
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/F4246CDA561811E98A165872C4F9AE02.roa
File: F4246CDA561811E98A165872C4F9AE02.roa (raw, json)
Hash identifier: 2dvRnm4pfzjCtWstN3B5/ymv7Hda5U6DYqNjAuMZVLY=
Subject key identifier: 01:62:0E:F2:E8:41:F3:DF:13:E5:F1:AC:C3:62:75:60:61:B6:DE:FA
Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial: 29C4
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/F4246CDA561811E98A165872C4F9AE02.roa
Signing time: Fri 24 Apr 2026 16:18:59 +0000
ROA not before: Fri 24 Apr 2026 16:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10075
IP address blocks: 103.7.248.0/22 maxlen: 22
103.7.248.0/24 maxlen: 24
103.7.249.0/24 maxlen: 24
103.7.250.0/24 maxlen: 24
103.7.251.0/24 maxlen: 24
103.229.82.0/23 maxlen: 23
103.229.82.0/24 maxlen: 24
103.229.83.0/24 maxlen: 24
163.47.156.0/22 maxlen: 22
163.47.156.0/23 maxlen: 23
163.47.156.0/24 maxlen: 24
163.47.157.0/24 maxlen: 24
163.47.158.0/24 maxlen: 24
163.47.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10692 (0x29c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Validity
Not Before: Apr 24 16:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69eb97f3-d48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:f5:3c:24:58:9d:64:8b:cc:84:e8:2d:95:
bf:1d:48:18:7a:af:9a:bb:bc:c8:ab:88:f0:96:73:
d3:43:60:1f:2a:e7:5b:62:97:a0:66:53:a2:3a:59:
3a:a1:29:ee:86:7a:6e:a0:96:22:44:b8:bb:f5:e4:
f5:b6:2b:53:d3:bd:71:c9:86:ba:9b:69:a3:a0:a3:
54:f3:47:5d:0b:58:64:a2:34:45:57:5d:92:a5:25:
f7:0f:30:d4:82:85:de:fb:42:7e:14:85:0b:bc:a1:
c5:51:29:3a:57:a1:e4:7b:3d:76:a5:9d:33:69:9e:
b2:93:77:0a:2d:71:db:e1:3f:b9:48:71:76:c2:48:
1a:c0:dd:d6:9a:12:21:ef:4a:be:b8:f3:f1:f5:db:
58:11:f9:03:99:b9:c2:0e:ac:f4:6a:94:8c:46:9b:
51:43:97:64:5e:40:0f:6a:ce:f0:b3:22:60:eb:9e:
05:6c:ee:7d:d9:42:00:92:53:59:5c:d9:3e:81:ab:
20:b4:8c:4e:60:6f:ae:10:4c:f0:98:80:29:39:2c:
d1:c2:4d:fc:97:f9:8d:77:23:cb:04:97:be:b4:87:
f7:5b:e0:49:02:4c:23:c8:85:4e:f0:7a:5c:55:3c:
39:b9:f8:60:a2:c0:0d:51:eb:ad:ae:40:b6:99:66:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:0E:F2:E8:41:F3:DF:13:E5:F1:AC:C3:62:75:60:61:B6:DE:FA
X509v3 Authority Key Identifier:
keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/F4246CDA561811E98A165872C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.248.0/22
103.229.82.0/23
163.47.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:51:5a:f0:8b:6b:eb:3a:e7:b2:19:cd:72:6d:b9:11:f9:c3:
b8:97:b3:a1:a1:06:8c:66:6b:fa:27:5b:43:ff:7c:1d:fe:bd:
e1:d9:ac:ac:a2:e9:44:8c:27:b3:bf:83:78:6c:7d:89:2d:13:
b4:1b:09:3d:72:50:3d:85:31:2e:7e:8d:0a:4c:0e:74:af:62:
60:27:cb:16:51:b1:c8:86:07:55:a5:cd:d6:af:cd:48:07:52:
9d:54:d9:d7:99:f0:a1:0b:55:08:bf:11:e2:5f:53:03:3c:96:
1a:cc:56:7a:ee:f5:fd:7e:78:c1:d0:44:a2:65:cb:96:cb:8d:
12:5c:3d:87:24:6d:06:3f:ab:c6:ed:65:e0:ab:d2:b1:f2:f5:
ab:0b:7f:d7:4f:31:59:90:56:09:97:ad:c0:74:15:56:7d:f6:
11:7f:f2:51:51:db:29:07:4e:1d:98:9d:25:90:df:96:93:62:
24:0c:e7:85:df:c5:a8:fd:85:a8:89:c1:de:59:0c:77:59:e7:
28:2a:b1:3b:44:bd:1d:af:b4:a2:b0:9a:33:3d:9e:56:e1:3e:
15:e0:99:df:6d:c6:03:0c:ea:f6:9a:05:2e:bc:d1:7d:e0:66:
bf:74:58:8e:35:f1:d5:da:3c:3a:05:1a:86:d5:89:0a:85:d0:
99:9d:b6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:20 2026 by rpki-client