
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F6722FA6822411F088762570C4F9AE02.roa
File: F6722FA6822411F088762570C4F9AE02.roa (raw, json)
Hash identifier: FYa4vN/cUGv4uAuMbz/mOKfD6eVvy62iEPGrtmeoWO0=
Subject key identifier: 44:B8:B0:96:AC:26:50:E6:9E:FA:54:F7:A1:2D:87:4E:AF:7A:05:A5
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0C24
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F6722FA6822411F088762570C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:48:34 +0000
ROA not before: Wed 07 Jan 2026 07:58:50 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 202736
IP address blocks: 43.239.104.0/24 maxlen: 24
43.239.105.0/24 maxlen: 24
45.124.204.0/24 maxlen: 24
45.124.205.0/24 maxlen: 24
45.124.206.0/24 maxlen: 24
45.124.207.0/24 maxlen: 24
103.25.100.0/24 maxlen: 24
103.25.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Jan 7 07:58:50 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48a02-4f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:b5:ff:3f:44:37:94:2d:b1:d9:a6:65:57:
71:fe:34:41:42:d8:e5:37:d0:bb:f1:8f:53:49:44:
b0:11:73:49:95:bf:7f:67:0b:61:f0:65:e0:01:b3:
f3:38:0a:0e:5b:bd:c3:35:02:3b:25:bc:54:df:04:
dd:0a:8d:a8:04:03:16:57:d0:2b:e5:34:a7:88:ff:
70:82:03:c3:08:80:d1:50:f1:09:b6:d2:bc:0e:f7:
b8:23:26:3a:7c:58:fd:7f:e1:8a:43:1f:d0:42:5a:
55:50:3f:cf:2b:90:89:05:43:4c:00:54:eb:91:00:
ed:9f:48:7c:fb:08:bd:35:44:77:71:dc:60:d9:72:
04:e3:6d:1e:6d:48:df:d5:7c:06:c3:06:c6:d4:08:
c3:c5:8e:bc:ea:ea:37:9b:cf:21:75:b4:bd:e6:10:
0d:8e:aa:69:3c:58:2c:74:83:f5:68:3a:cc:57:0c:
f0:32:12:07:52:fd:07:52:01:e7:80:78:77:37:8e:
78:a5:50:c3:ae:66:f5:7e:6b:92:c1:56:ee:30:78:
fa:75:80:fc:c0:4a:5b:4c:a9:35:c2:ad:c8:d2:5c:
62:50:07:86:d3:8b:a2:bf:3a:80:b8:17:be:0f:a1:
0f:f8:da:fe:f0:ba:fd:69:88:87:a6:b8:96:80:df:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B8:B0:96:AC:26:50:E6:9E:FA:54:F7:A1:2D:87:4E:AF:7A:05:A5
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F6722FA6822411F088762570C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.104.0/23
45.124.204.0/22
103.25.100.0/23
Signature Algorithm: sha256WithRSAEncryption
42:5d:63:30:b8:22:fc:fe:9d:2c:f7:b6:46:92:4d:00:fc:ab:
00:70:7c:5f:8e:6d:59:df:49:63:8b:17:85:cc:4d:cb:ed:01:
82:41:c9:b2:f3:19:e0:2d:49:12:60:bd:55:c9:a7:ce:65:dd:
ac:8e:38:39:0a:be:4a:22:44:dd:c0:61:d3:cf:7d:34:07:be:
b0:e7:15:3c:19:fd:ea:3a:d0:ec:ba:d5:5d:34:7d:d2:95:ff:
5b:30:fa:ff:2a:67:6c:e6:25:8a:6b:ef:2b:97:b4:92:b0:70:
b9:65:72:b4:a2:85:ec:84:5c:87:57:2d:dd:2c:c1:19:6c:ab:
43:59:6f:c8:05:15:5e:0c:af:3d:af:8f:1a:37:dc:7d:ad:b3:
c4:87:e8:c9:ab:88:39:5a:ca:64:11:07:e3:40:4b:91:0d:2a:
8a:a0:dc:89:0f:8c:91:05:74:55:24:89:b5:6f:ac:6c:b3:c3:
4c:7c:42:ad:68:10:2b:8e:62:4b:3c:e8:d9:37:21:a5:aa:5e:
b2:98:62:c1:65:60:b4:66:3a:21:79:84:a7:ee:c8:f1:2f:72:
b4:e0:bd:a1:4a:e3:0b:11:76:0a:2c:08:36:46:7f:2f:aa:51:
a6:95:90:f9:96:74:71:c9:92:a9:d0:8c:3b:91:d0:60:69:5e:
d7:65:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:27 2026 by rpki-client