc:25:e0:3f:eb:a0:8b:83:27:f8:48:c6:8c:
e1:cb:45:54:f1:34:b8:76:93:41:c1:da:b7:b4:79:
b8:5e:e4:12:69:1c:40:72:93:64:f1:ea:98:93:28:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:CC:D7:7A:FD:9B:F8:12:58:EF:0E:E9:97:D0:04:18:23:FD:E9
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5AA23566C85B11F1B1BE427E4211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
113.203.218.0/24
113.203.222.0/24
180.178.171.0/24
180.178.176.0/22
180.178.187.0-180.178.190.255
Signature Algorithm: sha256WithRSAEncryption
ae:39:ba:e2:13:61:b9:0e:05:a7:c8:67:bb:3c:0e:18:6b:76:
27:48:58:af:52:5d:3e:7d:81:b0:4f:10:be:ae:70:1f:ea:7f:
34:7e:e8:f4:73:41:0d:dc:1d:40:0b:79:82:a9:39:8c:d3:b0:
68:d5:f9:37:02:9e:50:29:30:c6:60:db:14:22:a5:26:93:ad:
02:2e:a3:2f:e0:ea:81:b6:a0:52:ca:62:af:16:b5:f7:27:c2:
0b:d7:3b:2a:e5:2c:60:9a:e6:fb:64:01:31:07:ea:07:52:d4:
b7:72:54:76:f1:ea:a6:15:84:c1:09:1d:d5:27:2c:84:dc:5b:
8c:40:26:34:b9:e3:27:6f:cd:4e:34:aa:70:0a:6f:e1:41:b7:
3c:65:5b:7c:e9:aa:4f:56:ce:83:6d:53:da:33:c1:e3:d2:4e:
90:c0:74:72:b7:c9:4d:f3:c5:01:f7:6c:c6:22:0d:45:cb:a7:
64:87:af:71:48:c0:e3:6c:15:5a:04:ae:24:6d:a6:d5:16:94:
99:a8:f7:53:a6:b1:4b:4f:21:91:12:9d:11:24:a2:e1:5c:12:
78:b8:3e:5a:a1:99:a7:45:b8:91:ad:67:4d:6d:e2:fb:9e:aa:
3b:b5:5e:30:f5:3e:f1:3b:fa:b7:3e:e5:18:1e:81:76:c5:45:
c0:a2:e6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:50 2026 by rpki-client