
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/4157856E347511EB84CD472CC4F9AE02.roa
File: 4157856E347511EB84CD472CC4F9AE02.roa (raw, json)
Hash identifier: zq6YsHOFAkCUjOwvFtu/Gf7IKiFUQhFU7rExUxXP4/k=
Subject key identifier: FD:C6:0E:54:41:C9:06:C6:72:E6:4D:88:7B:EB:D5:9F:19:5C:49:FD
Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial: 07BE
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/4157856E347511EB84CD472CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:27:42 +0000
ROA not before: Wed 08 Oct 2025 21:53:32 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132484
IP address blocks: 103.73.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Validity
Not Before: Oct 8 21:53:32 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a430be-7f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:ca:4c:ca:f2:ec:f7:52:76:f7:1b:f8:a3:
c9:8c:b9:3e:8a:ff:b3:de:f2:ee:6a:37:19:25:10:
2d:92:1b:b5:3b:df:f7:c1:1c:25:9a:87:6b:17:6b:
79:36:78:55:0e:15:d7:51:a6:2a:a9:c6:c5:0d:6f:
5d:c4:a5:0a:d2:f5:5c:67:59:12:b1:e4:9f:7f:1b:
d4:f8:1c:ae:70:78:2a:ff:a0:9d:b4:b7:48:b8:2f:
1d:cb:eb:9a:20:71:fd:de:cd:c5:41:ca:f9:64:82:
c0:59:ec:05:70:76:f9:b0:22:5d:7a:7f:9b:be:3a:
9b:c6:a6:a3:f9:41:74:23:a1:4d:6f:56:f3:a7:60:
3e:50:c7:2f:e6:86:73:01:d4:e7:d6:60:1b:f4:73:
95:66:49:36:12:d3:65:67:bd:03:53:1a:41:ad:74:
f5:fa:e1:dd:e7:4e:64:b1:01:b5:c6:a1:a8:89:7c:
4f:e9:24:cc:25:35:89:5c:0d:7c:03:27:2b:0a:5e:
fe:6f:35:d5:e4:19:af:45:54:cb:d7:28:06:65:65:
73:26:e9:2c:85:2d:f0:b4:24:90:7c:b4:f2:17:47:
6d:aa:46:cd:3c:4b:e6:50:99:15:0c:aa:06:4e:bd:
44:72:ba:bb:e5:56:9d:3c:39:f2:a4:06:93:c4:c4:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C6:0E:54:41:C9:06:C6:72:E6:4D:88:7B:EB:D5:9F:19:5C:49:FD
X509v3 Authority Key Identifier:
keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/4157856E347511EB84CD472CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6e:68:60:ac:55:ca:24:56:61:19:a9:00:f2:a4:2d:56:d8:
64:08:65:07:00:95:4f:53:98:76:07:27:51:26:52:d1:fe:5f:
f7:28:c6:e5:a3:40:1e:24:79:08:3a:3b:d0:53:9d:27:9a:6d:
ea:d3:c6:3d:ef:e9:28:89:65:05:4d:3a:e2:71:16:6f:1b:e8:
f5:fe:5b:cd:ba:a4:53:1e:37:6f:7d:96:7b:40:82:c6:95:8f:
db:a5:9a:fd:ed:f1:ee:91:2a:31:d1:36:fb:38:64:5b:19:c5:
93:48:74:5d:00:a4:e9:8d:4a:4e:94:29:96:fb:57:1c:24:03:
33:a9:5c:e4:e8:74:46:15:b8:42:63:0b:99:91:86:59:45:18:
30:26:5a:fd:01:95:f7:eb:80:10:db:9c:fa:c0:fb:65:cc:8c:
d9:ac:c7:92:d5:df:00:79:52:15:f2:20:01:1b:26:d0:4f:1a:
ce:ef:1f:af:62:91:7d:b8:89:a4:71:0f:58:e0:20:0e:d4:6e:
9a:fc:a8:7f:97:09:76:8c:29:36:52:8f:9c:4e:bf:7c:c4:fc:
8b:7f:c3:f3:74:19:6f:f7:7c:8b:c7:15:1e:48:2d:ce:15:f4:
c8:9d:7a:11:ef:fd:c1:d6:9d:24:9c:95:c0:3b:fb:23:e9:4d:
af:85:7a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:48 2026 by rpki-client