
$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/4D0C006C76C611F194A7C5D875A30FBC.roa
File: 4D0C006C76C611F194A7C5D875A30FBC.roa (raw, json)
Hash identifier: aw+wjqTvXBV1XIeL4o+TSL3pjvhQFfAu+VBJTX/VGdg=
Subject key identifier: BC:CB:0E:8C:44:A8:30:3B:99:06:A7:44:E8:C8:F7:77:F6:5C:3E:9B
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 066E
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/4D0C006C76C611F194A7C5D875A30FBC.roa
Signing time: Fri 10 Jul 2026 23:24:35 +0000
ROA not before: Fri 10 Jul 2026 23:24:35 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45353
IP address blocks: 103.69.124.0/22 maxlen: 22
103.69.124.0/23 maxlen: 24
103.69.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646 (0x66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Jul 10 23:24:35 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a517f33-1d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:8d:be:d2:af:67:13:9a:fa:22:f8:58:d9:
fd:8c:a1:4c:47:fe:2d:86:9e:ae:86:e2:56:a7:58:
94:3d:7c:c2:60:55:de:27:82:53:9a:d4:bb:f8:58:
42:27:c1:db:49:62:88:cb:a8:45:4b:b1:a9:96:54:
2d:ac:7b:da:fd:d0:0d:aa:54:72:66:85:4a:91:ef:
79:22:6c:e0:f6:f8:31:25:06:91:85:7e:be:09:e7:
2e:87:fd:d8:8f:21:67:94:a2:aa:98:28:0b:b1:2d:
a6:c2:e5:05:4a:b2:71:15:78:3d:7f:04:7c:78:66:
d1:d1:34:f5:eb:c3:9e:ad:e4:7f:6b:9e:60:0d:ad:
ce:f2:89:9b:b1:d9:eb:70:e6:e7:2a:6d:ad:bd:9b:
c2:74:e7:70:b4:8b:3c:c0:06:55:1e:dc:cc:b0:e5:
9c:0e:d4:de:3d:bb:bf:8b:64:77:16:8d:88:9e:34:
44:46:f8:16:4d:81:84:53:db:4a:04:95:29:98:89:
20:ce:8d:b4:30:0f:6f:c6:35:92:eb:f4:8a:3a:2e:
4f:89:28:51:4c:0a:e3:e3:20:7c:d7:8d:17:55:78:
8d:f7:74:81:2f:1d:9c:61:7d:51:21:ae:fe:e0:f3:
00:22:fa:38:b6:87:8f:5d:53:a6:a4:47:6e:d3:da:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CB:0E:8C:44:A8:30:3B:99:06:A7:44:E8:C8:F7:77:F6:5C:3E:9B
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/4D0C006C76C611F194A7C5D875A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:e3:5d:dc:1f:3a:3d:6e:69:71:f4:01:eb:05:2b:c2:b9:10:
e0:ab:8e:31:39:57:44:6c:7d:49:6d:2e:e6:72:70:37:d4:40:
34:a3:9a:35:1c:58:a2:9e:b6:47:2d:5a:df:53:c9:30:ed:af:
b4:de:db:70:55:68:5d:38:e9:98:f6:cc:39:04:ed:22:76:30:
36:11:86:49:ad:a1:f5:8b:46:ac:b1:cf:00:b2:07:84:47:4a:
d6:ba:2a:24:91:78:d0:2f:48:fa:0e:ac:03:0e:79:a1:33:12:
74:84:57:e3:91:6f:fb:9e:7e:2b:fc:89:2b:b0:e2:49:e8:54:
47:b3:75:01:e5:d6:bb:48:30:a6:e8:03:fc:e1:26:51:0b:58:
8a:79:33:d9:90:ab:af:73:63:d3:f1:8e:38:2b:4f:ab:f0:a8:
81:71:3b:d8:8e:b1:2e:1d:5d:b5:aa:16:18:58:8c:b5:e1:1f:
7e:5b:52:f9:42:0f:58:a4:d2:b0:c8:1c:dd:24:be:de:a1:c3:
e1:3c:0c:a8:c6:ae:cb:c6:1a:b9:a0:03:3d:38:74:df:8b:9c:
e3:b8:db:cf:f8:a1:e7:75:3d:f7:30:59:44:87:a1:61:26:f8:
7f:3d:90:f4:d4:06:34:f5:af:94:1b:be:6d:fa:6f:d8:ef:62:
ba:f3:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:41 2026 by rpki-client