
$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa
File: EE44E774314411EF956C0046C4F9AE02.roa (raw, json)
Hash identifier: jhzn7pm2Oogh8gj6C2Cv0eiikNgVIXN0z6pwnFp/58g=
Subject key identifier: 9C:E9:6E:DF:C1:EB:FE:08:2C:DA:1E:DD:D2:3D:39:BA:7E:16:ED:4C
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 021A
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa
Signing time: Thu 25 Jun 2026 04:34:07 +0000
ROA not before: Thu 25 Jun 2026 04:34:07 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 61414
IP address blocks: 103.93.76.0/22 maxlen: 22
103.93.76.0/24 maxlen: 24
103.93.77.0/24 maxlen: 24
103.93.78.0/24 maxlen: 24
103.93.79.0/24 maxlen: 24
103.225.68.0/23 maxlen: 23
123.253.108.0/22 maxlen: 22
123.253.108.0/24 maxlen: 24
123.253.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Validity
Not Before: Jun 25 04:34:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3cafbf-40de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:6a:a6:1c:86:69:dc:cb:c5:72:bf:ef:62:
71:d1:48:c6:91:4c:ec:ce:62:0a:95:c9:52:98:0a:
e8:b2:2c:bc:1f:69:0c:bf:05:dd:aa:ac:38:cc:25:
42:fc:e9:ed:eb:f1:96:9a:d4:10:9b:f1:ca:75:5c:
b9:b2:c4:a1:c3:cb:61:ff:55:86:52:78:07:6b:0b:
88:c5:ca:bf:4b:c4:2e:f6:bb:41:f1:7d:9d:fd:78:
a7:aa:5f:e5:5d:4f:40:9f:13:a5:fc:04:00:13:27:
22:d5:e0:16:00:13:1f:21:0c:3a:d3:fc:a7:87:96:
58:18:f5:dd:6e:5d:b1:3c:7d:01:ec:c4:62:13:17:
0c:2e:47:1d:fd:18:2a:b6:c6:65:2f:ec:67:39:26:
85:f7:03:ee:10:a1:0f:12:81:0c:b4:b5:34:8b:7d:
51:df:14:0d:fc:42:96:55:54:7e:cb:ba:20:ea:f0:
6b:45:51:9a:fa:29:26:f8:06:95:82:0e:54:2e:91:
1e:b3:72:ee:21:c4:a7:1c:b4:53:a0:8b:bc:04:6a:
30:72:3b:d4:48:83:2d:a7:b6:cd:47:d4:e1:fe:42:
1a:f6:c4:26:0c:e7:8d:ca:d9:58:ee:ea:87:27:fe:
9f:fc:dc:31:cf:f7:0a:4d:a0:7b:49:45:d6:97:9c:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:6E:DF:C1:EB:FE:08:2C:DA:1E:DD:D2:3D:39:BA:7E:16:ED:4C
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.93.76.0/22
103.225.68.0/23
123.253.108.0/22
Signature Algorithm: sha256WithRSAEncryption
28:82:f9:3e:bd:6a:06:e8:0e:d2:23:0e:e5:08:db:f5:6c:7a:
64:ec:45:00:a8:e5:8d:10:fb:1e:f4:16:35:cb:75:25:eb:6c:
db:7a:e9:5a:5e:f7:10:77:6a:fe:ee:8f:da:81:5d:54:94:2a:
6e:16:72:25:c0:39:40:1c:53:01:18:77:78:a1:86:a8:03:8d:
5d:46:6b:47:3b:4e:6e:f9:e0:7f:e2:fc:d2:b2:05:53:21:44:
92:d9:5e:dd:07:34:87:e0:08:12:e5:63:a3:6f:ec:20:b6:46:
82:0e:df:cf:bc:d5:ea:2c:82:7d:87:45:46:71:5c:56:7b:29:
01:ee:e4:dd:1e:58:bb:e8:a6:5c:68:87:5b:9e:38:d1:d6:0b:
f8:7d:90:6f:db:4a:6a:f5:a6:39:bb:57:10:b2:fd:13:da:bd:
27:ca:ed:2d:a5:e3:6d:ae:f0:cf:0b:c6:0a:f8:89:08:8a:87:
6b:c7:55:f3:ad:23:55:9b:90:ec:36:58:79:25:f2:64:d5:2a:
6b:b9:65:35:ff:e2:e7:dd:62:70:6a:de:a1:54:1a:e8:91:6a:
97:ef:48:0c:d8:22:62:0f:77:c1:a2:5a:0a:d3:8d:4d:79:ad:
4b:73:60:5b:9b:d3:54:85:14:b6:42:aa:d5:65:20:f0:ca:ea:
7c:74:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:45 2026 by rpki-client