
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa
File: 5CA72CF82A6911EC94518740C4F9AE02.roa (raw, json)
Hash identifier: W1EP3IxXiJCk2UOf11rTChQuuxRnXDrkYltbGuUo73Q=
Subject key identifier: DE:2C:CF:79:1D:90:5A:12:7E:EC:D8:E9:8B:AB:C9:DA:03:12:0A:1C
Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial: 0551
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:56:41 +0000
ROA not before: Wed 03 Sep 2025 00:16:06 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9723
IP address blocks: 103.38.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Validity
Not Before: Sep 3 00:16:06 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a40d58-770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:4c:12:3b:bf:3a:15:6b:a6:04:8c:fe:c1:
39:bc:77:a6:05:f3:e0:e8:02:c6:d4:30:5a:69:cd:
47:8a:1d:a6:15:49:2e:19:ca:fa:b9:e9:91:f0:1b:
ab:bd:b4:78:75:1b:8b:50:a2:7f:23:e3:27:b9:97:
10:20:8b:f5:b9:9b:bb:f7:e5:b8:4d:64:b5:e4:85:
15:5a:e4:a4:30:91:2a:e1:d6:c0:ec:71:cf:5e:5c:
ec:97:b1:56:af:45:0e:f1:27:fc:0f:46:08:12:50:
1b:df:a6:87:e4:14:77:99:76:dd:5e:38:54:0b:a3:
64:ae:3f:e2:1d:c0:eb:41:89:db:8e:b4:51:3f:70:
00:c2:8d:35:9d:9c:4f:c2:06:8c:3e:83:f0:95:26:
a4:c4:0b:03:e6:da:be:00:9f:59:f1:5a:2a:6a:96:
27:67:b9:e7:6d:27:57:4e:60:0e:3d:bc:e1:26:98:
82:e6:3b:15:75:11:3a:c7:84:a2:38:37:25:90:48:
50:aa:d6:51:60:71:10:e1:72:47:54:76:f4:f3:ae:
22:4c:48:18:82:f2:93:b9:7d:06:cb:be:9b:ff:60:
db:5b:34:1b:ed:bf:89:ab:34:84:a8:39:7c:0e:17:
d7:08:6a:56:d0:ee:9a:12:25:36:e3:87:2a:f6:a6:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2C:CF:79:1D:90:5A:12:7E:EC:D8:E9:8B:AB:C9:DA:03:12:0A:1C
X509v3 Authority Key Identifier:
keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.10.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:32:77:84:c0:96:73:df:3b:41:86:0b:78:d8:c3:45:2e:5c:
5b:60:a1:8b:5d:b3:fe:4b:d4:06:bb:13:3e:e8:45:3a:8d:26:
4b:5d:0a:b4:e3:ec:c7:fc:69:45:b7:4b:ab:38:09:e7:e8:47:
88:8d:dc:24:bd:69:ff:91:33:3c:1e:cf:91:e1:1b:f2:16:97:
2d:f8:ad:f4:c8:76:be:2c:4a:bd:8a:7c:d7:c9:2f:20:8c:24:
a2:44:7e:0d:b4:72:fb:b1:0d:a7:a5:4c:b7:00:f5:0e:38:47:
95:6f:70:d0:77:39:23:66:16:e4:ea:3e:6e:51:aa:be:1a:28:
87:69:4b:a8:07:6a:15:70:f7:7d:39:de:2d:ad:5a:74:20:ec:
3a:9c:6d:49:6e:48:3a:22:52:9c:5e:24:fe:1f:2b:bc:d3:5d:
56:52:bc:27:6a:60:03:b5:56:5d:35:0d:0b:b5:ee:c4:7a:a7:
bf:40:8d:ff:80:be:9c:b6:86:ea:b7:47:2f:97:76:bc:94:00:
e5:cd:53:fe:83:ee:56:96:a6:ec:71:71:49:6c:33:d9:00:09:
f3:ef:14:25:17:f3:db:32:48:43:61:d9:b4:06:04:71:82:c6:
66:9c:6c:3f:8a:9f:d0:3d:90:ca:9c:50:99:90:a9:a2:2c:5a:
49:0c:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:31 2026 by rpki-client