
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F894F5B0E09411F0B3B2B389426F56BC.roa
File: F894F5B0E09411F0B3B2B389426F56BC.roa (raw, json)
Hash identifier: eIqw5FSoMcNJIJtxxYXZdVSI3tsH8xExWy7FIlXkyb0=
Subject key identifier: 26:89:97:94:A4:0D:3A:0D:7C:1B:DE:F7:02:C7:29:20:36:27:40:C1
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D6E
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F894F5B0E09411F0B3B2B389426F56BC.roa
Signing time: Thu 07 May 2026 03:30:28 +0000
ROA not before: Thu 07 May 2026 03:30:28 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 2914
IP address blocks: 43.231.190.0/24 maxlen: 24
43.231.191.0/24 maxlen: 24
43.246.131.0/24 maxlen: 24
43.246.199.0/24 maxlen: 24
103.7.208.0/24 maxlen: 24
103.7.211.0/24 maxlen: 24
103.12.52.0/24 maxlen: 24
103.27.80.0/24 maxlen: 24
103.27.81.0/24 maxlen: 24
103.27.82.0/24 maxlen: 24
103.27.83.0/24 maxlen: 24
103.197.208.0/24 maxlen: 24
103.197.209.0/24 maxlen: 24
103.197.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3438 (0xd6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: May 7 03:30:28 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69fc0754-4d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:16:f2:da:85:a3:ef:ea:6f:5e:ee:2b:3f:
2c:99:ea:e5:99:12:a5:8c:cc:d6:7e:76:ff:c7:ed:
58:71:3e:16:ee:5a:5b:0b:35:31:21:8b:90:1d:b5:
9b:20:d6:7e:35:10:e8:a6:f2:e4:f0:7b:5a:76:5f:
91:76:21:09:7d:21:c0:5f:c9:a3:15:42:2b:68:96:
fc:51:85:33:c6:86:65:83:ac:08:c0:8d:7d:da:6e:
8f:72:6c:92:86:cb:b7:82:6a:5a:1b:c2:70:4a:26:
fa:22:75:2b:cf:17:c0:69:7c:f0:61:df:27:36:ea:
f2:2b:01:42:23:d1:bc:6e:c2:75:58:a7:fe:ad:d2:
71:87:99:e5:0a:68:42:28:84:27:8b:12:2a:2c:aa:
29:02:6d:ad:9b:9d:d9:e8:ce:d1:59:83:b8:02:bb:
48:18:aa:a1:00:7f:df:2c:74:f5:8b:f0:c9:06:45:
75:44:84:e9:00:7c:bb:05:63:69:a8:c8:0a:a6:f6:
06:6c:a6:68:58:33:19:b7:0a:ac:ea:32:9f:fb:f8:
8a:3d:04:17:d5:c2:6e:c8:16:66:2b:7f:13:78:e8:
51:be:b9:09:91:d4:f0:c5:ef:f0:1f:67:7a:73:1f:
3c:46:d5:cf:1a:1e:7e:ae:a1:00:94:ce:55:f1:37:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:97:94:A4:0D:3A:0D:7C:1B:DE:F7:02:C7:29:20:36:27:40:C1
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F894F5B0E09411F0B3B2B389426F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.231.190.0/23
43.246.131.0/24
43.246.199.0/24
103.7.208.0/24
103.7.211.0/24
103.12.52.0/24
103.27.80.0/22
103.197.208.0/22
Signature Algorithm: sha256WithRSAEncryption
99:35:a8:c5:7c:a0:af:05:d5:bd:b4:27:99:d8:3c:17:91:37:
85:72:41:e7:a8:24:fa:da:b4:4a:35:20:e8:ae:eb:0e:d3:ab:
0a:8d:b1:c4:e1:d9:55:a5:96:05:21:9c:ae:fb:71:7f:b3:93:
36:0f:2f:29:99:6d:47:e4:a6:8e:a9:5a:03:29:d2:97:6b:16:
a6:3c:84:cb:64:81:45:24:27:b1:3a:09:43:8e:c0:bb:8c:7a:
63:53:57:5e:34:4c:a1:e8:4a:0f:ac:e2:b9:43:4e:9c:40:c0:
ef:a3:b7:4a:30:f5:d3:b4:6f:8d:bd:29:98:11:f7:8c:a7:2f:
7f:e6:ad:b0:74:77:09:81:a5:27:1c:4d:c2:f0:0c:35:0b:ce:
f7:7c:bd:93:99:19:11:c8:2d:ce:bf:2e:b3:b1:73:37:17:3a:
3f:a8:9c:ca:53:44:2f:44:6e:7d:ae:16:e7:18:2a:8b:e2:23:
29:f4:d1:c0:4d:76:5c:14:fb:d5:11:96:8c:75:a0:32:e8:eb:
2d:f7:16:e3:c6:53:58:ec:7b:98:ca:a6:8b:6e:98:36:56:64:
f6:bd:14:c5:11:f7:44:52:41:ba:1f:68:19:f5:ba:df:ce:e8:
34:9b:bc:3e:a2:b4:da:5e:1f:87:4e:84:6c:9d:73:89:11:bc:
4e:bd:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:45 2026 by rpki-client