
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/1D45733C9AAB11ECBDD79E1EC4F9AE02.roa
File: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (raw, json)
Hash identifier: QHGUM82zhuPv35Kjoao2FUx1+4roXHxbwl+YxAAtRCE=
Subject key identifier: 5E:AD:ED:06:59:5E:D9:E0:B9:18:30:E2:48:A8:1B:87:A0:19:62:1F
Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial: 0443
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/1D45733C9AAB11ECBDD79E1EC4F9AE02.roa
Signing time: Wed 01 Apr 2026 00:32:11 +0000
ROA not before: Wed 01 Apr 2026 00:32:11 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 139922
IP address blocks: 103.182.174.0/23 maxlen: 24
2001:df0:7dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Validity
Not Before: Apr 1 00:32:11 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc678b-f873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e6:99:39:68:77:45:29:b2:08:79:6b:d5:1c:
5c:d9:90:8f:ed:65:ec:e8:3a:04:0e:ac:0c:9e:bf:
8d:8b:a7:46:d5:0e:3f:82:1c:83:49:45:b3:d4:60:
0f:8d:7c:fa:8e:a4:46:60:71:eb:bf:fd:5a:fb:c8:
33:d6:e4:81:ea:8d:a6:96:31:0f:22:da:7c:b2:09:
21:53:e4:3f:15:8f:2c:bf:69:fb:a2:d0:d1:38:c5:
f0:65:81:da:7d:78:87:ca:5c:a8:f1:50:13:85:5d:
68:35:bf:2f:5c:49:36:12:a5:55:e6:d6:fc:d8:5b:
17:16:b1:f3:6b:39:2b:3e:20:96:4b:89:9d:41:23:
02:e7:db:e8:7f:6b:cc:fc:62:0d:78:62:dc:df:f0:
5d:8d:12:e2:28:88:82:4c:97:15:c5:b3:f8:9d:83:
82:9b:dd:37:90:7f:96:6b:ef:43:35:a1:70:9d:30:
73:b8:18:5f:58:ae:24:32:5c:fa:bb:45:b7:d7:c4:
40:52:8d:0d:47:ec:51:89:85:d9:d9:47:be:d2:a7:
42:18:7f:51:e7:d8:bd:96:cc:c4:ff:4d:20:a6:b1:
d9:85:87:cc:4d:21:95:ec:7c:a9:72:51:15:05:ce:
76:44:3a:27:9d:64:45:64:9d:b4:ec:73:23:1d:10:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:ED:06:59:5E:D9:E0:B9:18:30:E2:48:A8:1B:87:A0:19:62:1F
X509v3 Authority Key Identifier:
keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/1D45733C9AAB11ECBDD79E1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.174.0/23
IPv6:
2001:df0:7dc0::/48
Signature Algorithm: sha256WithRSAEncryption
18:47:39:fc:41:ca:a3:32:d0:47:75:68:22:42:d0:e7:fb:01:
37:65:ef:58:13:e2:3e:a9:69:4b:72:a0:39:95:22:ea:88:02:
8a:1e:44:49:38:0d:05:01:38:63:a6:fd:29:d3:8b:e8:af:f9:
af:36:c6:78:e0:3c:cd:42:bc:36:39:3c:6a:08:0b:e7:a9:15:
62:0f:f1:20:a1:6e:85:74:29:e3:e9:81:16:75:10:97:4a:8f:
7f:9e:29:15:c2:c1:29:dd:a0:f9:16:22:d1:86:6f:e9:04:b6:
70:ed:09:e6:dd:aa:d4:9a:19:5a:8e:86:05:53:26:e6:d3:17:
78:83:0f:a9:7f:41:8f:57:97:ac:dc:aa:a3:f9:9f:8d:93:88:
d4:13:3f:a5:37:57:f2:bd:d6:7e:51:e2:8b:de:fa:b8:74:db:
2d:67:78:19:58:8c:21:5a:f0:b1:b4:b2:2c:6c:de:99:7a:e6:
3f:d7:e8:8a:61:fd:07:64:ff:7d:4e:5d:bf:ee:e6:8e:1e:2a:
55:05:06:51:4d:dc:2b:f8:16:8e:af:07:11:24:7a:0e:b7:72:
0a:07:ca:d4:f4:37:e0:07:37:42:8d:1e:2b:e9:17:06:0f:60:
97:0b:cd:83:44:dd:fb:f1:16:9c:c5:3e:6e:f5:5a:31:be:37:
4f:51:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:26:53 2026 by rpki-client