
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
File: 4821776AD9A211F092913C6268D3641D.roa (raw, json)
Hash identifier: LOgkEDPU6qR9vCf6pUezUGPbjzvlJI1psdU+DoBEifc=
Subject key identifier: 92:0D:60:F0:04:93:CA:62:80:2A:32:2A:92:C2:AC:23:2E:F9:6A:8C
Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial: 3583
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
Signing time: Sat 04 Jul 2026 15:12:52 +0000
ROA not before: Sat 04 Jul 2026 15:12:52 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 64050
IP address blocks: 103.1.41.0/24 maxlen: 24
121.127.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Validity
Not Before: Jul 4 15:12:52 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4922f4-ac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:5f:02:61:d8:01:bd:54:1b:0c:d9:07:92:
0f:79:31:61:f3:57:97:f5:c6:6e:c4:2d:92:15:a6:
10:16:a3:b7:8c:e2:49:d7:7b:ae:93:ff:26:18:d8:
f0:3a:89:24:d4:fd:a3:84:09:8b:b6:78:76:30:80:
a7:c1:79:ca:3e:b2:09:6b:02:50:1c:0a:82:12:98:
be:71:ba:50:c4:d2:99:f0:05:23:d8:a5:62:00:83:
07:a9:ce:9b:38:35:6a:ba:11:8f:d3:b5:21:fa:88:
6c:b3:39:dd:e4:c2:39:57:3c:c5:3f:96:92:29:cf:
d0:dc:b5:86:e4:24:97:94:ce:7f:ab:12:01:28:2d:
83:5a:1a:de:ad:e9:9b:e2:88:50:ff:76:bf:01:f5:
2c:a8:fa:61:5c:f7:8e:30:49:8d:45:2a:02:74:7f:
67:5e:52:5e:7c:42:ef:02:01:af:f7:cb:71:ef:8a:
c4:73:04:d5:80:01:ac:5b:47:27:a0:e3:ed:a3:d7:
86:9e:c7:39:22:ee:3a:f5:ae:01:63:f7:46:98:8c:
df:d2:41:d8:87:0c:ff:b1:62:f7:eb:e8:29:5a:6d:
b1:8d:19:a1:b1:d8:68:14:74:a3:cb:b1:d3:29:fe:
56:08:ea:42:3b:6c:33:d6:01:28:6a:b1:40:3e:4d:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:60:F0:04:93:CA:62:80:2A:32:2A:92:C2:AC:23:2E:F9:6A:8C
X509v3 Authority Key Identifier:
keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.41.0/24
121.127.225.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c6:a6:88:20:a2:95:62:6a:04:4c:6e:28:da:c7:d5:c3:8a:
28:9c:52:b7:75:7c:6e:97:c8:b1:a2:f3:ef:68:fd:2b:02:5c:
e7:58:90:33:43:c1:f6:87:1f:d5:29:f9:21:84:2f:da:54:82:
98:fc:e4:3e:a5:ed:6b:90:f1:96:a6:18:b8:5b:3e:80:f2:09:
ac:72:2b:7d:1d:b8:7a:6f:8c:2b:cd:23:4b:87:e5:a7:db:b1:
68:52:e5:69:fd:cb:d6:9e:c8:b0:2d:62:f5:f7:7b:bb:b6:4b:
8b:01:c8:e6:25:6f:40:02:8e:36:17:4a:71:58:1f:1f:48:63:
20:e5:10:91:15:21:a1:9d:c0:e2:3e:06:d7:6c:3c:4c:c2:a0:
53:8d:c7:ea:25:e0:97:5e:c6:9e:5f:bc:89:50:78:a3:7d:49:
1a:62:17:03:96:57:d5:b8:15:92:c0:1a:63:02:c7:f1:25:ae:
83:4a:e1:37:b4:cf:d7:91:25:aa:fd:83:5c:48:f8:b1:a0:97:
bd:5c:04:70:c1:0a:a1:d0:96:d2:ef:4a:dd:f7:07:f2:60:68:
6b:1b:33:dd:b4:5d:74:75:c1:d3:45:94:ad:93:06:7e:2d:39:
fb:cf:d8:f4:3c:98:eb:7c:48:70:a1:0b:57:8b:52:35:8f:0f:
55:df:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:34 2026 by rpki-client