
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/4405F70C03AE11F08ECE4754C4F9AE02.roa
File: 4405F70C03AE11F08ECE4754C4F9AE02.roa (raw, json)
Hash identifier: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=
Subject key identifier: 60:F1:CF:EF:72:1A:18:71:C2:B9:51:10:96:35:E0:7F:DD:01:22:96
Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial: 025B
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/4405F70C03AE11F08ECE4754C4F9AE02.roa
Signing time: Wed 25 Mar 2026 02:35:45 +0000
ROA not before: Wed 25 Mar 2026 02:35:45 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153656
IP address blocks: 103.163.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Validity
Not Before: Mar 25 02:35:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c34a01-73b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:68:b8:4d:c6:b6:a9:09:6c:37:c0:5b:30:
55:51:e3:72:85:22:84:8e:3d:48:25:dc:91:df:70:
c1:41:e3:d5:24:31:3b:02:81:5f:df:f6:6e:3d:45:
eb:4e:e1:09:aa:07:55:e5:63:6d:84:3b:81:55:7e:
71:db:d4:ac:d9:ba:6f:51:1c:ff:3f:ed:be:fa:63:
cb:a1:84:bb:61:65:78:71:10:88:62:bd:df:bd:b7:
df:c3:2a:d6:aa:8b:21:cd:14:dc:a4:bb:50:b1:9b:
35:c0:51:23:3e:24:4b:d8:20:2e:6a:98:07:3c:dc:
58:3c:77:99:48:72:8a:98:1a:17:e1:a8:a6:a9:2f:
c0:b1:9a:13:9a:ba:eb:6d:19:01:5f:e1:54:f8:00:
75:56:f0:82:51:b2:8c:49:b9:a8:2a:0e:69:3a:40:
b9:a1:6b:b8:21:15:35:27:64:85:20:61:b8:41:3e:
c2:5a:55:12:5e:af:f9:23:30:d1:6c:1b:c8:02:fa:
65:eb:b6:de:5b:8b:62:89:6e:bf:8e:09:c3:c6:7a:
aa:8b:30:3f:1c:6e:e7:1d:0b:7e:eb:fd:30:b8:2c:
58:4e:6c:7c:34:77:65:ef:fa:50:40:2a:3d:fd:bf:
1c:a0:c1:3c:dc:48:ec:f9:20:b6:f0:26:d5:63:fb:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:CF:EF:72:1A:18:71:C2:B9:51:10:96:35:E0:7F:DD:01:22:96
X509v3 Authority Key Identifier:
keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/4405F70C03AE11F08ECE4754C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.208.0/24
Signature Algorithm: sha256WithRSAEncryption
53:dd:de:8d:a8:26:c0:e9:eb:f3:01:93:1a:b2:03:d1:2c:bf:
f1:f0:dc:2f:f9:eb:cb:a7:fe:52:06:f8:f9:2c:5a:8e:63:cf:
87:2a:5c:7f:89:57:31:ec:9e:b3:c7:f6:3d:29:2a:3f:48:e9:
fb:8b:2e:83:2f:ac:a6:d5:39:e1:39:ae:89:f4:3c:75:42:bf:
8f:a1:b2:3d:bd:19:9a:1d:14:69:eb:65:91:3e:e6:eb:7d:4c:
6b:3b:6d:d6:fe:38:18:b9:65:77:36:cb:65:af:06:9b:69:c8:
8e:18:70:3a:19:dc:db:97:8a:77:4f:46:9b:91:a3:2b:2b:6e:
62:38:6f:b5:34:99:3b:2e:f7:ca:ed:ed:da:35:54:54:89:a3:
9a:39:04:0a:10:02:46:c2:62:9d:a4:60:48:39:ed:d2:b1:96:
a0:8b:61:ac:65:dc:b5:cc:f0:51:4b:df:5f:57:11:c2:d9:7c:
13:c5:f4:4c:26:45:2d:56:2c:d7:2e:60:bd:07:81:17:69:a9:
3d:26:88:ec:1c:91:d7:6f:4f:67:e7:e0:ca:6c:bd:1c:55:1a:
77:ad:34:db:76:8b:74:c4:9a:5a:f0:fc:16:5c:ee:2f:90:ea:
7c:fc:ef:e0:70:a6:48:e5:9c:ea:5b:5c:ee:42:b1:fe:88:5f:
c8:32:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:37 2026 by rpki-client