
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/E5BFB52CC22C11F19499EDEB5811F970.roa
File: E5BFB52CC22C11F19499EDEB5811F970.roa (raw, json)
Hash identifier: B48fDexo3emAfg93spGSY7zqAJp+cV8Xe3mEub+W+6M=
Subject key identifier: 04:7C:08:51:6E:0A:F2:55:E6:87:8A:EA:09:20:F5:A0:A7:5E:4F:B8
Certificate issuer: /CN=A91ECDC0/serialNumber=38F3A997D2FE1AC40144F5C7B235091DD13F8947
Certificate serial: 04
Authority key identifier: 38:F3:A9:97:D2:FE:1A:C4:01:44:F5:C7:B2:35:09:1D:D1:3F:89:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPOpl9L-GsQBRPXHsjUJHdE_iUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/E5BFB52CC22C11F19499EDEB5811F970.roa
Signing time: Wed 07 Oct 2026 08:56:06 +0000
ROA not before: Wed 07 Oct 2026 08:56:05 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 23884
IP address blocks: 43.255.60.0/22 maxlen: 24
103.80.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/OPOpl9L-GsQBRPXHsjUJHdE_iUc.crl
rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/OPOpl9L-GsQBRPXHsjUJHdE_iUc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPOpl9L-GsQBRPXHsjUJHdE_iUc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 09:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECDC0, serialNumber=38F3A997D2FE1AC40144F5C7B235091DD13F8947
Validity
Not Before: Oct 7 08:56:05 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ac60925-c02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:fd:a4:cd:e0:ed:b5:8f:37:0e:ff:77:fd:
13:cb:e9:ce:26:78:cd:72:43:9c:a8:a8:5b:82:50:
b7:d5:1f:46:9a:cf:d7:75:d8:33:4d:7e:55:46:5a:
f7:92:cb:52:60:51:32:07:ae:6c:1c:9f:ad:e6:7c:
26:3c:1e:6a:63:63:de:d8:47:0a:a2:0e:72:70:a7:
9b:ef:19:66:f2:43:8d:bc:d7:50:b2:b8:c6:d8:e3:
28:6a:63:fb:5a:e2:f1:74:1b:70:b1:d6:77:08:40:
46:c3:2f:1c:8e:ea:c0:9a:38:ea:4a:39:51:66:3f:
5b:72:09:91:fb:e2:03:fc:27:3f:04:02:24:16:17:
2d:6f:11:9f:73:66:56:88:57:c1:7b:d2:a8:07:a7:
a5:9e:cf:84:12:89:7d:76:6e:ae:e4:ac:33:0c:dc:
92:14:1d:00:48:73:2c:18:c0:73:e4:60:76:03:67:
ff:ec:8c:d2:87:75:1f:26:e4:64:9b:32:0c:10:a3:
32:a7:cd:e4:8b:0c:b0:0b:b3:de:e6:aa:5d:f0:d1:
f5:b4:c0:03:cc:6b:56:d3:16:c7:0f:a6:5e:63:9d:
97:01:37:12:e7:12:b6:b4:73:99:ed:b9:0b:94:89:
f6:46:94:6b:e4:98:5c:cd:21:24:8a:31:c0:c4:d6:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7C:08:51:6E:0A:F2:55:E6:87:8A:EA:09:20:F5:A0:A7:5E:4F:B8
X509v3 Authority Key Identifier:
keyid:38:F3:A9:97:D2:FE:1A:C4:01:44:F5:C7:B2:35:09:1D:D1:3F:89:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/OPOpl9L-GsQBRPXHsjUJHdE_iUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPOpl9L-GsQBRPXHsjUJHdE_iUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/E5BFB52CC22C11F19499EDEB5811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.255.60.0/22
103.80.216.0/22
Signature Algorithm: sha256WithRSAEncryption
93:9d:85:cd:30:a2:a2:fe:8a:75:dc:be:44:97:0f:4b:a9:93:
d7:48:2a:df:90:fd:d1:6e:b1:a0:3d:b9:82:26:1d:7f:11:84:
7b:31:d2:50:85:69:ed:87:01:f2:5f:9c:2d:69:46:98:95:d9:
eb:9e:fb:42:8d:7a:d3:50:5d:df:2f:e8:9a:0f:e2:37:75:b2:
23:17:0f:50:52:53:9e:bd:a3:e2:ee:57:57:08:cd:b0:8c:24:
68:f4:3a:bb:8a:e6:33:68:c2:67:13:8e:b2:aa:7c:c3:5a:91:
ce:06:a3:ca:1a:f6:8c:5b:18:52:b0:b9:5c:2d:be:b1:68:ac:
65:4d:05:d8:7c:60:59:6e:42:0b:1f:98:0d:48:c9:fc:da:24:
cb:9f:21:f3:62:01:cf:3e:68:e1:51:38:de:56:a9:ed:04:c7:
95:26:ce:a9:f4:92:b7:e5:cb:a0:df:44:ab:e2:47:f7:72:97:
ea:21:e9:da:fd:91:37:c5:c3:3d:e8:aa:5a:56:55:ca:4c:24:
8f:7b:67:aa:0d:c8:aa:dc:3f:7d:8e:5b:cf:5b:cd:30:1d:20:
e4:4c:25:45:ed:73:22:ce:ac:0a:61:45:2f:fd:bd:bd:fc:3a:
5c:60:37:7e:1d:24:d0:8c:73:0b:e4:7f:88:5e:40:13:60:82:
51:cc:80:28
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
Q0RDMDExMC8GA1UEBRMoMzhGM0E5OTdEMkZFMUFDNDAxNDRGNUM3QjIzNTA5MURE
MTNGODk0NzAeFw0yNjEwMDcwODU2MDVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYzYwOTI1LWMwMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCj5f2kzeDttY83Dv93/RPL6c4meM1yQ5yoqFuCULfVH0aaz9d12DNNflVGWveS
y1JgUTIHrmwcn63mfCY8HmpjY97YRwqiDnJwp5vvGWbyQ42811CyuMbY4yhqY/ta
4vF0G3Cx1ncIQEbDLxyO6sCaOOpKOVFmP1tyCZH74gP8Jz8EAiQWFy1vEZ9zZlaI
V8F70qgHp6Wez4QSiX12bq7krDMM3JIUHQBIcywYwHPkYHYDZ//sjNKHdR8m5GSb
MgwQozKnzeSLDLALs97mql3w0fW0wAPMa1bTFscPpl5jnZcBNxLnEra0c5ntuQuU
ifZGlGvkmFzNISSKMcDE1owLAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUBHwIUW4K
8lXmh4rqCSD1oKdeT7gwHwYDVR0jBBgwFoAUOPOpl9L+GsQBRPXHsjUJHdE/iUcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDREMwLzI5MjE3MUJDQzIy
QzExRjE5RTVFQ0ZCQjU4MTFGOTcwL09QT3BsOUwtR3NRQlJQWEhzalVKSGRFX2lV
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT1BPcGw5TC1Hc1FCUlBYSHNqVUpIZEVfaVVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Q0RDMC8yOTIxNzFCQ0MyMkMxMUYxOUU1RUNGQkI1ODExRjk3MC9FNUJGQjUyQ0My
MkMxMUYxOTQ5OUVERUI1ODExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAIr/zwDBAJnUNgwDQYJKoZIhvcNAQELBQADggEBAJOdhc0woqL+inXc
vkSXD0upk9dIKt+Q/dFusaA9uYImHX8RhHsx0lCFae2HAfJfnC1pRpiV2eue+0KN
etNQXd8v6JoP4jd1siMXD1BSU569o+LuV1cIzbCMJGj0OruK5jNowmcTjrKqfMNa
kc4Go8oa9oxbGFKwuVwtvrForGVNBdh8YFluQgsfmA1IyfzaJMufIfNiAc8+aOFR
ON5Wqe0Ex5Umzqn0krfly6DfRKviR/dyl+oh6dr9kTfFwz3oqlpWVcpMJI97Z6oN
yKrcP32OW89bzTAdIORMJUXtcyLOrAphRS/9vb38OlxgN34dJNCMcwvkf4heQBNg
glHMgCg=
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:15 2026 by rpki-client