
$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/A047A07AD56811EFB57A5D33C4F9AE02.roa
File: A047A07AD56811EFB57A5D33C4F9AE02.roa (raw, json)
Hash identifier: lEva1qsHLGxJxjBIgGtQFKUdKFRPRCiOTXaXyoGN6Ms=
Subject key identifier: 03:DE:42:C2:88:8A:51:4F:4B:8C:25:D0:78:80:E1:D8:84:1A:AA:93
Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial: 03EF
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/A047A07AD56811EFB57A5D33C4F9AE02.roa
Signing time: Tue 05 May 2026 01:30:50 +0000
ROA not before: Tue 05 May 2026 01:30:50 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153494
IP address blocks: 45.115.240.0/22 maxlen: 24
103.56.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Validity
Not Before: May 5 01:30:50 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f9484a-9f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:b8:b4:ec:3b:50:ad:13:d7:0d:9e:e6:bc:
a7:94:b4:80:e3:5d:a2:45:b0:a9:d9:35:e0:7d:f2:
17:11:00:76:71:1b:fa:e5:a3:5b:30:21:aa:f7:11:
be:02:90:bf:b6:76:92:33:a8:97:f3:3e:3f:76:56:
50:0d:80:8d:35:5b:ab:be:31:51:14:0c:74:e8:76:
8c:6c:d4:07:6a:c6:c3:e2:4d:22:02:0f:53:c9:26:
ed:a0:b2:ab:58:36:0d:64:80:43:e6:64:02:dd:de:
19:b4:ee:ee:ed:e0:fe:dc:90:de:e8:93:30:fd:29:
c1:dc:70:da:50:f7:75:29:c9:79:12:75:f7:5d:dc:
29:82:23:42:c9:30:03:81:51:9d:ac:42:c2:c0:49:
44:6f:12:76:40:47:d9:70:2e:6e:01:39:60:1a:c6:
11:10:b2:58:4f:b6:87:c8:1a:84:5d:5e:32:4c:11:
0d:95:5c:8a:ad:b4:97:af:3f:6d:9f:1a:ec:60:65:
02:38:d8:7a:55:41:7b:79:06:a4:8e:68:34:76:fd:
00:cc:d3:16:ad:4b:df:1f:d2:77:08:d0:26:5d:ea:
92:db:7c:eb:0c:75:a3:0c:65:85:0c:d6:53:43:71:
64:77:35:5f:09:9b:10:ea:02:43:0a:62:4d:65:bc:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DE:42:C2:88:8A:51:4F:4B:8C:25:D0:78:80:E1:D8:84:1A:AA:93
X509v3 Authority Key Identifier:
keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/A047A07AD56811EFB57A5D33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.240.0/22
103.56.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:36:0e:71:54:21:a9:a6:4f:0e:66:7e:6f:74:ed:15:5e:f6:
70:f5:b5:af:57:fd:19:b7:6e:5c:8b:bb:8f:43:8e:da:e1:fa:
e2:be:30:5b:75:ac:b8:d8:36:bc:19:97:2d:fa:46:64:a3:76:
68:c8:99:a3:09:75:91:bf:bd:64:26:b7:22:80:91:63:f3:b0:
3c:90:93:f9:e4:04:6c:23:9c:f0:c6:3e:3e:c2:15:9b:55:c2:
82:cf:20:89:49:0f:0e:63:5d:08:9e:82:51:83:6f:98:40:d3:
22:d2:89:79:53:a1:01:7c:3a:f7:25:db:ce:a6:6e:84:a3:a0:
1b:81:76:27:6f:c9:0e:ad:96:7b:5c:a7:95:0b:4d:ab:29:47:
ae:79:6a:28:77:e3:4c:f0:d2:96:ec:1d:5f:84:ca:a8:74:05:
68:fc:ac:e3:b7:89:75:6a:61:4d:e0:6c:3b:29:0d:9f:e6:06:
92:85:b8:2d:4f:e4:90:3d:c9:a4:5d:84:47:2b:78:41:40:a2:
ab:eb:8c:a9:ae:14:3a:ab:92:51:26:93:39:9c:ac:7d:16:20:
99:3c:0b:8d:5e:3a:4d:5b:aa:8b:26:a4:d4:5f:33:b4:a6:e2:
95:5b:bf:f9:20:de:0c:ed:54:c3:54:b8:c3:1e:23:16:e2:bc:
66:08:d5:b7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB
RjI4ODYyRjYwHhcNMjYwNTA1MDEzMDUwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY5NDg0YS05ZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBa4tOw7UK0T1w2e5rynlLSA412iRbCp2TXgffIXEQB2cRv65aNbMCGq9xG+
ApC/tnaSM6iX8z4/dlZQDYCNNVurvjFRFAx06HaMbNQHasbD4k0iAg9TySbtoLKr
WDYNZIBD5mQC3d4ZtO7u7eD+3JDe6JMw/SnB3HDaUPd1Kcl5EnX3XdwpgiNCyTAD
gVGdrELCwElEbxJ2QEfZcC5uATlgGsYRELJYT7aHyBqEXV4yTBENlVyKrbSXrz9t
nxrsYGUCONh6VUF7eQakjmg0dv0AzNMWrUvfH9J3CNAmXeqS23zrDHWjDGWFDNZT
Q3FkdzVfCZsQ6gJDCmJNZbwzewIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAPeQsKI
ilFPS4wl0HiA4diEGqqTMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2
MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzAyQjkvM0I3MkVFOTBDNjA1MTFFQ0FCNzREOTYyQzRGOUFFMDIvQTA0N0EwN0FE
NTY4MTFFRkI1N0E1RDMzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXPwAwQCZzgYMA0GCSqGSIb3DQEBCwUAA4IBAQCcNg5xVCGppk8O
Zn5vdO0VXvZw9bWvV/0Zt25ci7uPQ47a4frivjBbday42Da8GZct+kZko3ZoyJmj
CXWRv71kJrcigJFj87A8kJP55ARsI5zwxj4+whWbVcKCzyCJSQ8OY10InoJRg2+Y
QNMi0ol5U6EBfDr3JdvOpm6Eo6AbgXYnb8kOrZZ7XKeVC02rKUeueWood+NM8NKW
7B1fhMqodAVo/Kzjt4l1amFN4Gw7KQ2f5gaShbgtT+SQPcmkXYRHK3hBQKKr64yp
rhQ6q5JRJpM5nKx9FiCZPAuNXjpNW6qLJqTUXzO0puKVW7/5IN4M7VTDVLjDHiMW
4rxmCNW3
-----END CERTIFICATE-----
Generated at Wed May 13 05:06:40 2026 by rpki-client