
$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/F71189FC0C3211EF98143258C4F9AE02.roa
File: F71189FC0C3211EF98143258C4F9AE02.roa (raw, json)
Hash identifier: jBwHsT2S1X/NsQ8ZVOoh15AYRCQCmxO3Q5CcJen4IUs=
Subject key identifier: DC:49:CE:51:7A:30:1D:07:C4:BF:0F:BD:B2:E1:3D:9D:16:BF:7F:54
Certificate issuer: /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial: 01A3
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/F71189FC0C3211EF98143258C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:39:19 +0000
ROA not before: Fri 21 Nov 2025 03:20:51 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55649
IP address blocks: 103.215.40.0/22 maxlen: 24
144.48.216.0/22 maxlen: 24
223.255.240.0/22 maxlen: 24
2001:df0:a300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Validity
Not Before: Nov 21 03:20:51 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a59307-c8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:c5:fc:33:4f:d9:0e:8a:57:26:f1:0b:4b:
dc:74:e6:4f:97:40:bc:96:cf:b3:f6:b4:59:f0:1e:
e2:c9:6b:f0:1c:b4:dc:7a:fc:45:82:5f:a0:39:ac:
1e:23:32:a4:5c:20:b8:ea:a0:8a:b6:4d:87:4d:24:
8b:0c:77:8b:cb:75:3b:39:e0:af:a4:c2:5f:1b:c0:
bd:5d:c4:b5:bf:1d:cb:ab:95:38:70:78:75:df:2a:
d1:ac:78:95:34:cf:32:14:ca:9d:4c:db:24:12:9f:
76:af:12:34:91:3b:14:7d:24:db:65:13:03:ff:b2:
13:5e:98:fb:c3:11:c7:10:12:fe:b8:58:60:49:51:
0d:1f:fd:28:c2:31:a7:5a:27:ec:c7:e5:99:3a:b4:
99:fc:bf:5d:d3:fb:e7:0e:f7:a5:ee:3b:99:8a:af:
b3:58:82:c1:32:2c:25:51:3f:8e:17:ef:fc:5e:d7:
d5:f0:b6:81:3b:61:ee:57:68:ec:2c:02:28:2d:07:
0d:3c:e2:56:8a:d0:e0:55:6b:89:d7:7c:41:20:0f:
33:95:73:3a:20:43:a2:26:e9:f4:4d:4b:cb:7c:e6:
76:17:fe:1f:8b:89:ea:54:d9:91:84:73:70:fd:92:
8e:f8:ac:02:d1:9a:34:f1:59:3a:10:94:b8:e8:a6:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:CE:51:7A:30:1D:07:C4:BF:0F:BD:B2:E1:3D:9D:16:BF:7F:54
X509v3 Authority Key Identifier:
keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/F71189FC0C3211EF98143258C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.40.0/22
144.48.216.0/22
223.255.240.0/22
IPv6:
2001:df0:a300::/48
Signature Algorithm: sha256WithRSAEncryption
a1:78:e3:d3:9a:fb:68:48:b8:6d:26:f0:62:73:3a:cc:dc:f6:
78:85:b5:59:59:f8:18:12:d9:dc:75:36:d4:25:c6:33:e3:22:
a1:7c:30:4a:ec:73:3c:01:6a:9f:dc:d6:b5:23:03:54:3a:8c:
3c:81:99:49:c3:dd:c6:21:97:cc:31:f4:c2:ee:8a:5b:e7:a5:
e4:b3:89:9c:dc:e6:02:5a:08:47:5b:f8:5d:83:bc:0a:d5:80:
c9:ab:ea:7a:0b:36:4a:82:46:1f:2d:d6:86:05:aa:ff:7b:a2:
28:27:65:8e:b3:aa:ad:04:e8:89:22:9b:8c:5b:4e:f4:4e:9e:
d1:fa:55:70:fb:ff:96:14:d4:b8:ea:4a:a3:17:3c:41:0a:8a:
a9:39:27:7f:3a:51:e4:ca:cf:7a:99:10:c1:b0:7a:cc:08:d8:
28:bc:f9:be:59:6c:fc:c4:05:88:00:83:39:c3:b6:9d:ff:ea:
01:51:2b:37:ba:1e:44:31:29:b3:15:61:cd:aa:fb:33:3f:ff:
9c:35:e1:a7:53:a4:2b:87:14:c6:48:cb:3a:3e:1b:cd:3f:9f:
32:cf:ef:bb:78:2c:c6:4f:4e:3b:17:eb:69:7c:88:57:07:7c:
6f:23:cf:43:35:80:7d:7d:99:a9:80:f0:6b:42:b7:ff:13:78:
5f:24:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:16:16 2026 by rpki-client