
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5553B5FEE90E11EA998F5735C4F9AE02.roa
File: 5553B5FEE90E11EA998F5735C4F9AE02.roa (raw, json)
Hash identifier: IBx8mGkOd0BZSmuyzP27vCAaZ5BftJcOjcBY0axmjXw=
Subject key identifier: 9B:82:81:F1:64:DF:56:C7:B6:A9:B3:15:89:ED:FA:A4:E1:EC:46:00
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 375C
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5553B5FEE90E11EA998F5735C4F9AE02.roa
Signing time: Sun 04 Oct 2026 15:18:25 +0000
ROA not before: Sun 04 Oct 2026 15:18:25 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 3356
IP address blocks: 103.230.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 14:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14172 (0x375c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 4 15:18:25 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac26e41-5dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:2e:86:45:1e:e6:b1:6e:02:b8:66:08:da:
e0:07:87:ea:7e:41:0a:98:94:71:79:c8:10:3b:6d:
14:56:fd:64:bf:bb:26:75:56:8b:a0:40:66:d7:c5:
38:96:29:53:bb:33:8a:77:23:d6:34:7b:c2:0f:3e:
07:ee:c4:4c:dd:8c:37:ae:d9:aa:8c:4d:31:05:07:
d7:70:e4:8d:68:95:3e:ea:18:cd:ab:e9:32:a7:f3:
8c:58:89:09:c7:46:19:fa:49:c4:b2:d1:df:f0:89:
78:76:88:17:30:da:2a:40:a7:1b:a6:cf:4a:af:53:
2d:73:fe:b7:df:ad:4c:39:28:2b:4b:56:6f:a2:da:
3f:93:73:35:c3:03:4d:a2:bd:a6:96:5a:44:d7:50:
41:6b:93:51:fb:bf:ad:3b:c9:e6:3a:fd:e5:6b:a6:
da:b0:67:65:b8:22:6d:b1:fe:e4:79:8e:78:70:19:
d3:e3:27:a9:d1:5e:80:9b:08:32:5b:cf:65:46:09:
fe:74:9b:12:ef:de:92:7d:0f:33:04:d0:1c:a9:3c:
78:06:05:6f:d3:79:18:b8:ae:b6:f7:a6:10:22:f6:
3c:32:72:07:6b:ce:82:e3:ab:d4:9c:d7:0d:7b:e3:
e2:9d:18:38:94:6d:d4:9d:9b:83:a6:a6:de:d1:b5:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:81:F1:64:DF:56:C7:B6:A9:B3:15:89:ED:FA:A4:E1:EC:46:00
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5553B5FEE90E11EA998F5735C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.230.68.0/23
Signature Algorithm: sha256WithRSAEncryption
06:5e:40:b2:b8:43:49:a7:71:b5:04:fd:88:b0:a5:55:33:14:
2d:30:55:99:47:a9:42:d5:c5:c7:2e:77:6a:01:47:f1:ae:ca:
84:5f:6e:42:a3:d4:ea:9c:e2:5c:80:17:3e:f7:a4:3e:76:88:
6b:06:e5:46:e6:f4:2a:e1:75:20:ce:0a:af:fc:b4:a8:a9:23:
0b:85:31:6f:c7:85:89:a4:ee:14:94:1e:14:85:5b:fa:a1:05:
65:d2:27:cc:fa:8d:de:88:81:b5:29:3f:1b:36:34:67:74:39:
19:3d:39:c2:5e:b3:63:ef:2f:41:54:e3:e2:00:83:69:9f:59:
d7:51:e7:1f:ac:9e:be:e8:40:40:9e:e5:a3:24:28:03:61:b3:
99:d7:30:74:7b:96:33:b0:6f:3c:09:05:81:fe:3e:80:dc:17:
cd:f0:00:49:df:d4:a4:3b:66:8a:47:30:9a:8d:0f:87:f5:ee:
13:d6:41:fb:64:60:df:62:f6:0f:db:2d:a8:aa:c2:5a:09:97:
92:6a:33:d3:c3:92:2c:6a:c7:a0:7a:0c:b0:6e:c4:60:cc:b2:
9e:31:ee:d2:ec:62:fc:b5:e3:bc:e9:de:19:05:35:51:5d:3d:
f6:db:cb:bb:72:c6:4a:d3:34:b2:c2:d9:b7:77:fc:9c:cc:1d:
8c:47:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:15:55 2026 by rpki-client