
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E58488D0BB7A11F09DC5801DC4F9AE02.roa
File: E58488D0BB7A11F09DC5801DC4F9AE02.roa (raw, json)
Hash identifier: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=
Subject key identifier: 9C:C1:CC:CE:39:FA:F7:D6:33:07:53:C5:2D:0A:D8:05:61:FF:82:F2
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D2D
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E58488D0BB7A11F09DC5801DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 19:23:40 +0000
ROA not before: Mon 02 Mar 2026 19:23:40 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 2519
IP address blocks: 103.240.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3373 (0xd2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Mar 2 19:23:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a5e3bc-44e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:d6:12:aa:5e:dc:f8:4a:a2:20:43:76:cc:
b1:07:9d:d8:3c:89:9d:0d:0a:a8:dc:1d:a6:d4:46:
6b:ad:e3:ef:bf:e9:dd:de:72:df:b3:15:47:83:6f:
74:5f:6c:f4:38:91:74:c4:a1:ab:2c:d1:75:01:da:
6b:de:17:e1:3b:79:54:95:19:fa:b2:9d:c7:e7:e9:
f2:87:95:15:cb:8a:2f:06:2b:c7:e3:6b:4f:f4:c6:
34:ac:a6:4a:45:7d:af:58:8b:d5:76:fe:f0:29:a5:
d8:33:94:26:43:e2:8c:4c:61:24:12:4c:1f:ec:65:
cb:df:9c:48:5d:a9:9e:dd:3b:2e:92:98:ac:f1:c3:
53:3a:fe:7f:f8:4b:00:86:6b:e4:5f:f7:0f:6b:b3:
87:f0:ee:c1:75:8b:fe:27:b0:2b:52:a1:13:28:92:
17:0e:f3:79:ff:cc:9d:1d:07:fc:e4:13:ed:66:75:
0b:fe:0d:95:0d:75:b4:6e:56:9e:3e:a2:ca:b4:21:
08:48:da:b5:61:a4:9d:e5:45:c8:4f:cb:5f:22:5e:
a3:72:1f:7f:a6:c5:7f:b1:c7:93:8c:ee:9f:48:38:
bb:b2:31:51:a3:6d:00:5c:11:46:01:a6:91:59:52:
b2:b1:fa:b6:69:67:7c:4e:5e:d8:18:41:60:55:d0:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C1:CC:CE:39:FA:F7:D6:33:07:53:C5:2D:0A:D8:05:61:FF:82:F2
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E58488D0BB7A11F09DC5801DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.240.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:57:3b:36:a8:d0:26:fc:23:06:c5:8c:a5:d5:ce:9c:a9:8b:
bd:79:d5:55:b1:97:48:71:e4:c4:6f:49:ea:8a:34:00:4d:4e:
75:81:d9:33:c1:d4:0a:75:55:2d:f3:3b:88:33:b4:7a:d4:a3:
30:e8:a4:0d:d3:b0:54:9d:fb:b8:cc:f3:79:16:f3:35:8d:6c:
a3:43:1a:ca:71:14:44:3f:98:de:98:e4:6b:7f:c1:72:ac:76:
f4:d8:a8:eb:1d:b9:fb:a2:39:3d:2a:3c:8b:9b:ed:b0:7a:6a:
af:ba:9b:69:a4:51:9f:43:1e:6a:49:ab:21:71:75:e9:84:b5:
df:a0:50:64:b3:93:aa:5c:86:8a:cd:68:90:47:84:ad:61:9c:
5b:84:97:8f:c3:b1:d6:84:75:2b:b7:95:df:6d:31:fb:cb:f2:
dd:e0:06:36:9f:32:eb:fe:e1:bf:00:75:90:bf:d9:a9:18:5e:
08:32:8b:d6:ce:9e:5d:08:c9:5f:81:8a:29:1a:dd:3b:65:5e:
5d:29:55:c4:b5:4a:88:c5:2b:1a:2c:8b:5b:97:20:23:06:33:
05:49:1d:66:1a:c7:de:b0:28:42:5f:eb:0d:9c:bd:bd:f3:25:
6a:82:a6:c9:d0:88:a0:52:10:b4:88:0c:b2:dd:b8:14:a3:6f:
3e:84:d4:68
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG
NjlDQkE4NDYwHhcNMjYwMzAyMTkyMzQwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ZTNiYy00NGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwjWEqpe3PhKoiBDdsyxB53YPImdDQqo3B2m1EZrrePvv+nd3nLfsxVHg290
X2z0OJF0xKGrLNF1Adpr3hfhO3lUlRn6sp3H5+nyh5UVy4ovBivH42tP9MY0rKZK
RX2vWIvVdv7wKaXYM5QmQ+KMTGEkEkwf7GXL35xIXame3Tsukpis8cNTOv5/+EsA
hmvkX/cPa7OH8O7BdYv+J7ArUqETKJIXDvN5/8ydHQf85BPtZnUL/g2VDXW0blae
PqLKtCEISNq1YaSd5UXIT8tfIl6jch9/psV/sceTjO6fSDi7sjFRo20AXBFGAaaR
WVKysfq2aWd8Tl7YGEFgVdD3EQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJzBzM45
+vfWMwdTxS0K2AVh/4LyMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE
OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvRTU4NDg4RDBC
QjdBMTFGMDlEQzU4MDFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ/AUMA0GCSqGSIb3DQEBCwUAA4IBAQAbVzs2qNAm/CMGxYyl1c6c
qYu9edVVsZdIceTEb0nqijQATU51gdkzwdQKdVUt8zuIM7R61KMw6KQN07BUnfu4
zPN5FvM1jWyjQxrKcRREP5jemORrf8FyrHb02KjrHbn7ojk9KjyLm+2wemqvuptp
pFGfQx5qSashcXXphLXfoFBks5OqXIaKzWiQR4StYZxbhJePw7HWhHUrt5XfbTH7
y/Ld4AY2nzLr/uG/AHWQv9mpGF4IMovWzp5dCMlfgYopGt07ZV5dKVXEtUqIxSsa
LItblyAjBjMFSR1mGsfesChCX+sNnL298yVqgqbJ0IigUhC0iAyy3bgUo28+hNRo
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:51 2026 by rpki-client