
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/46A2104603CF11ECA480B07CC4F9AE02.roa
File: 46A2104603CF11ECA480B07CC4F9AE02.roa (raw, json)
Hash identifier: YWL2tnOxZhR6Kv+bhZGzV6FUKHaCEBSKA7cxdxelpv4=
Subject key identifier: 35:19:03:2A:B5:DF:AB:1C:3F:0B:15:B4:FE:BA:97:05:3C:9A:DA:1A
Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
Certificate serial: 05B3
Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/46A2104603CF11ECA480B07CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:40:30 +0000
ROA not before: Fri 29 Aug 2025 00:16:27 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 146956
IP address blocks: 103.172.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl
rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1459 (0x5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
Validity
Not Before: Aug 29 00:16:27 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a433be-f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:b8:99:8d:56:2c:ad:02:82:57:d2:51:55:
c9:18:88:3c:48:04:be:c9:5d:98:85:8c:c9:ce:ee:
fb:56:27:28:eb:b2:54:a1:db:78:ef:3d:9d:e9:93:
c3:3a:27:4d:63:f0:e7:49:20:a8:d4:c2:b3:a2:5b:
7c:94:27:a7:ca:9c:55:68:e5:95:66:03:63:ee:d0:
4d:0c:0c:9a:53:eb:68:be:fc:9a:68:2d:92:63:2f:
23:70:69:2e:16:7e:25:de:51:ea:04:38:4d:e6:d8:
f6:ef:23:a9:5c:27:28:29:63:13:31:29:68:ba:30:
a8:bb:24:79:e4:b6:62:f9:a2:bd:3e:8e:ad:0c:9f:
b5:59:aa:a1:95:a4:be:cb:68:68:9b:4d:c9:a3:b1:
6c:81:a7:b5:71:4f:73:ab:c3:a4:c8:7f:d8:9f:bd:
71:bd:2b:63:41:d3:c4:32:bf:74:26:f9:32:e4:9d:
f9:d4:42:bf:c7:0f:99:20:a8:70:1b:a5:6e:ed:59:
67:f4:d7:fc:1f:8c:c3:cd:07:08:97:88:44:4d:66:
cb:31:41:34:83:a1:2a:2c:0a:27:05:17:80:03:81:
fb:d7:f5:45:d8:44:7b:c5:df:8f:82:5b:f1:78:64:
ef:27:b8:2a:44:97:3a:44:00:f4:09:6f:42:e9:fb:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:03:2A:B5:DF:AB:1C:3F:0B:15:B4:FE:BA:97:05:3C:9A:DA:1A
X509v3 Authority Key Identifier:
keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/46A2104603CF11ECA480B07CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.28.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:72:8b:ba:09:d8:1c:e1:dd:36:2f:5c:0e:d6:19:7c:e3:8d:
8e:66:1d:b3:a2:a2:8e:a6:7b:80:af:e9:40:45:88:b6:0d:78:
aa:26:13:11:61:df:28:b7:f0:e3:01:d5:9d:33:63:06:06:3f:
3b:3c:fd:ec:1f:53:ec:66:a5:01:c8:c1:a2:97:ea:cf:72:65:
88:e5:1e:d4:2d:75:7f:88:fb:ea:97:8f:c7:64:ea:84:1c:a8:
a5:c0:e2:8d:48:22:8b:98:74:59:74:69:05:36:06:da:16:7f:
0c:ab:cc:b2:6e:31:99:5a:70:86:ed:72:f7:ed:ad:62:b7:7a:
e8:79:d8:8a:80:64:1a:3e:e6:49:57:72:53:16:95:c0:e5:c4:
5d:4b:4e:c8:8f:1b:bf:cf:41:22:55:81:d3:1d:e6:c0:b6:53:
50:8c:6e:b1:98:5e:db:48:66:d5:73:72:9c:a2:6e:a8:27:ae:
69:a8:1c:6d:24:bf:ce:3c:85:d8:03:4b:bd:28:da:5f:45:b4:
7f:b4:a3:e7:1f:21:ae:dc:a6:bd:66:ef:90:9a:5f:c3:3e:20:
16:93:05:0c:2f:d4:db:0e:0c:62:1f:44:9f:ce:f4:cb:dc:f6:
d2:39:69:cd:ec:1e:4d:2e:37:d2:c7:2a:c0:e5:87:7e:8d:70:
0b:f7:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 10:18:35 2026 by rpki-client