
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/426DB414718E11EA9F6FA85CC4F9AE02.roa
File: 426DB414718E11EA9F6FA85CC4F9AE02.roa (raw, json)
Hash identifier: uc2qcNB8l7xT1ZuFXX3eceO3rKMlz70tmK0IYsPapEk=
Subject key identifier: FD:DC:D5:EC:DE:EB:DC:17:BE:BC:7B:09:AE:29:7B:AC:16:D6:6E:EE
Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
Certificate serial: 0AD1
Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/426DB414718E11EA9F6FA85CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:36:49 +0000
ROA not before: Wed 14 Jan 2026 19:16:07 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140073
IP address blocks: 103.147.168.0/24 maxlen: 24
103.147.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl
rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769 (0xad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
Validity
Not Before: Jan 14 19:16:07 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a513e1-f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:48:13:4c:bd:2f:38:82:f2:fb:cb:25:23:
dd:32:e7:18:cd:af:f8:8c:27:99:c3:31:50:6e:aa:
0d:e2:7c:c2:ec:d7:13:5c:d5:89:aa:a3:b1:72:60:
f9:33:f7:49:34:da:d7:4e:b7:c2:19:a8:ac:af:96:
64:9c:d5:44:8b:ce:5f:d1:ee:54:af:1b:b8:aa:8c:
aa:8a:7a:58:70:7b:1d:c6:e7:77:18:24:78:0d:4f:
75:c3:aa:0c:7d:22:7c:66:10:97:05:99:0f:b5:3b:
f6:ea:68:cf:94:62:fe:d1:e2:27:57:88:02:cb:5c:
b0:e0:f5:3d:0a:b5:69:1b:7c:f0:6a:81:06:00:3b:
56:e4:c9:11:42:1a:70:8f:cc:06:fd:f7:12:52:7c:
90:ec:19:fb:d2:90:fb:90:ff:4d:db:03:f5:1a:7c:
b7:f3:ff:b9:ca:93:57:d3:08:a8:cb:0e:22:a2:f6:
2e:a7:1c:03:d9:54:2b:9f:6e:ab:d1:37:0d:74:9d:
6d:a0:7b:71:b1:09:0b:99:3e:1c:e5:55:66:15:a5:
67:83:9e:a4:5d:87:f8:90:7c:00:10:9a:62:ff:07:
97:f5:03:62:ed:91:e3:e3:1d:f0:98:fd:be:3d:32:
f9:7d:d6:5c:2d:27:2b:06:2d:0a:f5:b2:90:df:a8:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DC:D5:EC:DE:EB:DC:17:BE:BC:7B:09:AE:29:7B:AC:16:D6:6E:EE
X509v3 Authority Key Identifier:
keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/426DB414718E11EA9F6FA85CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.168.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:55:dc:48:7f:be:7e:76:58:da:93:3a:4f:b8:bc:76:ad:0c:
af:17:af:45:e2:05:47:f8:34:96:b6:9d:2e:32:02:61:b7:9a:
a0:18:59:88:05:8b:73:13:38:5c:14:6e:81:2f:c7:29:84:a3:
1f:75:13:5f:c6:32:5a:4a:51:e9:6b:bf:80:6b:79:22:6a:31:
7f:87:79:18:cb:12:67:f4:e6:9b:44:09:4e:ee:bf:c5:c8:10:
03:b8:97:21:d1:a2:13:b8:59:95:b7:ef:c4:00:97:a5:ea:8b:
c6:f2:a2:ec:72:3c:51:00:cc:d4:5c:d9:87:43:eb:9b:91:ef:
76:f4:5b:b2:97:00:60:c7:df:22:a5:9f:d5:55:b2:87:39:dc:
e0:a7:d4:fa:1a:60:b9:db:26:50:27:b1:9e:ad:e3:4c:af:5f:
3b:e0:26:16:46:8c:e9:56:36:18:97:cf:03:25:1f:c0:6b:fd:
19:f0:cc:f2:12:71:4e:bc:a8:34:6a:8e:69:b2:01:57:47:84:
b8:19:d5:25:99:5f:49:40:86:90:23:57:36:ff:94:16:48:b0:
34:6e:d1:07:3f:c6:89:a4:c3:9d:d0:68:9c:a4:f5:6f:93:f6:
2b:13:99:bc:f6:a2:0f:44:aa:07:7d:b3:b6:b5:9b:40:7a:3f:
bb:d6:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:35 2026 by rpki-client