
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa
File: 305312F67CA011F098F1673CC4F9AE02.roa (raw, json)
Hash identifier: oSLf+ALvc0axyKMKORxabRkQ2yd+wi5i1pJe4n2LdQk=
Subject key identifier: C8:AE:8F:58:E7:62:EF:24:8D:5E:B4:D2:BA:E6:0A:A6:4B:50:0A:90
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0A64
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:47:33 +0000
ROA not before: Tue 19 Aug 2025 01:59:50 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 15380
IP address blocks: 103.26.33.0/24 maxlen: 24
103.26.34.0/24 maxlen: 24
103.26.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Aug 19 01:59:50 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45185-e5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:6e:b1:24:0d:63:29:c7:28:17:8a:fa:d4:
10:38:7a:69:07:f0:a7:91:a8:cd:13:0c:78:71:75:
26:c5:a6:34:da:74:9f:45:f8:05:2a:af:22:10:55:
1c:cf:4e:3c:e1:ea:50:52:ae:40:31:25:a4:39:2b:
d6:40:5d:e2:ad:8a:3b:e4:51:2a:1f:04:cc:69:a9:
40:40:5c:49:b0:47:ff:29:c5:f6:c4:3f:26:f6:be:
db:75:6f:a4:d3:6a:a4:e0:ec:df:c4:e9:19:4a:e1:
0b:63:a7:5b:44:1e:d3:f2:e5:50:de:cf:b4:48:f5:
26:89:39:f3:c0:67:00:f6:68:22:30:48:32:24:49:
4e:bb:b8:be:82:31:90:3c:0a:00:b1:d5:b9:3b:e3:
8e:bf:48:9f:8d:2e:29:b6:c4:81:1e:4f:8a:5d:cb:
1b:ec:f4:2e:2d:8e:f9:42:bb:ea:42:62:c2:a0:88:
c9:50:50:b8:a9:67:9e:63:6c:c4:e5:69:41:c7:03:
3e:59:76:8e:e9:7b:d9:19:3e:19:d3:ae:f4:55:ac:
a1:21:73:cf:b1:4b:00:f2:48:3e:92:1d:b3:c8:aa:
fd:29:da:87:c4:c3:d0:d3:6c:7d:51:d4:fa:e1:7c:
35:05:95:55:dc:be:c5:a9:f4:d0:60:06:cd:b8:8c:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:8F:58:E7:62:EF:24:8D:5E:B4:D2:BA:E6:0A:A6:4B:50:0A:90
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.33.0-103.26.35.255
Signature Algorithm: sha256WithRSAEncryption
73:d9:47:ad:86:69:dd:99:a4:f6:28:75:4d:14:4c:d3:08:38:
0e:4e:09:db:d3:16:a5:9e:6e:e1:29:93:60:65:47:16:82:cf:
5f:6a:96:55:07:e5:36:4b:7a:b0:97:47:e2:1f:59:03:f3:af:
9a:31:a8:a1:1d:a4:2a:e7:f8:70:fa:de:fc:36:e8:47:fa:a2:
d3:df:61:20:00:f6:91:86:d9:55:62:e8:7e:72:3e:61:d3:52:
91:e8:7d:ac:0b:d4:3f:f5:95:aa:b7:c2:b3:4c:67:c7:b9:9c:
19:68:6b:35:7c:ef:28:ff:bb:f3:ae:5a:ba:08:a3:3c:50:1d:
d0:13:2a:2b:ab:bd:8a:d8:ff:28:9f:7a:1e:5e:80:f9:74:b7:
ca:0a:c8:49:51:90:c3:ec:e1:74:24:85:a5:1f:d3:6b:a9:25:
7c:09:18:76:cd:b7:76:35:2a:51:2d:88:03:97:31:d3:b3:0a:
3e:bc:e4:63:ab:53:52:47:1c:4f:67:ef:b6:16:cf:ad:4c:c1:
45:1c:c0:2f:61:99:10:f4:f5:6e:81:4b:a4:cb:f1:c0:da:9b:
be:4a:d3:4e:80:30:67:3b:16:28:98:53:4a:27:42:88:94:bb:
84:eb:a7:2d:a3:16:55:38:19:82:3b:f7:ea:b7:7a:14:17:60:
9d:62:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:38 2026 by rpki-client