
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa
File: D45022C8CEC211EE80F08B36C4F9AE02.roa (raw, json)
Hash identifier: 05ZHy6hO3wsV4N6+mrX/VlbtT5elT4sh4fwh+jsjFMU=
Subject key identifier: 7A:DD:88:49:BE:D1:B3:AB:B2:22:E7:0B:60:7E:E4:CC:15:79:B9:6E
Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Certificate serial: 01CB
Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa
Signing time: Mon 13 Jul 2026 04:30:12 +0000
ROA not before: Mon 13 Jul 2026 04:30:12 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 24225
IP address blocks: 103.67.240.0/23 maxlen: 24
103.67.242.0/24 maxlen: 24
103.67.243.0/24 maxlen: 24
203.160.48.0/24 maxlen: 24
203.160.50.0/23 maxlen: 24
2405:da80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Validity
Not Before: Jul 13 04:30:12 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5469d4-fec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:4f:7f:2c:fa:73:a4:c2:55:2b:86:ed:24:
8a:1d:76:14:78:49:f1:10:a8:25:e1:7f:9f:b5:5c:
49:78:f5:f1:3b:ac:c4:34:54:33:dd:ab:0b:3f:70:
92:07:35:52:e7:1d:d7:fb:0f:82:fe:6f:aa:cb:95:
9d:9a:cc:06:93:77:a2:eb:76:74:c7:18:39:5a:14:
92:bd:04:93:89:dc:0b:5d:ad:27:7d:60:26:55:89:
0d:d6:49:82:a8:03:7b:c2:f8:7b:16:15:6d:3a:b6:
a5:11:55:ee:34:56:0b:6b:1a:86:a8:e8:a5:31:c1:
db:b7:ae:3a:b6:0b:30:79:ea:85:e1:b7:18:5e:8c:
33:5c:46:72:11:44:71:b7:57:f3:cb:52:b1:4a:7a:
76:4b:b3:53:24:5b:0f:80:aa:63:bb:20:d5:93:2c:
32:90:63:08:31:7a:e1:e4:64:49:5d:de:fb:b2:95:
e9:4f:42:02:bc:00:6e:bf:46:39:2c:a2:4f:35:68:
e9:7a:4c:39:b7:23:71:95:65:22:f3:f7:d1:94:dc:
78:fa:d2:f9:41:89:07:ff:8f:68:63:5c:7e:66:03:
60:37:20:44:4c:07:ca:b5:dd:b5:52:05:2a:57:81:
bf:a5:02:ce:3b:f6:c2:bb:72:28:13:28:ca:77:de:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:88:49:BE:D1:B3:AB:B2:22:E7:0B:60:7E:E4:CC:15:79:B9:6E
X509v3 Authority Key Identifier:
keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.240.0/22
203.160.48.0/24
203.160.50.0/23
IPv6:
2405:da80::/32
Signature Algorithm: sha256WithRSAEncryption
9b:89:e7:cf:83:fc:17:58:56:3c:f2:de:8d:9f:7a:90:98:1f:
09:1f:ca:70:34:1c:cf:9d:8b:af:09:1e:76:e2:b6:d4:d0:bc:
57:3e:0e:c4:68:53:c8:3a:49:16:b2:2c:4c:b3:b4:ea:5f:7d:
26:72:b5:8f:f6:3d:73:0d:6a:4b:23:de:9c:d7:3a:98:bb:db:
b9:1a:82:31:64:58:19:fb:45:d5:ce:13:04:ed:20:16:af:78:
53:77:83:50:ae:2d:a4:da:b2:6a:a1:ff:5f:d2:cf:38:15:44:
38:8d:a6:5a:6c:91:45:bd:e6:77:14:50:a6:62:0f:f3:f0:23:
ff:45:e8:ac:3f:ea:bb:9c:1e:47:a1:6d:8a:97:c9:ed:f8:4e:
74:a7:fe:07:47:94:ab:ce:f1:f7:67:5a:2e:3e:46:d4:64:b1:
3d:70:87:95:43:82:e8:35:56:0c:9d:61:de:97:f2:97:82:1f:
b8:15:b3:40:91:03:4f:c6:ea:8c:5d:08:25:4d:7b:65:80:59:
56:02:f3:72:11:d4:09:32:66:08:e9:22:57:86:c7:b7:fd:ba:
45:53:12:23:4f:28:67:5a:61:b6:b7:a0:7e:6b:30:90:a9:43:
98:9c:c9:6c:d8:2f:0d:01:86:08:49:9c:71:a8:c8:4d:43:2c:
21:28:7b:29
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD
MDg1NDZFMkIwHhcNMjYwNzEzMDQzMDEyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU0NjlkNC1mZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu39Pfyz6c6TCVSuG7SSKHXYUeEnxEKgl4X+ftVxJePXxO6zENFQz3asLP3CS
BzVS5x3X+w+C/m+qy5WdmswGk3ei63Z0xxg5WhSSvQSTidwLXa0nfWAmVYkN1kmC
qAN7wvh7FhVtOralEVXuNFYLaxqGqOilMcHbt646tgsweeqF4bcYXowzXEZyEURx
t1fzy1KxSnp2S7NTJFsPgKpjuyDVkywykGMIMXrh5GRJXd77spXpT0ICvABuv0Y5
LKJPNWjpekw5tyNxlWUi8/fRlNx4+tL5QYkH/49oY1x+ZgNgNyBETAfKtd21UgUq
V4G/pQLOO/bCu3IoEyjKd96bqQIDAQABo4ICezCCAncwHQYDVR0OBBYEFHrdiEm+
0bOrsiLnC2B+5MwVebluMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF
QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ3QjYvOTA1RDdGRUVDRUMxMTFFRThDRjAxNzQwQzRGOUFFMDIvRDQ1MDIyQzhD
RUMyMTFFRTgwRjA4QjM2QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQCZ0PwAwQAy6AwAwQBy6AyMA0EAgACMAcDBQAkBdqAMA0GCSqGSIb3
DQEBCwUAA4IBAQCbiefPg/wXWFY88t6Nn3qQmB8JH8pwNBzPnYuvCR524rbU0LxX
Pg7EaFPIOkkWsixMs7TqX30mcrWP9j1zDWpLI96c1zqYu9u5GoIxZFgZ+0XVzhME
7SAWr3hTd4NQri2k2rJqof9f0s84FUQ4jaZabJFFveZ3FFCmYg/z8CP/ReisP+q7
nB5HoW2Kl8nt+E50p/4HR5SrzvH3Z1ouPkbUZLE9cIeVQ4LoNVYMnWHel/KXgh+4
FbNAkQNPxuqMXQglTXtlgFlWAvNyEdQJMmYI6SJXhse3/bpFUxIjTyhnWmG2t6B+
azCQqUOYnMls2C8NAYYISZxxqMhNQywhKHsp
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:33:58 2026 by rpki-client